KitPloit - PenTest Tools!
DeathSleep - A PoC Implementation For An Evasion Technique To Terminate The Current Thread And Restore It Before Resuming Execution, While Implementing Page Protection Changes During No Execution

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEierHTTP4Pj3H2xPVCaKwYvLXRxzGts64sX47BNeX88REEulwHtQVOV9tP0GIGYQ5RkPO9sy1O172BhIqgr0E6ssx3Echh1P5njQjeaRMdFpq76zdammU0m2lbOUlFsS3lXvvl7Z5C6kFGfCcGKyjKbprM5yMcYJYrHkbXKf8TuT3_4rxzyYfUFM-HAqw/w640-h360/DeathSleep_1_ezgif-5-ee95c9b3b0.gif
A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.
Intro

Sleep and obfuscation methods are well known in the maldev community, with different implementations, they have the objective of hiding from memory scanners while sleeping, usually changing page protections and even adding cool features like encrypting the shellcode, but there is another important point to hide our shellcode, and is hiding the current execution thread. Spoofing the stack is cool, but after thinking a little about it I thought that there is no need to spoof the stack… if there is no stack :)

The usability of this technique is left to the reader to assess, but in any case, I think it is a cool way to review some topics, and learn some maldev for those who, like me, are starting in this world.

The main implementation showed here holds everything that we need to take out of the stack in the data section, as global variables, but an impletementation moving everything to the heap will be published soon. It aims to show some key modifications that needs to be done to make this code pic and injectable.

This repository is mirrored between GitHub and GitLab.
Download DeathSleep

___________________________
@hacking_Attack
@Hacking_Video

LDAP Injection and Why it Occurs

WHAT IS LDAP INJECTION?Continue reading on CodeX »
Read more...

Hacking on Medium
The /proc directory - Part 1

https://cdn-images-1.medium.com/max/1881/1*LLNV5r9Wf8Qoe4-WQL4HgA.png
If you are familiar with working with GNU/Linux, you will know how important it is to know the status of a system by inspecting its…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Who Is A White Hat Hacker?

https://cdn-images-1.medium.com/max/1200/0*8LPVOzFx8_z9OKH3
When you hear hacking or hackers, you probably picture a bad scene of someone trying to break into websites or company data and hijacking…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
100 Essential Cybersecurity Concepts That Every Developer Must Know (Part 2: 11–20)

https://cdn-images-1.medium.com/max/2600/0*iaRDMS3rBOuRWJjB
Your go-to checklist for building secure applications

Continue reading on Level Up Coding »

___________________________
@hacking_Attack
@Hacking_Video

Introduction to Threat Intelligence ETW
https://www.reddit.com/r/redteamsec/comments/xgp2up/introduction_to_threat_intelligence_etw/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://undev.ninja/introduction-to-threat-intelligence-etw/) [comments] (https://www.reddit.com/r/redteamsec/comments/xgp2up/introduction_to_threat_intelligence_etw/)

___________________________
@hacking_Attack
@Hacking_Video

Evading WinDefender ATP credential-theft: kernel version
https://www.reddit.com/r/redteamsec/comments/xgp3cc/evading_windefender_atp_credentialtheft_kernel/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://b4rtik.github.io/posts/evading-windefender-atp-credential-theft-kernel-version/) [comments] (https://www.reddit.com/r/redteamsec/comments/xgp3cc/evading_windefender_atp_credentialtheft_kernel/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cloning internal Google repos for fun and… info?

https://external-preview.redd.it/PTEM5Ij7AtiI5yUu6oSU0D_qOMHnuPoYyzu4PEeOhqE.jpg?width=640&crop=smart&auto=webp&s=48df25aa92a610541c64fbe790beea8fce95c28c submitted by /u/lukeberner
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
LockBit ransomware group pays its first ever $50k bug bounty

https://external-preview.redd.it/nOh_aQ9om16ZgfZZY5GsC7ZT0uHTTXuZIG4LJQSHKwQ.jpg?width=108&crop=smart&auto=webp&s=e2b7246aec375ecab3e6f44207713ef61bb71c42 submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty Challenge Update #1 — Bug Hacking

Hi everyone.Continue reading on Medium »
Read more...

Bug Bounty Challenge Update #1 — Bug Hacking
https://medium.com/@giedrius.saulenas/bug-bounty-challenge-update-1-bug-hacking-78c9ee4c87d3?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi everyone.Continue reading on Medium » (https://medium.com/@giedrius.saulenas/bug-bounty-challenge-update-1-bug-hacking-78c9ee4c87d3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Story of a reserved CVE-2022–23361

Hello hackers, hope you guys are doing well and hunting lots of bugs. This is gonna be my first write-up, as the title says I will tell…Continue reading on Medium »
Read more...

Story of a reserved CVE-2022–23361
https://vineet08.medium.com/cve-2022-23361-2c81d836c6fe?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video