Vulnhub write-up: Five86–1 ( no metasploit )
I'd like to share my second attempt at a write up! I hope you will enjoy it, any suggestion welcome.
https://link.medium.com/XaOwiH6Q43
🗣kolima_
🎖@malwr
I'd like to share my second attempt at a write up! I hope you will enjoy it, any suggestion welcome.
https://link.medium.com/XaOwiH6Q43
🗣kolima_
🎖@malwr
Medium
Vulnhub write-up: Five86–1
After the classic VM bootstrap the first thing that I had to do is to obtain the IP of the target machine. Then I needed to use nmap…
Introduction to Malware Analysis | Common Terms | Tools to Get Started
🗣davidalbertozam
Excellent video.
👤GibsonAleph
🎖@malwr
🗣davidalbertozam
Excellent video.
👤GibsonAleph
🎖@malwr
YouTube
Malware Analysis Overview For Beginners | Common Terms & Tools
An overview for beginners to get started with malware analysis. You need to know the common terms, what are "Malware Packers", for instance. This will allow you to better approach the nature of any security incident. So, for starters, Malware analysis involves…
Tigress C Obfuscator v3.1 - now with self-modifying code
Tigress is a highly diversifying obfuscator for the C language that
supports many defenses against reverse engineering attacks. It is
available for download from
https://tigress.wtf
Tigress provides a large collection of obfuscating code transformations, including virtualization, dynamic obfuscation, self-modifying code, and control flow flattening. It also provides transformations designed to thwart particular static and dynamic analyses, such as alias analysis, dynamic taint analysis, and branch analysis. All transformations are randomized and can be freely combined to transform a single program into a large collection of diverse variants of arbitrary complexity.
Tigress have been used to generate reverse engineering challenges for students in security classes, in academic research, and in industrial settings to protect production code.
For examples of Tigress obfuscation scripts and generated code, see: https://tigress.wtf/recipes.html
🗣ua-tigress
I wonder how stringent they are regarding the source code process. Maybe it's possible to just hack some random professor and claim to have a legitimate research need.
👤PhisherPrice
🎖@malwr
Tigress is a highly diversifying obfuscator for the C language that
supports many defenses against reverse engineering attacks. It is
available for download from
https://tigress.wtf
Tigress provides a large collection of obfuscating code transformations, including virtualization, dynamic obfuscation, self-modifying code, and control flow flattening. It also provides transformations designed to thwart particular static and dynamic analyses, such as alias analysis, dynamic taint analysis, and branch analysis. All transformations are randomized and can be freely combined to transform a single program into a large collection of diverse variants of arbitrary complexity.
Tigress have been used to generate reverse engineering challenges for students in security classes, in academic research, and in industrial settings to protect production code.
For examples of Tigress obfuscation scripts and generated code, see: https://tigress.wtf/recipes.html
🗣ua-tigress
I wonder how stringent they are regarding the source code process. Maybe it's possible to just hack some random professor and claim to have a legitimate research need.
👤PhisherPrice
🎖@malwr
Google Removed Over 500 Chrome Extensions Due to Malware Concerns
🗣Reshamkadri
Chrome then uninstalled itself
👤8412risk
The article claims Duo has the list of extensions, but didn't link to it. Where is the list?
Edit: https://duo.com/labs/research/crxcavator-malvertising-2020
👤atoponce
🎖@malwr
🗣Reshamkadri
Chrome then uninstalled itself
👤8412risk
The article claims Duo has the list of extensions, but didn't link to it. Where is the list?
Edit: https://duo.com/labs/research/crxcavator-malvertising-2020
👤atoponce
🎖@malwr
solutionfactory.in
Google Removed Over 500 Chrome Extensions Due to Malware Concerns
Exploit Development: Panic! At The Kernel - Token Stealing Payloads Revisited on Windows 10 x64 and Bypassing SMEP
https://connormcgarr.github.io/x64-Kernel-Shellcode-Revisited-and-SMEP-Bypass/
🎖@malwr
https://connormcgarr.github.io/x64-Kernel-Shellcode-Revisited-and-SMEP-Bypass/
🎖@malwr
Connor McGarr’s Blog
Exploit Development: Panic! At The Kernel - Token Stealing Payloads Revisited on Windows 10 x64 and Bypassing SMEP
Revisiting token stealing payloads on Windows 10 x64 and diving into mitigations such as SMEP.
Patching MacOS Sketch.App for unlimited Trial in Ghidra
https://duraki.github.io/posts/o/20200214-sketch.app-patch-in-ghidra.html
🎖@malwr
https://duraki.github.io/posts/o/20200214-sketch.app-patch-in-ghidra.html
🎖@malwr
deviltux.thedev.id
Patching MacOS Sketch.App for unlimited Trial in Ghidra
<%= @description %>
pykd 0.3.4.12
🗣ussrhero
This project can help to automate debugging and crash dump analysis using Python. It allows one to take the best from both worlds: the expressiveness and convenience of Python with the power of WinDbg!
🎖@malwr
🗣ussrhero
This project can help to automate debugging and crash dump analysis using Python. It allows one to take the best from both worlds: the expressiveness and convenience of Python with the power of WinDbg!
🎖@malwr