Scemu - X86 32bits Emulator, For Securely Emulating Shellcodes
http://www.kitploit.com/2022/01/scemu-x86-32bits-emulator-for-securely.html
🗣Dinosn


🎖@malwr

🇷🇺🇺🇲 The FSB, after an appeal from the United States, detained a group of REvil hackers who sent out viruses to extort money.

At 25 addresses of places of stay, 14 members of the organized criminal community seized over 426 million rubles, including in cryptocurrency, 600 thousand dollars, 500 thousand euros, as well as computer equipment, crypto wallets used to commit crimes, 20 premium cars, acquired with money obtained by criminal means.

3DO M2 Giant SDK Source Code Dump! The Cancelled 3DO M2 Laid Bare with Files, Details and More!
🗣chicagogamecollector

already proving very fruitful to some of our reverse engineering projects. If anyone is into rare gaming lmk. Always need more people in the community :)
👤chicagogamecollector


🎖@malwr

FirmWire/FirmWire: FirmWire is a full-system baseband firmware emulation platform for fuzzing, debugging, and root-cause analysis of smartphone baseband firmwares
🗣igor_sk

Is this not based on the Qiling framework? (For those of you who haven't clicked through to the repo, they haven't published the code yet)
👤Jonathan-Todd


🎖@malwr

While I'm still writing the 2nd article of Malware Analysis Series (MAS), which I'm on page 43 and far from the end, I dropped a short and simple write-up on malicious document to help beginners on threat analysis.

https://exploitreversing.com/2022/01/14/malicious-document-analysis-example-2/

#maldoc #threatanalysis
🗣ale_sp_brazil


🎖@malwr

Use of Alternate Data Streams in Research Scans for index.jsp. #ntfs #ads #jsp https://i5c.us/d28240
🗣sans_isc


🎖@malwr

Project Ares is a PoC loader written in C/C++ based on the Transacted Hollowing technique. It features:
* PPID spoofing
* Dynamic function resolution with API hashing
* NTDLL unhooking
* AES256 CBC Encryption
and more!
https://github.com/Cerbersec/Ares
🗣cerbersec


🎖@malwr

Just released my DLL Injection blog post. The post covers:

1. How to use LoadLibrary to inject a DLL
2. How to load a DLL into memory, parse the headers, load sections, perform relocations, resolve imports, and finally inject the DLL into another process
https://kasimir123.github.io/blog-posts/DLL%20Injection.html
🗣Abraxus7331


🎖@malwr

🛡️ Awesome Cloud Security Resources ⚔️

https://github.com/4ndersonLin/awesome-cloud-security

#cloudhacking #cybersecurity #appsec #bughunting
🗣0xAsm0d3us


🎖@malwr

OH SHIT HERE WE GOOOOOO
https://www.microsoft.com/security/blog/2022/01/15/destructive-malware-targeting-ukrainian-organizations/
🗣jfslowik


🎖@malwr

Released VeraCryptThief which is an exercise of mine of playing with API hooking to capture clear-text VeraCrypt passwords and save them on disk 🔐 Features: hooking via Detours, reflective DLL shellcode via sRDI, process injection via D/Invoke in C# 🔥 https://github.com/snovvcrash/VeraCryptThief
🗣snovvcrash


🎖@malwr

Took a quick look at Stage1.exe malware, as reported by Microsoft. Whipped up a quick (and simple) yara rule for it. #100DaysofYARA
🗣CD_R0M_


🎖@malwr

A few more tricks when dealing with string literals in IDA:

https://hex-rays.com/blog/igors-tip-of-the-week-72-more-string-literals/

#IgorsTipOfTheWeek #IDAtips #IDAPro #HexraysDecompiler
🗣HexRaysSA


🎖@malwr

IOCTLDump https://github.com/Kharos102/IOCTLDump #pentesting #CyberSecurity #Infosec
🗣ptracesecurity


🎖@malwr