Process Memory Basics for Reverse Engineers - Tracking Memory With A Debugger (OALABS Tutorial)
🗣herrcore
🎖@malwr
🗣herrcore
🎖@malwr
YouTube
Process Memory Basics for Reverse Engineers - Tracking Memory With A Debugger [ Patreon Unlocked ]
Full Patreon tutorial (with examples):
https://www.patreon.com/posts/process-memory-1-72454056
-----
OALABS DISCORD
https://discord.gg/6h5Bh5AMDU
OALABS PATREON
https://www.patreon.com/oalabs
Twitch
https://www.twitch.tv/oalabslive
OALABS GITHUB
htt…
https://www.patreon.com/posts/process-memory-1-72454056
-----
OALABS DISCORD
https://discord.gg/6h5Bh5AMDU
OALABS PATREON
https://www.patreon.com/oalabs
Twitch
https://www.twitch.tv/oalabslive
OALABS GITHUB
htt…
Poseidon’s Offspring: Charybdis and Scylla - The attacks target a number of advertising SDKs within apps available via both Google’s Play Store and Apple’s App Store.
🗣digicat
🎖@malwr
🗣digicat
🎖@malwr
HUMAN Security
Poseidon’s Offspring: Charybdis and Scylla - HUMAN Security
HUMAN's Satori Threat Intelligence and Research Team uncovered a network of 89 Android and iOS apps committing various flavors of ad fraud.
Tips and tricks for reversing foreign architecture games
🗣jeandrew
Um, no, the 6809 is not the same as m68k. The latter is the later 68000 series.
👤ohmantics
🎖@malwr
🗣jeandrew
Um, no, the 6809 is not the same as m68k. The latter is the later 68000 series.
👤ohmantics
🎖@malwr
mahaloz.re
Tips and tricks for reversing foreign architecture games
Some common techniques used while reversing unknown architectures seen through the lens of an 80's game hacking challenge from 0CTF22
Hardware encrypted usb suggestions??
What products are we using for hardware encrypted drives to move data around and store forensic data securely?
🗣dfzachary
I’ve used Aegis and SiForce. I much prefer the latter as they are more reliable and less prone to disconnection due to power consumption issues.
👤ucfmsdf
Apricorn Aegis Padlock drives are the best!
👤no_sushi_4_u
🎖@malwr
What products are we using for hardware encrypted drives to move data around and store forensic data securely?
🗣dfzachary
I’ve used Aegis and SiForce. I much prefer the latter as they are more reliable and less prone to disconnection due to power consumption issues.
👤ucfmsdf
Apricorn Aegis Padlock drives are the best!
👤no_sushi_4_u
🎖@malwr
reddit
Hardware encrypted usb suggestions??
What products are we using for hardware encrypted drives to move data around and store forensic data securely?
What’s In A Bit – Designing, Using And Reverse-engineering Binary File Formats - Peter Bindels
🗣mttd
🎖@malwr
🗣mttd
🎖@malwr
YouTube
What’s In A Bit – Designing, Using And Reverse-engineering Binary File Formats - Peter Bindels
C++ on Sea Website: https://cpponsea.uk/
C++ on Sea Twitter: https://twitter.com/cpponsea
---
What’s in a Bit – Peter Bindels - C++ on Sea 2022
Slides: https://github.com/philsquared/cpponsea-slides/tree/master/2022
Ever tried to create a .COM program by…
C++ on Sea Twitter: https://twitter.com/cpponsea
---
What’s in a Bit – Peter Bindels - C++ on Sea 2022
Slides: https://github.com/philsquared/cpponsea-slides/tree/master/2022
Ever tried to create a .COM program by…
Blue Team Lab guide 7 - End Devices
Hello everyone, after a small break I wrote another article in my series for Blue Team Home Lab, this time the focus was on end devices, that represent the corporate devices. Hope you'll like it. :)
https://facyber.me/posts/blue-team-lab-guide-part-7/
🗣facyber
🎖@malwr
Hello everyone, after a small break I wrote another article in my series for Blue Team Home Lab, this time the focus was on end devices, that represent the corporate devices. Hope you'll like it. :)
https://facyber.me/posts/blue-team-lab-guide-part-7/
🗣facyber
🎖@malwr
facyber
Building Blue Team Home Lab Part 7 - Corporate LAN (End Devices)
After a while, I returned with a new tutorial, a continuation of my Blue Team Home Lab series, and this time it’s about adding the end devices to our lab. For this part, we are going to use Windows 7 and Windows 10 evaluation images, which can be downloaded…
monomorph: MD5-Monomorphic Shellcode Packer - Pack arbitrary shellcode into an executable that always has the same MD5 hash
🗣sanitybit
It’s interesting though, next step is to cause collisions with system files hashes and see what happens with AVs 😁
👤mrdantesque
Lmao
👤EvenIfIWantedTo
The output file will always have the same MD5 hash: 3cebbe60d91ce760409bbe513593e401
Well there we go AV vendors…
👤littlejob
🎖@malwr
🗣sanitybit
It’s interesting though, next step is to cause collisions with system files hashes and see what happens with AVs 😁
👤mrdantesque
Lmao
👤EvenIfIWantedTo
The output file will always have the same MD5 hash: 3cebbe60d91ce760409bbe513593e401
Well there we go AV vendors…
👤littlejob
🎖@malwr
GitHub
GitHub - DavidBuchanan314/monomorph: MD5-Monomorphic Shellcode Packer - all payloads have the same MD5 hash
MD5-Monomorphic Shellcode Packer - all payloads have the same MD5 hash - DavidBuchanan314/monomorph
🔥2👍1
MAR-10400779-1.v1 – Zimbra 1 - CISA received seven files for analysis. Six Java Server Pages (JSP) webshells and a Bourne Again SHell (bash) file. Five JSP webshell files are designed to parse inbound requests for commands for execution, download files, and upload files.
🗣digicat
🎖@malwr
🗣digicat
🎖@malwr
www.cisa.gov
MAR-10400779-1.v1 – Zimbra 1 | CISA
Notification This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained herein. The DHS does not endorse any commercial product…