In this video, we build upon the introductory video on function flowcharts and delve deeper into the topic. Our focus is on the qflow_chart_t class, where we demonstrate how to enumerate basic blocks along with their predecessors and successors. Lastly, we…

Introduction Process Injection is a popular technique used by Red Teams and threat actors for defense evasion, privilege escalation, and other interesting use cases. At the time of this publishing,…

Contribute to xalicex/LOLDrivers_finder development by creating an account on GitHub.

Use YARA rules on Time Travel Debugging traces. Contribute to airbus-cert/yara-ttd development by creating an account on GitHub.

Signtool for expired certificates. Contribute to namazso/MagicSigner development by creating an account on GitHub.

Authored by: Anandeshwar Unnikrishnan Stage 1: GULoader Shellcode Deployment  In recent GULoader campaigns, we are seeing a rise in NSIS-based installers

tl;dr Golang is no C, but its OK. disclaimer: This is a personal opinion. C-nile people please do not hurt me. why would anyone want to do that This is debatable, but: C2 communication is way easier …

Introduction In this blog series, we will cover the topic of rootkits — how they are built and the basics of kernel driver analysis — specifically on the Windows platform. In this first part, we...

Contribute to nettitude/SharpWSUS development by creating an account on GitHub.