Github - ZygiskFrida: Injecting frida gadget via Zygisk
🗣Lico_

This is a little tool I have been working on. It is an alternative way to inject frida into android processes. Instead of embedding the gadget into the APK or frida-server injecting it via ptrace, this module loads the gadget via Zygisk. I found it useful as it is sometimes able to bypass simple checks out of the box and decided to open source it.

Didn‘t have much opportunity to work with C/C++ before and used this to learn a bit about zygisk modules and the language. So any feedback, contributions and suggestions are welcome.
👤Lico_


🎖@malwr

Introduction to Command and Control Servers | TryHackMe Red Team Track
In this video walk-through, we covered an introduction to C2 servers. We explained C2 agents, payloads and their types (staged vs stageless), Droppers, beacons in addition to C2 agents obfuscation methods. We also covered some of the popular C2 servers including but not limited to Metasploit, Powershell Empire, Armitage and Cobalt Strike. This was part of the TryHackMe red team pathway.

Video is here
🗣MotasemHa

Thanks for the video! but I don't get why people still use Metasploit or Armitage in their red team engagements or to simulate attacks, these couple of frameworks are flagged by modern EDRs and mostly used by script kids IMHO. It would be much better if you switch them up with Covenant, Mythic, or Cobalt Strike.
👤KeyPrompt4278


🎖@malwr

One-click setup SCCM Lab (as snaplabs.io template) for offensive tool testing (or for anything else)
🗣an0n_r0

little bit more context: https://twitter.com/an0n_r0/status/1687230842601451522
👤an0n_r0


🎖@malwr

Vulnerable WordPress: Release 2023 July - Plugins:142 Vulns:179
🗣seyyid_

Par for the course.
👤DevSpectre1

To quote a wise man "WordPress is a remote shell with a handy blogging feature"
👤theskymoves


🎖@malwr