Github - ZygiskFrida: Injecting frida gadget via Zygisk
🗣Lico_

This is a little tool I have been working on. It is an alternative way to inject frida into android processes. Instead of embedding the gadget into the APK or frida-server injecting it via ptrace, this module loads the gadget via Zygisk. I found it useful as it is sometimes able to bypass simple checks out of the box and decided to open source it.

Didn‘t have much opportunity to work with C/C++ before and used this to learn a bit about zygisk modules and the language. So any feedback, contributions and suggestions are welcome.
👤Lico_


🎖@malwr

Introduction to Command and Control Servers | TryHackMe Red Team Track
In this video walk-through, we covered an introduction to C2 servers. We explained C2 agents, payloads and their types (staged vs stageless), Droppers, beacons in addition to C2 agents obfuscation methods. We also covered some of the popular C2 servers including but not limited to Metasploit, Powershell Empire, Armitage and Cobalt Strike. This was part of the TryHackMe red team pathway.

Video is here
🗣MotasemHa

Thanks for the video! but I don't get why people still use Metasploit or Armitage in their red team engagements or to simulate attacks, these couple of frameworks are flagged by modern EDRs and mostly used by script kids IMHO. It would be much better if you switch them up with Covenant, Mythic, or Cobalt Strike.
👤KeyPrompt4278


🎖@malwr

One-click setup SCCM Lab (as snaplabs.io template) for offensive tool testing (or for anything else)
🗣an0n_r0

little bit more context: https://twitter.com/an0n_r0/status/1687230842601451522
👤an0n_r0


🎖@malwr

Vulnerable WordPress: Release 2023 July - Plugins:142 Vulns:179
🗣seyyid_

Par for the course.
👤DevSpectre1

To quote a wise man "WordPress is a remote shell with a handy blogging feature"
👤theskymoves


🎖@malwr

Creating a lightweight malware Scanner
Dear Cybersecurity experts,
I worked at a company where a lot of people would come by with their personal USB drives and use them to load documents onto computers inside the corporate network. These computers where outside of the internet and had no antivirus, meaning that if a virus would be loaded onto it using an USB it could damage the machine easily. Nobody ever checked the comtent of the usb drives before connecting them.

To prevent this, I came up with the simple solution of creating an application for the Raspberry Pi. The Raspberry Pi had a touchscreen, so when the user brought his usb drive, he would connect it to the raspberry pi, select it on the touchscreen and let it verify from the app. After it was confirmed from the application that the usb was clean, the user was allowed to connect it to the server. Even if a virus happened to infect the Raspberry Pi (very unlikely), it was easier to replace than a computer.

Since the Raspberry Pi 3 I used for the project didn't have that much resources to work with, the virus scanner I created was very simple and only used MD5 hashes to check for viruses. It compared each hashed file with a database and that's it. On one hand it's a very fast and lightweight approach, on the other hand it's not very secure.

So, since I'm not an Security expert myself, I wanted to ask you if you know any other systems I might use to check a file without using up too much resources. Sandboxing a file for example is probably not possible using just about 1GB Ram.

If you want to check it out, my project is open-source: Raspirus

I used the signatures in MD5 format from Virusshare for my database.
🗣Benben377

You could possibly try some sort of YARA implementation.

YARA:

https://virustotal.github.io/yara/

more resources and rule sets:

https://github.com/InQuest/awesome-yara
👤_hudsn


🎖@malwr