In my introductory post I had been talking about dynamic memory allocation and I referenced various solutions that are used to tackle this…

Join Didier Stevens and I (mostly him) talking about the footprints left behind when us red team folks utilize tools such as Cobalt Strike to infiltrate and set up command & control! This important information can help both blue and red, but for the red side…

Tutorial ini sekedar memperkenalkan cara memakai Ghidra dan IDA (baik pro maupun free). Tadinya saya hanya ingin membahas Ghidra saja, tapi karena saya juga belum pernah menulis tutorial IDA, jadi sekalian saja, sekaligus bisa dibandingkan langsung.



Perlu…

An automated Breach and Attack Simulation lab with terraform. Built for IaC stability, consistency, and speed. - iknowjason/AutomatedEmulation

Authors: Michael Kouremetis

SANS PenTest HackFest 2022

Speaker: Jean-François Maes, Certified Instructor, SANS Institute

In this presentation, Jean-Francois Maes will talk about shellcode loaders and some opsec considerations when dropping to disk + talk about some popular evasion…

Find approachable and high-value methods that can be used to hunt for malware infrastructure in this guest blog from Embee Research.

Jeremy Blackthorne goes over the major features of Ghidra in his highly interactive 2 hour workshop Reversing with Ghidra.

As seen in most security blog posts today, binary diffing tools are essential for reverse engineering, vulnerability research, and malware analysis. Patch diffing is a technique widely used to identify changes across versions of binaries as related to security…

A detailed walkthrough of a buffer overflow vulnerability exploitation in a C program. This tutorial covers the entire process, from setting up the initial buffer in the main function, manipulating memory in the do_vuln function, to ultimately gaining control…

Get OPSEC considerations for using Beacon with in-memory YARA scanning and learn a malleable C2 profile that gives robust evasion against such defensive techniques.

By Mike Dame & Daniel Purcell

Hands-on cybersecurity projects to enhance skills in phishing investigation, malware analysis, network intrusion detection, and DDoS attack response. - 0xrajneesh/Incident-Response-Projects-for-Beg...

The Qualys Threat Research Unit (TRU) has discovered a Remote Unauthenticated Code Execution (RCE) vulnerability in OpenSSH’s server (sshd) in glibc-based Linux systems. CVE assigned to this…