Reverse Dungeon
@reverse_dungeon
4.39K subscribers
733 photos
59 videos
987 files
2.28K links
Reverser's notes
The Mentor
1989
Download Telegram
About
Blog
Apps
Platform
Join
Reverse Dungeon
4.39K subscribers
Reverse Dungeon
https://www.youtube.com/watch?v=GM9WQMrSkWk
YouTube
[BSL2022] Windows kernel rootkits for red teams - André Lima
In this presentation, André goes through details of not only things to consider when developing in the kernel but, most importantly, things to consider when developing malware for the Windows kernel.

He explains synchronization when the Operating System…
519 views
Reverse Dungeon
Forwarded from Ralf Hacker Channel (Ralf Hacker)
И ещё одно крутое исследование по обходу EDR!

(По утверждению автора: всех EDR)

https://0xdarkvortex.dev/hiding-in-plainsight/

#redteam #maldev
0xdarkvortex.dev
Hiding In PlainSight - Indirect Syscall is Dead! Long Live Custom Call Stacks
Dark Vortex provides various cybersecurity trainings, products and other services.
428 views
Reverse Dungeon
Forwarded from greg0r0 life&work
Please open Telegram to view this post
VIEW IN TELEGRAM
Reverse Dungeon
Forwarded from Order of Six Angles
3gstudent.github.io/archive
3gstudent-Blog
Archive
A Jekyll Blog Theme For Hackers
412 views
Reverse Dungeon
https://bytebreach.com/nsa-codebreaker-challenge-2022-writeup
Byte Breach
NSA Codebreaker Challenge 2022 Writeup - Byte Breach
A writeup of the 10 challenges from the NSA Codebreaker Challenge 2022
441 views
Reverse Dungeon
Forwarded from Violent_Maid
Пост-ржачных фактов вам на ночь:
Если мапать вендовый драйвер в момент инициализации патчгарда (см. KeInitAmd64SpecificState, ExpLicenseWatchInitWorker и KiFilterFiberContext), патчгард сочтет ваш драйвер ядром и начнет неистово "защищать" его.

Это не баг и не фича, просто особенность "архитектуры" такая (я не знаю как это назвать, придумайте сами)
❤2
375 views
Reverse Dungeon
https://github.com/MzHmO/Privileger
GitHub
GitHub - MzHmO/Privileger: Privileger is a tool to work with Windows Privileges
Privileger is a tool to work with Windows Privileges - MzHmO/Privileger
❤2
529 views
Reverse Dungeon
https://vk9-sec.com/privilege-escalation-unquoted-service-path-windows
581 views
Reverse Dungeon
offensive rootkit development.pdf
3.4 MB
Offensive Rootkit Development
❤3
1.08K views
Reverse Dungeon
https://guyinatuxedo.github.io
guyinatuxedo.github.io
Nightmare - Nightmare
Nightmare: an intro to binary exploitation / reverse engineering course based around CTF challenges.
❤3
1.05K views
Reverse Dungeon
Forwarded from 0% Privacy
#security #forensics #fw #bootkit #MitM #SMMrootkit
411 views
Reverse Dungeon
Forwarded from 0% Privacy
anti_firmware_forensics.pdf
7.5 MB
📕Detect Me If You Can - Anti-Firmware Forensics

📺 Download the recording of the speech.
SpiMitm.zip
44.6 KB
💥PoC: SpiMitm - SPI flash read MitM attack PoC for anti-firmware forensics

#security #forensics #fw #bootkit #MitM #SMMrootkit
398 views
Reverse Dungeon
Forwarded from club1337
https://straightblast.medium.com/my-poc-walkthrough-for-cve-2021-21974-a266bcad14b9
Medium
My RCE PoC walkthrough for (CVE-2021–21974) VMware ESXi OpenSLP heap-overflow vulnerability
Introduction
455 views
Reverse Dungeon
Forwarded from Violent_Maid
SMM & SMI

https://opensecuritytraining.info/IntroBIOS_files/Day1_07_Advanced%20x86%20-%20BIOS%20and%20SMM%20Internals%20-%20SMM.pdf
https://hackmd.io/@0xff07/SkMXAxUX9
https://www.synacktiv.com/ressources/lt-2019-02-12-bruno-pujos-bypassing-smm_ep.pdf
https://web.cecs.pdx.edu/~karavan/research/SMM_IISWC_preprint.pdf
https://www.ssi.gouv.fr/uploads/IMG/pdf/IT_Defense_2010_final.pdf
http://www.c7zero.info/stuff/ANewClassOfVulnInSMIHandlers_csw2015.pdf
https://habr.com/ru/company/dsec/blog/481692/

Fuck edk2:
https://edk2-docs.gitbook.io/edk-ii-secure-coding-guide/secure_coding_guidelines_intel_platforms/smm
545 views