Pivoting guide for penetrations testers or red team members

Malware analysis techniques form a pyramid of increasing complexity: fully-automated analysis, static properties examination, interactive behavioral analysis, and manual code reversing. Analysts typically combine these stages iteratively, with insights from…

Morty Sherlocked is a beginner level Android application CTF challenge. It walks us through the basic concepts of Android application…

Analyzing malware written in Go: recovering function names in stripped Go binaries and defining strings within Ghidra for reverse engineers.

We found a piece of a particularly sophisticated Android ransomware with novel techniques and behavior, exemplifying the rapid evolution of mobile threats that we have also observed on other platforms.

By Warren Mercer, Paul Rascagneres and Vitor Ventura.

* The Azerbaijan public sector and other important organizations are still targeted by new versions of PoetRAT.
* This actor leverages malicious Microsoft Word documents alleged to be from the Azerbaijan…

Date:  2020-10-13 Author:  Kevin2600 CVE:  CVE-2020-27524 Version:    Audi A7 2014 MMI Vendor :  https://www.audi.com/en.html Attack-Vector:...

Learn how to emulate, trace, debug, and Reverse Engineer UEFI modules in part 2 of our new blog series on Firmware Security

Introduction Everyone knows how to track which processes run on Linux, but almost no-one tracks them accurately. In fact, all of the methods listed in this post have some deficiency or another. Lets define requirements:
All processes should be logged including…

NCC Group Technical Advisory: Pulse Connect Secure - RCE via Template Injection (CVE-2020-8243)

Last March, Roberto Amado and I (Víctor Calvo) gave a talk at RootedCON 2020 titled Sandbox fingerprinting: Avoiding analysis environments. The talk consisted of two parts, the first of which dealt with classifying public sandbox environments for malware…

BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution Blog post available soon on: https://t.co/2SDRm6PZaQ Google Security Research Repository: https://t.co/0HolidyWvV Intel Security Advisory: https://t.co/kfGj3MWajy Video: https://t.co/sE35AoD0V4

Here's what you need to begin a career in Malware Analysis.

an increasing number of malware authors are opting to convert Python to executables. Today we look at how to triage this type of malware.

News, Updates and Events of splone.