😈 [ vxunderground, vx-underground ]

We've updated the vx-underground Malware Defense collection. We have added 60 new papers.

Have a nice day.

Check it out here: https://t.co/djuVYEkbLT

🔗 https://www.vx-underground.org/malware_defense.html#malware_analysis

🐥 [ tweet ]

😈 [ vxunderground, vx-underground ]

We've updated the vx-underground Malware Analysis collection. We have added 13 new papers courtesy of @malpedia.

Check it out here: https://t.co/djuVYEkbLT

Have a nice day.

🔗 https://www.vx-underground.org/malware_defense.html#malware_analysis

🐥 [ tweet ]

😈 [ fr0gger_, Thomas Roccia 🤘 ]

I published a blogpost that presents ten useful python libraries that I use for malware analysis and reversing (with code examples)!

Which one are you using the most? 🐍
#python #malware #cybersecurity #infosec

https://t.co/4q7N0ydQJa

🔗 https://blog.securitybreak.io/10-python-libraries-for-malware-analysis-and-reverse-engineering-622751e6ebd0

🐥 [ tweet ]

😈 [ c3rb3ru5d3d53c, ςεяβεяμs - мαℓωαяε яεsεαяςнεя ]

Hey guys, my #malware #analysis for absolute beginners guide just dropped!

✅ Completely Free
✅ Mistakes to Avoid
✅ Setting up your first VM
✅ Purpose Driven
✅ Where to get Malware Samples
✅ Creating a Portfolio

Recording a video soon too! 😘

https://t.co/zL8Sr0IzHG https://t.co/IYJV7mEatt

🔗 https://c3rb3ru5d3d53c.github.io/docs/malware-analysis-beginner-guide/

🐥 [ tweet ][ quote ]

😈 [ embee_research, Matthew ]

In depth analysis of a 6-stage #asyncrat #malware loader using #cyberchef + #dnspy🐀

Persistent .lnk -> .py script -> 2nd .py script -> .NET DLL (reflection) -> .NET DLL (injected into msbuild.exe) -> .NET dll (custom obfuscation) -> .NET .exe (asyncrat)

https://t.co/e2Y5jHOOYy

🔗 https://www.huntress.com/blog/snakes-on-a-domain-an-analysis-of-a-python-malware-loader

🐥 [ tweet ]

😈 [ Octoberfest73, Octoberfest7 ]

I’m pleased to release Inline-Execute-PE, a CobaltStrike toolkit enabling users to load and repeatedly run unmanaged Windows exe’s in Beacon memory without dropping to disk or creating a new process each time. https://t.co/1byTo7uCV1
#redteam #cybersecurity #malware

🔗 https://github.com/Octoberfest7/Inline-Execute-PE

🐥 [ tweet ]

😈 [ DarkCoderSc, Jean-Pierre LESUEUR ]

🛸👽 Interested in C2 over FTP(S)? Explore my new project, SharpFtpC2, which enables execution of shell commands on remote systems via FTP(S). Currently in beta and lacking encryption, but it's on the way: https://t.co/9Dkf19MhJL

#InfoSec #Malware #Network #Evasion #FTP

🔗 https://github.com/DarkCoderSc/SharpFtpC2

🐥 [ tweet ]

😈 [ Octoberfest73, Octoberfest7 ]

Happy early 4th- TeamsPhisher is out now! Send messages + attachments to external Teams users for the purpose of phishing for access.

This short project was a fun departure from all of the BOF and Post-ex stuff I typically focus on.

#redteam #Malware

🔗 https://github.com/Octoberfest7/TeamsPhisher

🐥 [ tweet ]

😈 [ OtterHacker, OtterHacker ]

Hey ! I published a large part of my notes, and I hope you will find something new to learn in it. It goes from simple #OSCP notes to #Malware development (#COFFLoader, #ModuleStomping, #ReflectiveDLLInjection...).

🔗 https://otterhacker.github.io

🐥 [ tweet ]

😈 [ Antonio 's4tan' Parata @s4tan ]

I wrote a new post: "Exploiting a vulnerable Minifilter Driver to create a process killer" source code: #malware #byovd

🔗 https://antonioparata.blogspot.com/2024/02/exploiting-vulnerable-minifilter-driver.html
🔗 https://github.com/enkomio/s4killer

🐥 [ tweet ]

😈 [ Elastic Security Labs @elasticseclabs ]

#ElasticSecurityLabs has discovered PUMAKIT, a new #linux #malware with advanced stealth mechanisms. The kernel rootkit is capable of privilege escalation, anti-debugging measures, and more. Get the details here:

🔗 https://www.elastic.co/security-labs/declawing-pumakit/

🐥 [ tweet ]