Windows Kernel Explorer (you can simply call it as "WKE") is a free but powerful kernel research tool. It supports from Windows XP to Windows 10 (32-bit and 64-bit). Compared with WIN64AST and PCHunter, WKE can run on the latest Windows 10 without updating binary files.

https://github.com/AxtMueller/Windows-Kernel-Explorer

#tools #kernel #windows #antirootkit #darw1n

Ghidra Processor Module to disassemble and decompile the x86 Intel Atom microcode https://github.com/pietroborrello/ghidra-atom-microcode #reverse #ghidra #dukeBarman

@VolgaCTF 2021 is an international inter-university cybersecurity competition with a local conference taking place in Samara, Russia on September 13-17.

Schedule of Presentations:
https://volgactf.ru/en/volgactf-2021/final/

Registration Form (free for everyone):
https://forms.yandex.ru/u/612dc0bd893f1f629d79d1e4/

#VolgaCTF #Conference #CTF

iOS Wi-Fi Demon: From iOS Format String to Zero-Click RCE

https://ictexpertsluxembourg.lu/technical-corner/ios-wi-fi-demon-from-ios-format-string-to-zero-click-rce/

#reverse #expdev #mobile #ios #rce #formatstring #darw1n

Powerful automated tool for reverse engineering Unity IL2CPP binaries

https://github.com/djkaty/Il2CppInspector

#reverse #unity #tools #il2cpp #ida #ghidra #x64dbg #ilspy #dnspy #inject #hook #obfuscation #darw1n

iOS Tweak Development

Part1: https://cwcaude.github.io/project/tutorial/2020/07/02/iOS-tweak-dev-1.html

Part2: https://cwcaude.github.io/project/tutorial/2020/07/04/iOS-tweak-dev-2.html

Part3: https://cwcaude.github.io/project/tutorial/2020/07/12/iOS-tweak-dev-3.html

Part4: https://cwcaude.github.io/project/tutorial/2020/07/16/iOS-tweak-dev-4.html

#dev #mobile #ios #tweak #darw1n

#ZeroNights X materials were published! https://zeronights.ru/en/materials/ #conference #dukeBarman

Android ADB plugin for Total Commander:

Original: https://4pda.to/forum/index.php?showtopic=374826

Mirror: https://totalcmd.net/plugring/android_adb.html

#tools #mobile #android #adb #darw1n

Command-line tool that allows searching and downloading app packages (known as ipa files) from the iOS App Store

https://github.com/majd/ipatool

#tweak #tool #mobile #ios #ipa #darw1n

The Cross Platform AutoIt Extractor

https://github.com/x0r19x91/UnAutoIt

#tools #malware #extract #autoit #darw1n

Nim implementation of Process Hollowing using syscalls (for educational purposes)

https://github.com/snovvcrash/NimHollow

#malware #redteam #processhollowing #inject #darw1n

GitHub finds 7 code execution vulnerabilities in 'tar' and npm CLI

https://github.blog/2021-09-08-github-security-update-vulnerabilities-tar-npmcli-arborist/

#expdev #tar #cli #darw1n

This page was designed to be a useful, informational asset for those looking to understand the specific tactics, techniques, and procedures (TTPs) attackers are leveraging to compromise active directory and guidance to mitigation, detection, and prevention. And understand Active Directory Kill Chain Attack and Modern Post Exploitation Adversary Tradecraft Activity.

https://github.com/infosecn1nja/AD-Attack-Defense

#redteam #activedirectory #darw1n

Tickling VMProtect with LLVM https://forum.reverse4you.org/t/tickling-vmprotect-with-llvm/16980 #reverse #vmprotect #llmv #tutorial #darw1n

Anubis Android Malware Analysis / Source Code https://forum.reverse4you.org/t/anubis-android-malware-analysis/16982 #reverse #mobile #malware #anroid #anubis #analysis #darw1n

JavaScript Deobfuscator and Unpacker https://forum.reverse4you.org/t/javascript-deobfuscator-and-unpacker/16986 #tools #malware #javascript #unpack #obfuscation #darw1n

GDA, a new Dalvik bytecode decompiler, is implemented in C++
https://forum.reverse4you.org/t/gda-gjoy-dex-analyzer/16985 #reverse #tools #mobile #android #decompiler #apk #dex #dalvik #darw1n

Cross-platform agent and Post-exploitation tool written in Golang and C++

https://forum.reverse4you.org/t/cross-platform-agent-and-post-exploitation-tool-written-in-golang-and-c/17060

#tools #postexploitation #redteam #agent #framework #darw1n

Roppeer is a tool to find gadgets and build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64)

https://forum.reverse4you.org/t/roppeer-is-a-tool-to-find-gadgets-and-build-rop-chains-for-different-architectures-x86-x86-64-arm-arm64-mips-powerpc-sparc64/17064

#tools #expdev #ropchain #rop #python #diablo

Analyzing a Patch of a Virtual Machine Escape on VMware

https://forum.reverse4you.org/t/analyzing-a-patch-of-a-virtual-machine-escape-on-vmware/17110

#reverse #windows #expdev #patchanalysis #patch #analysis #vmware #darw1n