TGViewer
Channel Public Channel
Alaid TechThread

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec
Open in Telegram
Subscribers
1.14K
Photos
7
Videos
2
Links
1.4K

Showing posts older than #1223 · Back to latest

Older Posts 20 shown
Post #1213 86
Windows built-in Sandbox Disables Microsoft Defender and other EDR/AV: Attack Detection and Prevention via MemoryRanger

https://youtu.be/NGrSPuC7xr0
YouTube Texas Cyber Summit 2022: Windows built-in Sandbox Disables Microsoft Defender and other EDR/AV "Windows built-in Sandbox Disables Microsoft Defender and other EDR/AV: Attack Detection and Prevention via MemoryRanger" • Kernel attacks are still serious for Windows OS security. It is crucial to analyze the popular techniques that result in loading…
Post #1211 100
EfiXplorer: Hunting UEFI Firmware NVRAM Vulnerabilities

https://binarly.io/posts/efiXplorer_Hunting_UEFI_Firmware_NVRAM_Vulnerabilities/index.html
https://binarly.io/ efiXplorer: Hunting UEFI Firmware NVRAM Vulnerabilities | Binarly – AI -Powered Firmware Supply Chain Security Platform Binarly released a new version of efiXplorer v5.2 [Xmas Edition] today, with support for the new IDA SDK v8.2 and the addition of multiple code analysis improvements.
  • 👍 1
  • 🔥 1
Post #1208 112
Gepetto is a Python script which uses OpenAI's davinci-003 model to provide meaning to functions decompiled by IDA Pro. At the moment, it can ask davinci-003 to explain what a function does, and to automatically rename its variables

https://github.com/JusticeRage/Gepetto
GitHub GitHub - JusticeRage/Gepetto: IDA plugin which queries language models to speed up reverse-engineering IDA plugin which queries language models to speed up reverse-engineering - JusticeRage/Gepetto
Post #1206 74
Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL). Mangle can remove known Indicators of Compromise (IoC) based strings and replace them with random characters, change the file by inflating the size to avoid EDRs, and can clone code-signing certs from legitimate files. In doing so, Mangle helps loaders evade on-disk and in-memory scanners.

https://github.com/optiv/Mangle
GitHub GitHub - optiv/Mangle: Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from… Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs - optiv/Mangle
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →