Channel Public Channel

Order of Six Angles

@orderofsixangles

Каналу 7 лет

Youtube канал: https://youtube.com/@orderofsixangles

Github: https://github.com/thatskriptkid

Тематические подборки малвари: https://www.orderofsixangles.com/samples

Пишите в личные сообщения канала или thatskriptkid@mail.grokbot.com

Open in Telegram

Subscribers: 5.45K
Photos: 455
Videos: 32
Links: 2.2K

Showing posts older than #2121 · Back to latest

Older Posts 20 shown

Post #2120 546 Jan 17, 2024, 06:05 UTC

PE file viewer/editor for Windows, Linux and MacOS.

https://github.com/horsicq/XPEViewer?s=09

GitHub GitHub - horsicq/XPEViewer: PE file viewer/editor for Windows, Linux and MacOS. PE file viewer/editor for Windows, Linux and MacOS. - horsicq/XPEViewer

Post #2119 521 Jan 17, 2024, 06:00 UTC

Unpacking Malware Like A Pro - Workshop / Felipe Duarte

https://www.youtube.com/watch?v=NJyc5IcXIQ4

YouTube Unpacking Malware Like A Pro - Workshop / Felipe Duarte Malware remains as one of the most effective tools used by cyber criminals to commit fraud. Far from now are the days in which viruses were just jokes. And it is not me being dramatic, just look at the news and you will see that this situation is getting…

Post #2118 547 Jan 17, 2024, 05:58 UTC

a suite of utilities and libraries that enables analysis of binary programs. BAP supports x86, x86-64, ARM, MIPS, PowerPC and new architectures can be added using plugins. BAP includes various analyses, standard interpreter, microexecution interpreter, and a symbolic executor.

https://github.com/BinaryAnalysisPlatform/bap?s=09

GitHub GitHub - BinaryAnalysisPlatform/bap: Binary Analysis Platform Binary Analysis Platform. Contribute to BinaryAnalysisPlatform/bap development by creating an account on GitHub.

Post #2117 481 Jan 17, 2024, 05:56 UTC

https://blog.bushidotoken.net/2022/11/the-continuity-of-conti.html

blog.bushidotoken.net The Continuity of Conti CTI, threat intelligence, OSINT, malware, APT, threat hunting, threat analysis, CTF, cybersecurity, security

Post #2116 524 Jan 17, 2024, 05:54 UTC

VMUnprotect.Dumper can dynamically untamper VMProtected Assembly

https://github.com/void-stack/VMUnprotect.Dumper

GitHub GitHub - void-stack/VMUnprotect.Dumper: VMUnprotect.Dumper can dynamically untamper VMProtected Assembly. VMUnprotect.Dumper can dynamically untamper VMProtected Assembly. - void-stack/VMUnprotect.Dumper

Post #2115 545 Jan 17, 2024, 05:52 UTC

triage-collector is a triage collection tool for fast forensic.

https://github.com/herosi/triage-collector

GitHub GitHub - herosi/triage-collector Contribute to herosi/triage-collector development by creating an account on GitHub.

Post #2114 621 Jan 17, 2024, 05:50 UTC

How to Setup CAPEV2 Sandbox - Malware Config & Payload Extractor

https://www.youtube.com/watch?v=ZRrk2QRN7Lc

YouTube How to Setup CAPEV2 Sandbox - Malware Config & Payload Extractor Learn how to install and setup CapeV2 Sandbox Support us on GH: https://guidedhacking.com/register/ Support us on Patreon: https://patreon.com/guidedhacking Support us on YT: https://www.youtube.com/channel/UCCMi6F5Ac3kQDfffWXQGZDw/join CAPE is a malware…

Post #2113 660 Jan 17, 2024, 05:41 UTC

Reverse Engineering for Noobs

https://x86re.com/

Post #2112 589 Jan 17, 2024, 05:27 UTC

Unpacking VIDAR using Time-Travel Debugging (TTD) in WinDbg Preview

https://www.youtube.com/watch?v=HcyCZPNO3qI

YouTube Unpacking VIDAR using Time-Travel Debugging (TTD) in WinDbg Preview In the last video, we looked for signs of packing in our malicious sample using IDA Pro. What we found was fairly clear evidence of the use of process hollowing, a common technique of code injection used by malware authors. In this video, I'll introduce Time…

Post #2111 534 Jan 17, 2024, 05:24 UTC

A ProcessMonitor visualization application written in rust

https://github.com/forensicxlab/VISION-ProcMon

GitHub GitHub - forensicxlab/VISION-ProcMon: A ProcessMonitor visualization application written in rust. A ProcessMonitor visualization application written in rust. - forensicxlab/VISION-ProcMon

Post #2110 466 Jan 17, 2024, 05:22 UTC

Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation

https://github.com/can1357/NtRays

GitHub GitHub - can1357/NtRays: Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation. Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation. - can1357/NtRays

Post #2109 459 Jan 17, 2024, 05:17 UTC

novel attack on PyPI using compiled Python code to evade detection

https://www.reversinglabs.com/blog/when-python-bytecode-bites-back-who-checks-the-contents-of-compiled-python-files

ReversingLabs When byte code bites: Who checks the contents of compiled Python files? | RL Blog ReversingLabs researchers identified a PyPI attack using compiled Python code to evade detection — possibly the first PYC file direct-execution attack.

Post #2108 430 Jan 17, 2024, 05:12 UTC

how to brute-force almost any fingerprint-protected Android smartphone

https://arxiv.org/pdf/2305.10791.pdf

Post #2107 494 Jan 17, 2024, 05:11 UTC

Malware Analysis and Deobfuscation With Procmon - Smokeloader Example

https://embee-research.ghost.io/smokeloader-analysis-with-procmon/

Embee Research Malware Analysis and Deobfuscation With Procmon - Smokeloader Example Decoding malware loaders using Procmon and Cyberchef. Utilising Powershell to retrieve additional payloads and free online tooling to identify the malware family.

Post #2106 475 Jan 17, 2024, 05:08 UTC

Reverse Engineering Terminator aka Zemana AntiMalware/AntiLogger Driver

https://voidsec.com/reverse-engineering-terminator-aka-zemana-antimalware-antilogger-driver/

VoidSec Reverse Engineering Terminator aka Zemana AntiMalware/AntiLogger Driver - VoidSec Reverse engineering Spybot's Terminator tool (Zemana Antimalware driver) to achieve LPE as SYSTEM and unrestricted raw SCSI disk read/write.

Post #2105 491 Jan 17, 2024, 04:55 UTC

plugin for Ida Pro to perform the parsing of the MAP file (generated by the IDR) and in this way rescue all the Delphi symbols

https://github.com/Xienim/Delphi-Kawaii

GitHub GitHub - Xienim/Delphi-Kawaii: Delphi-Kawaii is a plugin for Ida Pro. Delphi-Kawaii is a plugin for Ida Pro. Contribute to Xienim/Delphi-Kawaii development by creating an account on GitHub.

Post #2104 547 Jan 17, 2024, 04:46 UTC

Использование dotnetfile для расшифровки строк C# малвари

https://medium.com/@crovax/ducktail-multi-stage-analysis-39c2a7d9675d

Post #2103 611 Jan 17, 2024, 03:18 UTC

Debug Case Study: Analyzing AppCrash of Cobalt Strike Beacon

https://github.com/DebugPrivilege/InsightEngineering/tree/main/Debugging%20Case%20Studies/Debug%20Case%20Study%3A%20Analyzing%20AppCrash%20of%20Cobalt%20Strike%20Beacon

GitHub InsightEngineering/Debugging Case Studies/Debug Case Study: Analyzing AppCrash of Cobalt Strike Beacon at main · DebugPrivileg… Hardcore Debugging. Contribute to DebugPrivilege/InsightEngineering development by creating an account on GitHub.

Post #2102 634 Jan 16, 2024, 15:29 UTC

PixieFail: Nine vulnerabilities in Tianocore's EDK II IPv6 network stack.

https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html

Quarkslab PixieFail: Nine vulnerabilities in Tianocore's EDK II IPv6 network stack. - Quarkslab's blog This blog post provides details about nine vulnerabilities affecting the IPv6 network protocol stack of EDK II, TianoCore's open source reference implementation of UEFI.

Post #2101 693 Jan 16, 2024, 11:11 UTC

Order of Six Angles Коротко о моей ленте твиттера: 99% коты, 1% иб

блять они уже стали сами подписываться 😳

Older posts →