Channel Public Channel

Order of Six Angles

@orderofsixangles

Каналу 7 лет

Youtube канал: https://youtube.com/@orderofsixangles

Github: https://github.com/thatskriptkid

Тематические подборки малвари: https://www.orderofsixangles.com/samples

Пишите в личные сообщения канала

Open in Telegram

Subscribers: 5.44K
Photos: 454
Videos: 31
Links: 2.2K

Showing posts older than #2323 · Back to latest

Older Posts 20 shown

Post #2322 705 Jun 6, 2024, 03:30 UTC

2600 Qazaqstan 👋Хей хей! ⚡️Менее 2 дней осталось до 2️⃣6️⃣0️⃣0️⃣ meetup Поспешите зарегистрироваться! А для самых любознательных👀 Доклады: 🗣Тема: Инструмент Frida и его возможности ⭐️Автор: @Thatskriptkid 🗣Тема: DLL hijacking Нам расскажут о том как подмена DLL…

расскажу про фриду!)

Post #2321 751 Jun 6, 2024, 03:30 UTC

Forwarded from 2600 Qazaqstan

👋Хей хей!

⚡️Менее 2 дней осталось до 2️⃣6️⃣0️⃣0️⃣ meetup

Поспешите зарегистрироваться!

А для самых любознательных👀

Доклады:

🗣Тема: Инструмент Frida и его возможности

⭐️Автор: @Thatskriptkid

🗣Тема: DLL hijacking

Нам расскажут о том как подмена DLL поможет запустить вредоносное ПО и как находить такие уязвимости.
⭐️Автор: @rockyou

🗣Тема: Сертификат PNPT и его получение

В своем выступлении расскажет про американский хакерский сертификат PNPT, и о его особенностях.
⭐️Автор: Ramazan Abdirassilov

📍Meetup будет проводится в данной локации в 20:00:
https://go.2gis.com/q5bm0
Chilli Grill
Улица Желтоксан, 2т

Напоминаем, заявку на доклады необходимо подавать через эту форму.

Post #2320 715 Jun 5, 2024, 04:13 UTC

Видео OffensiveCon24

https://www.youtube.com/playlist?list=PLYvhPWR_XYJlg1SfcKdZY6eXUTPPqnh_G

Post #2319 3.28K Jun 4, 2024, 07:52 UTC

Windows Internals: Dissecting Secure Image Objects - Part 1

https://connormcgarr.github.io/secure-images/

Connor McGarr’s Blog Windows Internals: Dissecting Secure Image Objects - Part 1 Analysis of NT, Secure Kernel, and SKCI working together to create the initial SECURE_IMAGE object

Post #2318 837 Jun 4, 2024, 05:00 UTC

X64 Function Hooking by Example

https://kylehalladay.com/blog/2020/11/13/Hooking-By-Example.html

Kylehalladay Kyle Halladay - X64 Function Hooking by Example I build shaders, renderers, games, and other stuff that's fun to stare at.

Post #2317 743 Jun 4, 2024, 04:43 UTC

Hooking Native Android Methods with Frida

https://www.youtube.com/watch?v=N2JtRXCofUU

YouTube Hooking Native Android Methods with Frida In this video, we use Frida hooking to intercept native Android methods after they have been loaded into the runtime. We write a custom script that uses Interceptor.attach to run code when the native method is invoked. --- Timestamps: 00:00 Intro 00:50…

Post #2316 640 Jun 4, 2024, 04:17 UTC

CVE-2024-27822: macOS PackageKit Privilege Escalation

https://khronokernel.com/macos/2024/06/03/CVE-2024-27822.html

Mykola’s blog CVE-2024-27822: macOS PackageKit Privilege Escalation Another fun exploit! This time with local privilege escalation through Apple’s PackageKit.framework when running ZSH-based PKGs 🎉.

Post #2315 664 Jun 4, 2024, 04:16 UTC

delve into windows memory internals, understand how memory is managed in windows as well as process internals

https://azr43lkn1ght.github.io/Malware%20Development,%20Analysis%20and%20DFIR%20Series%20-%20Part%20III/

azr43lkn1ght.github.io Malware Development, Analysis and DFIR Series - Part III Delve into windows memory internals! here is the 3rd post of Malware Development, Analysis and DFIR Series.

Post #2314 656 Jun 4, 2024, 04:12 UTC

Слайды и видео с конференции Objective for the We (по mac malware)

https://objective-see.org/oftw/v1.html

objective-see.org Objective for the We v1.0 Our student-focused conference providing free talks & trainings from some of the world's top Apple security researchers, providing an invaluable learning opportunity for the community.

Post #2313 779 Jun 4, 2024, 04:09 UTC

Android SELinux Internals Part I

https://8ksec.io/android-selinux-internals-part-i-8ksec-blogs/

8kSec Android SELinux Internals Part 1 | 8kSec Explore Android SELinux internals in Part 1. Learn how SELinux provides mandatory access control on Android devices and discover bypass techniques.

Post #2312 661 Jun 3, 2024, 12:57 UTC

FunctionInliner is an IDA plugin that can be used to ease the reversing of binaries that have been space-optimized with function outlining (e.g. clang --moutline).

https://github.com/cellebrite-labs/FunctionInliner

GitHub GitHub - cellebrite-labs/FunctionInliner: An IDA plugin that eases reversing of binaries that have been code-size-optimized with… An IDA plugin that eases reversing of binaries that have been code-size-optimized with function outlining - cellebrite-labs/FunctionInliner

Post #2311 629 Jun 3, 2024, 12:53 UTC

Molding lies into reality || Exploiting CVE-2024-4358

https://summoning.team/blog/progress-report-server-rce-cve-2024-4358-cve-2024-1800/

Summoning Team Molding lies into reality || Exploiting CVE-2024-4358 Discovering a zero-day authentication bypass and chaining a .NET deserialization to achieve pre-auth RCE on Progress Report Server

Post #2310 975 Jun 3, 2024, 11:05 UTC

Интересная тема - хукинг голанг функций. Он отличается. В сети нашел всего две статьи =*( В первой рассматривается очень частный случай, когда намеренно импортируется libc, во второй я потерялся в исходниках (очень интересно, но нихуя непонятно)

https://blog.quarkslab.com/lets-go-into-the-rabbit-hole-part-1-the-challenges-of-dynamically-hooking-golang-program.html#

https://metalbear.co/blog/hooking-go-from-rust-hitchhikers-guide-to-the-go-laxy/

Quarkslab Let’s Go into the rabbit hole (part 1) — the challenges of dynamically hooking Golang programs - Quarkslab's blog Golang is the most used programming language for developing cloud technologies. Tools such as Kubernetes, Docker, Containerd and gVisor are written in Go. Despite the fact that the code of these programs is open source, there is no way to analyze and extend…

Post #2309 651 Jun 3, 2024, 06:29 UTC

слайды

From the Vulnerability to the Victory: A Chrome Renderer 1-Day Exploit’s Journey to v8CTF Glory

https://kaist-hacking.github.io/pubs/2024/lee:v8-ctf-slides.pdf

exploit

https://github.com/kaist-hacking/CVE-2023-6702

Post #2308 634 Jun 3, 2024, 06:24 UTC

Order of Six Angles https://pagedout.institute/download/PagedOut_003_beta1.pdf

Paged Out! #4

https://pagedout.institute/download/PagedOut_004_beta1.pdf

Post #2307 2.94K Jun 3, 2024, 06:13 UTC

слайды

Rhadamanthys & the 40 thieves

https://download.scrt.ch/insomnihack/ins24-slides/Rhadamanthys%20and%20the%2040%20thieves.pdf

Post #2306 973 Jun 3, 2024, 04:47 UTC

Owasp level 4 Android Reversing Anti-Debugging/Root checks: r2pay 1.0.

https://medium.com/@ndsetobol/owasp-level-4-android-reversing-anti-debugging-root-checks-r2pay-1-0-239e224ec649

Medium Owasp level 4 Android Reversing Anti-Debugging/Root checks: r2pay 1.0. This was one of the most challenging crackmes I’ve ever attempted to decipher. It took an extensive amount of time and effort, spanning…

Post #2305 623 Jun 3, 2024, 04:30 UTC

Очень интересные скрипты фрида

https://github.com/apkunpacker/FridaScripts

GitHub GitHub - apkunpacker/FridaScripts Contribute to apkunpacker/FridaScripts development by creating an account on GitHub.

Post #2304 834 Jun 1, 2024, 05:29 UTC

"Всё нижеизложенное является компиляцией собственного опыта и общедоступных наработок связанных со взломом Linux."

https://reeves0x0.gitbook.io/linux-under-attack/

reeves0x0.gitbook.io Предисловие | Linux under attack

Post #2303 748 May 31, 2024, 07:53 UTC

https://youtu.be/Ozj_xU0rSyY?si=xVakmJRzFgVOTvlX

YouTube The Magic of RISC-V Vector Processing The 1.0 RISC-V Vector Specification is now Ratified, and the first pieces of silicon using the new spec are starting to hit the shelves. I go over the utility of Vector Instructions, why you would want them, why you should care, and how to use them in raw…

Older posts →