Channel Public Channel

Order of Six Angles

@orderofsixangles

Каналу 7 лет

Youtube канал: https://youtube.com/@orderofsixangles

Github: https://github.com/thatskriptkid

Тематические подборки малвари: https://www.orderofsixangles.com/samples

Пишите в личные сообщения канала

Open in Telegram

Subscribers: 5.42K
Photos: 454
Videos: 31
Links: 2.2K

Showing posts older than #2384 · Back to latest

Older Posts 20 shown

Post #2383 5K Jul 1, 2024, 05:21 UTC

Когда-то давно составлял для себя заметку по лайфхакам анализа .NET малвари, делюсь ей с вами.

Советы для исследования .NET малвари

Order Of Six Angles Советы для исследования .NET малвари У нас есть малварь, которая декодирует ресурс DE. С помощью скрипта stego можно расшифровать картинку. Результат декодирования: Также этот скрипт способен производить обратную операцию - превращать файл в стеганографическое изображение. Может использоваться…

Post #2382 1.56K Jul 1, 2024, 04:21 UTC

Сегодня каналу исполнилось ровно 5 лет 😈🥰😘

Post #2381 1.69K Jun 29, 2024, 04:30 UTC

Forwarded from RME-DisCo @ UNIZAR [www.reversea.me]

Breaking Custom Encryption Using Frida (Mobile Application Pentesting) #CustomEncryption #Frida #MobileApp #PenTesting #ApplicationSecurity https://labs.cognisys.group/posts/Breaking-Custom-Ecryption-Using-Frida-Mobile-Application-pentesting/

Cognisys Group Labs Breaking Custom Encryption Using Frida (Mobile Application Pentesting) Overview

Post #2380 1.42K Jun 28, 2024, 12:07 UTC

Order of Six Angles By combining Frida with an enhanced version of Tenet, Frinet facilitates the study of large programs, vulnerability research and root-cause analysis on iOS, Android, Windows and most architectures. https://www.synacktiv.com/publications/frinet-reverse-engineering…

Интересный плагин, но пока чето не могу подобрать под него кейс 😐

Post #2379 1.63K Jun 28, 2024, 09:29 UTC

Материалы по реверсу Темиды .NET. (ссылка2)
(спасибо подписчику!)

Telegram Files

Post #2378 1.69K Jun 27, 2024, 05:39 UTC

(dis)assembly framework. It supports all LLVM 15 architectures, with C++, Rust, and Python bindings.

блог
гитхаб

Emproof Introducing Nyxstone: An LLVM-based (Dis)assembly Framework - Emproof At Emproof, our mission is to enhance the security and integrity of embedded systems through innovative binary rewriting techniques. We are committed to providing advanced […]

Post #2377 1.35K Jun 27, 2024, 05:37 UTC

Exploiting Steam

https://www.darknavy.org/blog/exploiting_steam_usual_and_unusual_ways_in_the_cef_framework/

DARKNAVY Blog Exploiting Steam: Usual and Unusual Ways in the CEF Framework Introduction The Chromium Embedded Framework (CEF) is an open-source framework that allows developers to embed the Chromium engine in their applications. Although CEF is widely employed in a range of popular software, including WeChat and the Epic Games Launcher…

Post #2376 1.31K Jun 27, 2024, 05:13 UTC

This post (sticker, poll or similar) has no web preview. Open in Telegram

Post #2375 1.41K Jun 26, 2024, 04:08 UTC

Creating a custom filesytem using FUSE - Part 1

http://sh4dy.com/2024/06/24/fuse_01/

sh4dy's blog Creating a custom filesytem using FUSE - Part 1 IntroductionFile systems are the backbone of any operating system, responsible for managing how data is stored and retrieved. Traditionally, developing a file system has been a complex and daunting ta

Post #2374 1.45K Jun 25, 2024, 04:44 UTC

Сокрытие пейлода в памяти gpu, для антиав

https://raw.githubusercontent.com/vxunderground/VXUG-Papers/main/GpuMemoryAbuse.cpp

Post #2373 1.38K Jun 25, 2024, 04:43 UTC

Обновленная статья от известного в узких кругах DebugPrivilege про исследование crash dump

GitHub InsightEngineering/Debugging 101/Section 9: Triaging a Crash Dump at main · DebugPrivilege/InsightEngineering Hardcore Debugging. Contribute to DebugPrivilege/InsightEngineering development by creating an account on GitHub.

Post #2372 9.44K Jun 24, 2024, 05:49 UTC

Свежак! Каждый найдет для себя что-то интересное

Collection of Golang projects designed specifically for red teamers

x86 Real-Mode MS-DOS Emulator using Windows Hypervisor Platform

How a Clever 1960s Memory Trick Changed Computing (видео)

Provides automated reverse engineering assistance through the use of local large language models (LLMs) on consumer hardware.

Fuzzer Development 4: Snapshots, Code-Coverage, and Fuzzing

My iOS Web Hacking Setup - Surge, Termius, and Caido

LLM for automated hacking (набор ссылок)

Exploiting Trend Micro EDR

ChatGPT's Advanced Data Analysis and Code Execution - Experiments

Офигеная статья по внутренностям китайского иб

Take a Step Further: Understanding Page Spray in Linux Kernel Exploitation

How To Use Dumpulator For Malware Analysis

Writing an IR (intermidiate representation) from Scratch ( Android analysis tool)

Obfuscate the payload while simultaneously lowering its entropy

Incremental Symbolic Execution for the Clang Static Analyzer (видео) (слайды)

Post #2371 4.35K Jun 21, 2024, 04:14 UTC

Только что вышла книга Windows Native API Programming от крутого автора Pavel Yosifovich!

Я ее купил для вас и выложил бесплатно. Качайте!

EPUB
PDF

Post #2370 1.33K Jun 20, 2024, 09:44 UTC

Иногда хочется быть котом

Post #2369 1.28K Jun 20, 2024, 07:00 UTC

Про обфускацию Control Flow Flattening

https://nerodesu017.github.io/posts/2023-12-01-antibots-part-8

Nerodesu017 ANTIBOTS - PART VIII - Geetest - CFF In-Depth Control-Flow-Flattening Analysis

Post #2368 1.2K Jun 20, 2024, 06:03 UTC

Список блогов по malware analysis

https://x.com/embee_research/status/1674001545476861954

X (formerly Twitter) Matthew (@embee_research) on X A collection of incredible (non-corporate) malware analysis and reverse engineering blogs that I have personally enjoyed over the years. All focused on education and knowledge sharing of malware/RE topics. [1/14] 🧵 (In no particular order) #malware #education

Post #2367 1.25K Jun 20, 2024, 04:41 UTC

"Becoming a Vulnerability Researcher roadmap: my personal experience"

https://gist.github.com/tin-z/a469e996f8107a5ca8d3c858a2a4b65f

Gist Becoming a (pre-AI) Vulnerability Researcher roadmap: my personal experience Becoming a (pre-AI) Vulnerability Researcher roadmap: my personal experience - VR_roadmap.md

Post #2366 1.06K Jun 19, 2024, 09:56 UTC

chatgpt меня заскамил вчера. Сгенерил мне код, который работает неправильно. Я думаю че за херня, думал думал и понял, что (попробуйте сами найти) если обратить внимание на четверый цикл (for d := 48; c < 91; d++), то там должно быть d < 91, а не c < 91 =(

Post #2364 1.12K Jun 19, 2024, 05:54 UTC

Repurpose EDR as an Offensive Tool

https://www.safebreach.com/blog/dark-side-of-edr-offensive-tool/

SafeBreach The Dark Side of EDR: Repurpose EDR as an Offensive Tool Learn how SafeBreach developed malware integrated within Palo Alto Networks Cortex XDR, exploiting its ransomware protection feature.

Post #2363 1.04K Jun 19, 2024, 04:19 UTC

How to Keep Your Cool and Write Powerful Incident Response Reports

https://www.youtube.com/watch?v=fMWUDZOkRR4

YouTube How to Keep Your Cool and Write Powerful Incident Response Reports Presenter: Lenny Zeltser, CISO, Axonius Learn how to create stronger incident response reports that get read and drive action. We’ll cover report structure, enhancing clarity, capturing crucial technical and business details, and writing summaries decision…

Older posts →