Каналу 7 лет
Youtube канал: https://youtube.com/@orderofsixangles
Github: https://github.com/thatskriptkid
Тематические подборки малвари: https://www.orderofsixangles.com/samples
Пишите в личные сообщения канала
Post #2403
6.44K
Channel Public Channel
OR Order of Six Angles
@orderofsixangles
- Subscribers
- 5.42K
- Photos
- 454
- Videos
- 31
- Links
- 2.2K
Showing posts older than #2404 · Back to latest
Older Posts 20 shown
Post #2402
1.58K
Post #2401
1.63K
Chinese cybersecurity firm 360 Security Technology has helped Beijing uncover 54 “overseas, state-level” hacking groups, including operatives from the US Central Intelligence Agency (CIA) and National Security Agency (NSA),
https://www.scmp.com/tech/tech-trends/article/3272819/chinese-cybersecurity-firm-links-us-sanctions-its-role-uncovering-hackers-targeting-china
https://www.scmp.com/tech/tech-trends/article/3272819/chinese-cybersecurity-firm-links-us-sanctions-its-role-uncovering-hackers-targeting-china
Post #2400
1.5K
glibc malloc internals and some heap exploitation tricks that can be used for getting a shell!
https://blog.quarkslab.com/heap-exploitation-glibc-internals-and-nifty-tricks.html
Quarkslab Heap exploitation, glibc internals and nifty tricks. - Quarkslab's blog This is a writeup of a heap pwn challenge at HitconCTF Qualifiers 2024, which explains some glibc malloc internals and some heap exploitation tricks that can be used for getting a shell! https://blog.quarkslab.com/heap-exploitation-glibc-internals-and-nifty-tricks.html
Post #2399
1.58K
Turning Outlook Into a C2 With One Registry Change
https://trustedsec.com/blog/specula-turning-outlook-into-a-c2-with-one-registry-change
https://trustedsec.com/blog/specula-turning-outlook-into-a-c2-with-one-registry-change
Post #2398
1.49K
Uncovering Hardcoded Root Password in VStarcam CB73 Security Camera
https://brownfinesecurity.com/blog/vstarcam-cb73-hardcoded-root-password/
https://brownfinesecurity.com/blog/vstarcam-cb73-hardcoded-root-password/
Post #2397
1.31K
Post #2396
1.35K
Post #2395
1.5K
Order of Six Angles взял кота из приюта. Назвал Шелл
Post #2394
1.62K
Вышла статья Injecting Java in-memory payloads for post-exploitation. Я спросил мнение о ней у одного знающего чувака, он сказал "использование remote agents - это старая тема, еще 4 года назад я делал подобное". В любом случае очень интересно
Post #2393
1.56K
Order of Six Angles Infecting android applications - The new way (English version) https://orderofsixangles.com/en/2020/04/07/android-infection-the-new-way.html Новый способ внедрения вредоносного кода в андроид приложения (Русская версия) https://orderofsixangles.com/ru/…
вернулся к своему старому проекту, допилил его двумя фичами, написал почти статью об этом, скоро скину либо возможно ее опубликуют в vxunderground blackmass 3
Post #2392
1.81K
взял кота из приюта. Назвал Шелл
Post #2391
1.73K
То чувство, когда живешь в стране, где нет crowdstrike
Post #2390
1.75K
пятничный вайб - Хочу взять кота из приюта
Post #2389
2.13K
а вот это интересно! доводилось реверсить cpython и я его не познал
10 часовой разбор cpython
https://youtube.com/playlist?list=PLWkTsO24LpD-k7AgYKEpb2M2SZn-NlKTo&si=F2eOcU1l-yVYdySJ
10 часовой разбор cpython
https://youtube.com/playlist?list=PLWkTsO24LpD-k7AgYKEpb2M2SZn-NlKTo&si=F2eOcU1l-yVYdySJ
Post #2388
9.73K
A bare minimum hypervisor on AMD and Intel processors for learners
Introduction to Intel VT-x
Recovering Rust stripped symbols on MinGW targets
Advanced CyberChef Techniques For Malware Analysis - Detailed Walkthrough and Examples
Hardware Hacking with a Raspberry Pi - Configuring the PiFex
Evernote RCE: From PDF.js font-injection to All-platform Electron exposed ipcRenderer with listened BrokerBridge Remote-Code Execution
A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.
Writing a Frida-based VBS API monitor
c# obfuscation: making your code undetectable
Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws
A decompiler-agnostic plugin for interacting with AI in your decompiler. GPT-4, Claude, and local models supported!
Bootkits and kernel patching
Emulating Obfuscated Code
Слайды по различной эксплуатации
Introduction to Intel VT-x
Recovering Rust stripped symbols on MinGW targets
Advanced CyberChef Techniques For Malware Analysis - Detailed Walkthrough and Examples
Hardware Hacking with a Raspberry Pi - Configuring the PiFex
Evernote RCE: From PDF.js font-injection to All-platform Electron exposed ipcRenderer with listened BrokerBridge Remote-Code Execution
A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.
Writing a Frida-based VBS API monitor
c# obfuscation: making your code undetectable
Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws
A decompiler-agnostic plugin for interacting with AI in your decompiler. GPT-4, Claude, and local models supported!
Bootkits and kernel patching
Emulating Obfuscated Code
Слайды по различной эксплуатации
Post #2387
1.64K
Post #2386
2.16K
Learning LLVM (Part-2) (сурсы)
ZDI-24-821: A Remote UAF in The Kernel's net/tipc
A Short Tale of Sysctl
The Art of Malware C2 Scanning - How to Reverse and Emulate Protocol Obfuscated by Compiler
Chrome exploitation
Evading Event Tracing for Windows (ETW)-Based Detections
JTAG debug of windows Hyper V
sh4dy's blog Learning LLVM (Part-2) IntroductionIn the first part of my blog series on compilers and LLVM, I provided a brief introduction to compiler fundamentals and LLVM. We also wrote a simple LLVM analysis pass to print function na ZDI-24-821: A Remote UAF in The Kernel's net/tipc
A Short Tale of Sysctl
The Art of Malware C2 Scanning - How to Reverse and Emulate Protocol Obfuscated by Compiler
Chrome exploitation
Evading Event Tracing for Windows (ETW)-Based Detections
JTAG debug of windows Hyper V
Post #2385
1.76K
Post #2384
8.37K
💋
pwn.college - ctf задания для начинающих
Commonly Abused Linux Initial Access Techniques and Detection Strategies
GoogleCTF 2024 Writeups
An unexpected journey into Microsoft Defender's signature World.
Static deobfuscator for Themida/WinLicense/Code Virtualizer's mutation-based obfuscation.
Persistence with GPO Item Level Targeting
Эксплуатация CVE-2024-29943 (слайды)
The Ultimate Aim of Kernel Exploitation - Process Credentials
Learning LLVM (Part-1) - Writing a simple LLVM pass
Exploiting V8 at openECSC
Hypervisor-enforced Paging Translation - The end of non data-driven Kernel Exploits (Recon2024) слайды pptx
Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust
A Tale of Reverse Engineering 1001 GPTs: The good, the bad And the ugly
OSED materials (twit)
PgC: Garbage collecting Patchguard away
pwn.college - ctf задания для начинающих
Commonly Abused Linux Initial Access Techniques and Detection Strategies
GoogleCTF 2024 Writeups
An unexpected journey into Microsoft Defender's signature World.
Static deobfuscator for Themida/WinLicense/Code Virtualizer's mutation-based obfuscation.
Persistence with GPO Item Level Targeting
Эксплуатация CVE-2024-29943 (слайды)
The Ultimate Aim of Kernel Exploitation - Process Credentials
Learning LLVM (Part-1) - Writing a simple LLVM pass
Exploiting V8 at openECSC
Hypervisor-enforced Paging Translation - The end of non data-driven Kernel Exploits (Recon2024) слайды pptx
Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust
A Tale of Reverse Engineering 1001 GPTs: The good, the bad And the ugly
OSED materials (twit)
PgC: Garbage collecting Patchguard away