Channel Public Channel

Order of Six Angles

@orderofsixangles

Каналу 7 лет

Youtube канал: https://youtube.com/@orderofsixangles

Github: https://github.com/thatskriptkid

Тематические подборки малвари: https://www.orderofsixangles.com/samples

Пишите в личные сообщения канала

Open in Telegram

Subscribers: 5.42K
Photos: 450
Videos: 31
Links: 2.2K

Showing posts older than #2607 · Back to latest

Older Posts 20 shown

Post #2606 1.17K May 17, 2025, 09:00 UTC

Eclipse on Next.js: Conditioned exploitation of an intended race-condition

https://zhero-web-sec.github.io/research-and-things/eclipse-on-nextjs-conditioned-exploitation-of-an-intended-race-condition

zhero_web_security Eclipse on Next.js: Conditioned exploitation of an intended race-condition CVE-2025-32421

Post #2605 1.38K May 16, 2025, 07:04 UTC

Improving AFD Socket Visibility for Windows Forensics & Troubleshooting

https://www.huntandhackett.com/blog/improving_afd_socket_visibility

Huntandhackett Improving AFD Socket Visibility for Windows Forensics & Troubleshooting This blog post explains the basics of Ancillary Function Driver API and how it can help explore networking activity on Windows systems.

Post #2604 3.38K May 15, 2025, 08:32 UTC

Fuzzing Windows Defender with loadlibrary in 2025

https://scrapco.de/blog/fuzzing-windows-defender-with-loadlibrary-in-2025.html

scrapco.de Lingua Diabolis | Fuzzing Windows Defender with loadlibrary in 2025

Post #2603 1.84K May 14, 2025, 05:24 UTC

XINTRA Writeup.

This lab emulates a targeted intrusion aligned with Mustang Panda’s TTPs — leveraging spear-phishing, DLL sideloading, and C2 over Dropbox to steal sensitive diplomatic data.

https://cham1ndux.github.io/posts/Mustand-Panda-APT-Analysis/

ChamX Council of Tropical Affairs APT-Inspired Threat Hunting Walkthrough The Threat Actor in focus is Mustang Panda a.k.a. Stately Taurus, a well-documented Chinese APT group known for cyber-espionage campaigns targeting governments, NGOs, and political entities across Southeast Asia. This lab emulates a targeted intrusion aligned…

Post #2602 1.22K May 13, 2025, 14:12 UTC

Сегодня удачный день

Post #2601 1.39K May 13, 2025, 04:05 UTC

1day practice - Escape macOS sandbox (partial) using RemoteViewServices

https://github.com/wh1te4ever/CVE-2025-31258-PoC

https://www.youtube.com/watch?v=GlReVUh_4W4

GitHub GitHub - wh1te4ever/CVE-2025-31258-PoC: 1day practice - Escape macOS sandbox (partial) using RemoteViewServices 1day practice - Escape macOS sandbox (partial) using RemoteViewServices - wh1te4ever/CVE-2025-31258-PoC

Post #2600 1.24K May 13, 2025, 03:59 UTC

ManuFuzzer is an LLVM-based binary, coverage-guided fuzzing framework for macOS

https://github.com/ant4g0nist/ManuFuzzer

GitHub ant4g0nist/ManuFuzzer Binary code-coverage fuzzer for macOS, based on libFuzzer and LLVM - ant4g0nist/ManuFuzzer

Post #2599 1.3K May 13, 2025, 03:55 UTC

Malware Development Tutorial: Bypassing Windows Defender With This EASY Technique

https://www.youtube.com/watch?v=CSt5wcvNjBU

YouTube Malware Development Tutorial: Bypassing Windows Defender With This EASY Technique Malware Development Tutorial: Bypassing Windows Defender with SMB Staging In this step-by-step malware development tutorial, you’ll discover how to bypass Windows Defender using a powerful technique called SMB staging. By delivering shellcode over a remote…

Post #2598 1.19K May 12, 2025, 06:09 UTC

Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages

https://googleprojectzero.blogspot.com/2025/05/breaking-sound-barrier-part-i-fuzzing.html

projectzero.google Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages Guest post by Dillon Franke, Senior Security Engineer, 20% time on Project Zero Every seco...

Post #2597 4.32K May 12, 2025, 04:09 UTC

Alt Syscalls for Windows 11

https://fluxsec.red/alt-syscalls-for-windows-11

fluxsec.red Windows 11 Alternate Syscalls Deep Dive A comprehensive technical walkthrough of Windows 11 Alternate Syscalls: allocating executable thunks, building the dispatch table, patching PspServiceDescriptorGroupTable, handling PspSyscallProviderServiceDispatchGeneric, and caching syscall arguments. Includes…

Post #2596 1.41K May 12, 2025, 04:09 UTC

Linux Kernel Exploitation

https://r1ru.github.io/categories/linux-kernel-exploitation/

Post #2595 1.56K May 12, 2025, 04:08 UTC

AI Malware Research with MCP Servers

https://www.youtube.com/watch?v=JYRuB0_FsFA

YouTube AI Malware Research with MCP Servers (Stream - 29/04/2025) In this stream, we performed malware research with the MalwareBazaar MCP server from Kevin Thomas https://github.com/mytechnotalent/MalwareBazaar_MCP , unpacked a loader malware variant with x64dbg and analyzed the unpacked loader with the BinjaLattice MCP…

Post #2594 1.62K May 3, 2025, 19:33 UTC

iOS 18.5 Beta 4(and below) MobileCoreService persistence exploit

https://github.com/seanistethered/EvilWorkspace

GitHub GitHub - mach-port-t/EvilWorkspace: iOS 18.5 Beta 4(and below) MobileCoreService persistence exploit. Discovered by me! iOS 18.5 Beta 4(and below) MobileCoreService persistence exploit. Discovered by me! - mach-port-t/EvilWorkspace

Post #2593 3.81K May 2, 2025, 06:55 UTC

Tracing and Manipulating Anti-Analysis Techniques with DynamoRIO

https://0xreverse.com/tracing-and-manipulating-anti-analysis-techniques-with-dynamorio

0xReverse Tracing and Manipulating Anti-Analysis Techniques with DynamoRIO This is a post of mine from an old blog (vx.zone). It has been revised again just for 0xReverse. Introduction In this blog post, I’ll explain how to trace and manipulate a program with DynamoRIO. I’ll use a simple program to explain the concepts (Sou...

Post #2592 3.45K Apr 30, 2025, 08:01 UTC

GRUB2-based Bootkit: New Malware Threat Suspected to be Linked to the NSA's Equation Group

https://mp.weixin.qq.com/s/TgSWYEbkV0dq-ukNDUESOA?poc_token=HGTYEWijnsqGF-W1hh98Ok6OCoyWOjx7MnHYbUMp

Post #2591 1.83K Apr 29, 2025, 03:51 UTC

Building Own MCP - Augmented LLM for Threat Hunting

https://tierzerosecurity.co.nz/2025/04/29/mcp-llm.html

Tier Zero Security Information Security Services. Offensive Security, Penetration Testing, Mobile and Application, Purple Team, Red Team

Post #2590 1.88K Apr 28, 2025, 04:19 UTC

Overview of Map Exploitation in v8

https://xia0.sh/blog/visit-the-map/visit-the-map

xia0o0o0o Overview of Map Exploitation in v8 | xia0o0o0o Brief overview of Map related vulnerabilities in v8

Post #2589 1.36K Apr 27, 2025, 13:34 UTC

https://www.youtube.com/watch?v=VlIExbHPWtw

YouTube Fat Nick & Shakewell - Pemex [Official Video] Shakewell & Fat Nick "Pemex" official music video Produced By : Flexatelli https://twitter.com/FLEXATELLI?lang=en https://www.instagram.com/flexatelli/?hl=en Directed & Shot by Dan Streit Produced by Adam Talan Camera Assistance by Tanner Hall, Alex…

Post #2588 1.43K Apr 25, 2025, 06:36 UTC

eBPF-based lightweight debugger for Android

https://github.com/ShinoLeah/eDBG

GitHub GitHub - ShinoLeah/eDBG: eBPF-based lightweight debugger for Android with MCP support eBPF-based lightweight debugger for Android with MCP support - ShinoLeah/eDBG

Post #2587 1.61K Apr 24, 2025, 14:23 UTC

Deobfuscation techniques: Peephole deobfuscation

https://cert.pl/en/posts/2025/04/peephole-deobfuscation/

cert.pl Deobfuscation techniques: Peephole deobfuscation In this article we describe a basic deobfuscation technique by leveraging a code snippet substitution.

Older posts →