Channel Public Channel

Order of Six Angles

@orderofsixangles

Каналу 7 лет

Youtube канал: https://youtube.com/@orderofsixangles

Github: https://github.com/thatskriptkid

Тематические подборки малвари: https://www.orderofsixangles.com/samples

Пишите в личные сообщения канала

Open in Telegram

Subscribers: 5.41K
Photos: 450
Videos: 31
Links: 2.2K

Showing posts older than #2628 · Back to latest

Older Posts 19 shown

Post #2627 1.73K Jun 1, 2025, 07:12 UTC

https://youtu.be/TdrL3QxjyVw?si=SYTbVMwADqwqn0I4

YouTube Lana Del Rey - Summertime Sadness (Official Music Video) Brand new album 'Lust for Life' out now. Listen: https://lana.lnk.to/LFLaID Lana Del Rey - Summertime Sadness (Official Music Video) Sign up for updates: http://smarturl.it/LanaDelRey.News Follow Lana Del Rey: http://www.instagram.com/lanadelrey http:…

Post #2626 1.57K May 30, 2025, 16:02 UTC

Post #2624 2.04K May 30, 2025, 08:05 UTC

Order of Six Angles Aiding reverse engineering with Rust and a local LLM https://security.humanativaspa.it/aiding-reverse-engineering-with-rust-and-a-local-llm/

Чекнул эту тулзу, результат на скринах. На вход подал псевдокод (IDA PRO) функции из малвари, в ответ он переименовал переменные и обьяснил, что делает функция. Результат очень неплохой, адекватный. При анализе я думаю ему помогли строки "sqlite" "table" и т.д. от них он видимо и плясал.

В начале запускал модель локально, на своем компе, комп слабенький, в итоге уходит примерно 5 часов на 1 файл (а точнее небольшую функцию). Хороших локальных мощностей у меня нет. Мне подсказали использовать Google Colab (бесплатную версию). Развернул тулзу и модель там, в итоге на 1 файл стал уходить 1 час. Все еще долго. Подумываю купить Pro версию Google Colab (50 долларов в месяц) и посмотреть на время.

*можно в один файл запихать много функций и они все будут проанализированны

Post #2622 2.32K May 28, 2025, 06:00 UTC

Aiding reverse engineering with Rust and a local LLM

https://security.humanativaspa.it/aiding-reverse-engineering-with-rust-and-a-local-llm/

HN Security HN Security - Aiding reverse engineering with Rust and a local LLM - Offensive Rust series article that introduces a new AI tool (oneiromancer) to aid with reverse engineering.

Post #2621 1.47K May 28, 2025, 05:55 UTC

Dissecting the macOS 'AppleProcessHub' Stealer: Technical Analysis of a Multi-Stage Attack

https://www.kandji.io/blog/macos-appleprocesshub-stealer

Iru Dissecting the macOS 'AppleProcessHub' Stealer: A Technical Analysis Technical analysis of macOS AppleProcessHub stealer malware using AES encryption to evade detection and steal SSH keys, keychain data, and browser history.

Post #2620 1.39K May 28, 2025, 05:17 UTC

C2 Redirectors: Advanced Infrastructure for Modern Red Team Operations

https://xbz0n.sh/blog/c2-redirectors

xbz0n.sh C2 Redirectors: Advanced Infrastructure for Modern Red Team Operations Let's talk about Command and Control (C2) infrastructure. It's the backbone of any red team operation, letting you talk to your implants in target environmen...

Post #2619 1.54K May 28, 2025, 03:48 UTC

Order of Six Angles Пятничный опрос. Вы пробовали наркотики? (кроме алкоголя, никотина, кофеина, марихуаны)

Я пробовал: кетамин, трамадол, амфетамин, MDMA, 2cb, бакласан, циклодол, диазепам, спайс

Post #2618 1.6K May 27, 2025, 06:43 UTC

готовлю доклад для 2600 на тему использования AI для malware analysis/vuln research (в частности MCP серверов) 😀

Post #2617 1.6K May 27, 2025, 05:56 UTC

Threat of TCC Bypasses on macOS

https://afine.com/threat-of-tcc-bypasses-on-macos/

Afine Threat of TCC Bypasses on macOS TCC bypass on macOS isn't just an annoying prompt—it's the last line of defense between malware and your private data. Learn why.

Post #2616 1.49K May 26, 2025, 04:43 UTC

Sliver C2 Tutorial - Exploring The Hacker's Armory

https://www.youtube.com/watch?v=-zBxsb0yThc

YouTube Sliver C2 Tutorial - Exploring The Hacker's Armory In this in-depth Sliver C2 tutorial, you’ll dive into one of the most powerful and modern Command and Control frameworks used by red teamers and ethical hackers today. Sliver offers cross-platform implants, encrypted communication, and a rich feature set…

Post #2615 1.62K May 23, 2025, 06:09 UTC

Post #2614 1.61K May 23, 2025, 05:42 UTC

On zero days & exploit engineering

https://www.youtube.com/watch?v=QFWPxji5egI

YouTube On zero days & exploit engineering Enjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.

Post #2613 1.59K May 22, 2025, 11:27 UTC

How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation

https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/

Sean Heelan's Blog How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation In this post I’ll show you how I found a zeroday vulnerability in the Linux kernel using OpenAI’s o3 model. I found the vulnerability with nothing more complicated than the o3 API &#821…

Post #2612 1.4K May 21, 2025, 04:23 UTC

OffensiveCon25

https://www.youtube.com/playlist?list=PLYvhPWR_XYJk0p40BrX7K2z-_j_tJmvhc

Post #2611 3.52K May 19, 2025, 09:35 UTC

Bypassing kASLR via Cache Timing

https://r0keb.github.io/posts/Bypassing-kASLR-via-Cache-Timing/

r0keb Bypassing kASLR via Cache Timing Good morning! As we saw in last week’s blog post, the use of NtQuerySystemInformation() to bypass kASLR and the changes introduced in version 24H2 have effectively taken away that convenient method we used to rely on to simplify things.

Post #2610 1.5K May 19, 2025, 04:21 UTC

IDA Python Script to Get All function names from Event Constructor (VCL) (IDA 9)

https://github.com/Coldzer0/IDA-For-Delphi

GitHub GitHub - Coldzer0/IDA-For-Delphi: IDA Python Script to Get All function names from Event Constructor (VCL) IDA Python Script to Get All function names from Event Constructor (VCL) - Coldzer0/IDA-For-Delphi

Post #2609 1.55K May 19, 2025, 04:14 UTC

Frame by Frame, Kernel Streaming Keeps Giving Vulnerabilities

https://devco.re/blog/2025/05/17/frame-by-frame-kernel-streaming-keeps-giving-vulnerabilities-en/

DEVCORE 戴夫寇爾 Frame by Frame, Kernel Streaming Keeps Giving Vulnerabilities | DEVCORE 戴夫寇爾 In-depth research into Windows Kernel Streaming vulnerabilities, revealing MDL misuse, buffer misalignment, and exploitation techniques used in CVE-2024-38238 and others.

Post #2608 2.41K May 19, 2025, 04:13 UTC

Malware Loader Reverse Engineering with IDA Pro

https://www.youtube.com/watch?v=GWJyCF6QM2c

YouTube Malware Loader Reverse Engineering with IDA Pro (Stream - 06/05/2025) In this stream we reverse engineered a malware loader with IDA Pro, including its anti-analysis, persistence, COM UAC Bypass, command-line spoofing, C2, process injection, and TCP proxy functionality. Learn how to reverse engineer malware: https://train…

Post #2607 1.27K May 17, 2025, 16:56 UTC

https://www.youtube.com/watch?v=dwxm9Eh08iw&list=RDGMEMQ1dJ7wXfLlqCjwV0xfSNbA&index=4

YouTube Bones - Cut (Official Video) prod. by hnrk - http://www.soundcloud.com/hnrk93 www.TeamSESH.com Download PAIDPROGRAMMING - http://tinyurl.com/maj89xx

Older posts →