Каналу 7 лет
Youtube канал: https://youtube.com/@orderofsixangles
Github: https://github.com/thatskriptkid
Тематические подборки малвари: https://www.orderofsixangles.com/samples
Пишите в личные сообщения канала
Post #2647
1.02K
Channel Public Channel
OR Order of Six Angles
@orderofsixangles
- Subscribers
- 5.41K
- Photos
- 450
- Videos
- 31
- Links
- 2.2K
Showing posts older than #2648 · Back to latest
Older Posts 20 shown
Post #2646
989
Сегодня каналу исполнилось ровно 6 лет 😈🥰😘
Post #2645
1.19K
Post #2644
1.4K
Fuzzing 1001: Introductory white-box fuzzing with AFL++
https://p.ost2.fyi/courses/course-v1:OpenSecurityTraining2+Fuzz1001_Intro_AFL+2025_v1/about
p.ost2.fyi Fuzzing 1001: Introductory white-box fuzzing with AFL++ Are you looking for an automated way to find bugs in your code? In this course, you'll learn how to use AFL++ to test and identify vulnerabilities, leveraging a white-box approach to make your testing more efficient and targeted. By the end, you'll be ready… https://p.ost2.fyi/courses/course-v1:OpenSecurityTraining2+Fuzz1001_Intro_AFL+2025_v1/about
Post #2643
1.04K
Post #2642
1.32K
Proof of concepts demonstrating some aspects of the Windows kernel shadow stack mitigation.
https://github.com/synacktiv/windows_kernel_shadow_stack
https://github.com/synacktiv/windows_kernel_shadow_stack
Post #2641
1.26K
Post #2640
1.22K
Reversing Firmware Encryption with IDA Pro - Hanwha WiseNet Security Camera
https://www.youtube.com/watch?v=WP7kIfmVFpY
YouTube Reversing Firmware Encryption with IDA Pro - Hanwha WiseNet Security Camera Thanks to Hex-Rays for collaborating on this video: Where Reverse Engineering Meets Precision
Hex-Rays Discount Code: MATT50
To activate your 50% product discount, click "Get a quote" in the web shop (under "Order & Pay), or email sales@hex-rays.com. Make… https://www.youtube.com/watch?v=WP7kIfmVFpY
Post #2639
1.6K
Windows Inter Process Communication A Deep Dive Beyond the Surface - Part 2
https://sud0ru.ghost.io/windows-inter-process-communication-a-deep-dive-beyond-the-surface-part-2/
https://sud0ru.ghost.io/windows-inter-process-communication-a-deep-dive-beyond-the-surface-part-2/
Post #2638
1.41K
Post #2637
1.66K
A user-mode code and its rootkit that will Kill EDR Processes permanently by leveraging the power of Process Creation Blocking Kernel Callback Routine registering and ZwTerminateProcess.
https://github.com/SaadAhla/dark-kill
https://github.com/SaadAhla/dark-kill
Post #2636
1.96K
Chrome Browser Exploitation, Part 2: Introduction to Ignition, Sparkplug and JIT Compilation via TurboFan
https://jhalon.github.io/chrome-browser-exploitation-2/
Jack Hacks Chrome Browser Exploitation, Part 2: Introduction to Ignition, Sparkplug and JIT Compilation via TurboFan In my previous post “Chrome Browser Exploitation, Part 1: Introduction to V8 and JavaScript Internals”, we took our first deep dive into the world of browser exploitation by covering a few complex topics that were necessary for fundamental knowledge. We mainly… https://jhalon.github.io/chrome-browser-exploitation-2/
Post #2635
1.52K
Post #2634
1.41K
Order of Six Angles Чекнул эту тулзу, результат на скринах. На вход подал псевдокод (IDA PRO) функции из малвари, в ответ он переименовал переменные и обьяснил, что делает функция. Результат очень неплохой, адекватный. При анализе я думаю ему помогли строки "sqlite" "table" и…
Деплой всего сразу в Google Colab
P.S. Оплатить вычислительные единицы в Google Colab я не смог, так как по дефолту там стоит страна США при оплате, и я ее не могу сменить
!curl -fsSL https://ollama.com/install.sh | sh -s -- -y
!nohup ollama serve > ollama.log 2>&1 &
!wget https://huggingface.co/AverageBusinessUser/aidapal/resolve/main/aidapal-8k.Q4_K_M.gguf
!wget https://huggingface.co/AverageBusinessUser/aidapal/resolve/main/aidapal.modelfile
!ollama create aidapal -f aidapal.modelfile
!ollama list
!curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
import os
os.environ['PATH'] += ":/root/.cargo/bin:/new/bin/path"
!cargo install oneiromancer
P.S. Оплатить вычислительные единицы в Google Colab я не смог, так как по дефолту там стоит страна США при оплате, и я ее не могу сменить
Post #2633
1.38K
Operation DRAGONCLONE: Chinese Telecommunication industry targeted via VELETRIX & VShell malware.
https://www.seqrite.com/blog/operation-dragonclone-chinese-telecom-veletrix-vshell-malware/
Seqrite Labs Operation DRAGONCLONE: Chinese Telecommunication industry targeted via VELETRIX & VShell malware <p>Contents Introduction Initial Findings Infection Chain. Technical Analysis Stage 0 – Malicious ZIP File. Stage 1 – Malicious VELETRIX implant. Stage 2 – Malicious V-Shell implant. Hunting and Infrastructure. Attribution Conclusion Seqrite Protection. IOCs… https://www.seqrite.com/blog/operation-dragonclone-chinese-telecom-veletrix-vshell-malware/
Post #2632
4.78K
Post #2631
4.03K
Beginner Malware Analysis: Babuk Ransomware with IDA Pro (Stream - 13/05/2025)
https://www.youtube.com/watch?v=xksuzoqvd3Q
YouTube Beginner Malware Analysis: Babuk Ransomware with IDA Pro (Stream - 13/05/2025) In this beginner malware analysis stream, we reverse engineered a Babuk Ransomware variant with IDA Pro. We analyzed its command-line parsing, service termination, process termination, anti-recovery commands, file encryption, share encryption, and manually… https://www.youtube.com/watch?v=xksuzoqvd3Q
Post #2630
3.4K
Hypervisors for Memory Introspection and Reverse Engineering
https://secret.club/2025/06/02/hypervisors-for-memory-introspection-and-reverse-engineering.html
secret club Hypervisors for Memory Introspection and Reverse Engineering Introduction https://secret.club/2025/06/02/hypervisors-for-memory-introspection-and-reverse-engineering.html
Post #2629
1.86K
Post #2628
1.61K