Channel Public Channel

ＳｅｃＮｏｔｅ

@secnote

https://t.me/+BnJr9e6R2_YwMTVk

Open in Telegram

Subscribers: 2.89K
Photos: 141
Videos: 9
Links: 234

Showing posts older than #178 · Back to latest

Older Posts 18 shown

Post #177 1.44K Nov 9, 2025, 06:53 UTC

call stack signatures with call gadgets

Published on Thu 06 November 2025 by SAERXCIT (@SAERXCIT)

TL;DR: Using call gadgets to insert arbitrary modules in the call stack during module load, breaking signatures used in detection rules. The code is available here: https://github.com/AlmondOffSec/LibTPLoadLib

👾 4

Post #176 1.54K Oct 31, 2025, 23:23 UTC

Forwarded from Threat Hunting Father 🦔

ADCS ESC9_15 Offzone2025.pdf2 MB

🔐 ADCS ESC9–15 → новая зона риска
На Offzone 2025 показали, как цепочки ESC9–ESC15 позволяют эскалировать права через AD Certificate Services: обход StrongCertificateBindingEnforcement, подмена altSecurityIdentities, злоупотребление IssuancePolicy, и новый баг — CVE-2024-49019 (arbitrary Application Policy).
📍Фокус: шаблоны, registry-флаги KDC/SCHANNEL, RPC через NTLM, SID-рассинхронизация.
🦔 THF

👾 3

Post #175 1.51K Oct 30, 2025, 14:09 UTC

There's More than One Way to Trigger a Windows Service

Written by Christopher Paschen

👾 6

Post #174 1.61K Oct 23, 2025, 23:08 UTC

Forwarded from 1N73LL1G3NC3

📄 Catching Credential Guard Off Guard

Credential Guard was supposed to end credential dumping. It didn't. @bytewreck just dropped a new blog post detailing techniques for extracting credentials on fully patched Windows 11 & Server 2025 with modern protections enabled.

🔗 DumpGuard

Proof-of-Concept tool for extracting NTLMv1 hashes from sessions on modern Windows systems.

P.S. Previously, crack.sh operated a free service for performing rainbow table lookups to recover NT hashes from NTLMv1 responses, but was recently shut down due to maintenance issues. In its absence, a new free service was published at ntlmv1.com.

👾 9

Post #173 1.38K Oct 22, 2025, 15:21 UTC

Fast, Broad, and Elusive: How Vidar Stealer 2.0 Upgrades Infostealer Capabilities
Trend™ Research examines the latest version of the Vidar stealer, which features a full rewrite in C, a multithreaded architecture, and several enhancements that warrant attention. Its timely evolution suggests that Vidar is positioning itself to occupy the space left after Lumma Stealer’s decline.

#stealer

👾 6

Post #172 1.49K Oct 19, 2025, 17:22 UTC

DefenderWrite

Abusing Whitelisted Programs for Arbitrary Writes

👾 4

Post #170 1.99K Oct 17, 2025, 10:43 UTC

Bypassing Web Filters - SNI spoofing

https://blog.compass-security.com/2025/03/bypassing-web-filters-part-1-sni-spoofing/

https://blog.compass-security.com/2025/03/bypassing-web-filters-part-2-host-header-spoofing/

https://blog.compass-security.com/2025/03/bypassing-web-filters-part-3-domain-fronting/

https://blog.compass-security.com/2025/03/bypassing-web-filters-part-4-host-header-spoofing-domain-fronting-detection-bypasses/

#Infra

👾 8

Post #169 1.27K Oct 17, 2025, 10:43 UTC

Meet the Malware: Extension

TigerJack's Extensions Continue to Rob Developers Blind Across Different Marketplaces

#stealer

👾 2

Post #168 1.49K Oct 16, 2025, 16:35 UTC

executing shellcode from non-executable memory and "bypassing" DEP/NX.

A proof-of-concept implementation demonstrating how to execute code from non-executable memory on Windows x64 systems by combining hardware breakpoints, vectored exception handling (VEH), and instruction emulation—bypassing DEP/NX protection without modifying memory permissions.

👾 6

Post #167 1.42K Oct 16, 2025, 02:02 UTC

I wannabe Red Team Operator, so what Now?

Tools won’t make you a Red Teamer any more than a stethoscope makes you a doctor. What matters is knowing why, when, and how to use them. Surgically.

👾 10

Post #165 1.41K Oct 14, 2025, 14:48 UTC

ＳｅｃＮｏｔｅ Breaking Control Flow Flattening: A Deep Technical Analysis https://zerotistic.blog/posts/cff-remover/ advanced obfuscation with LLVM and template metaprogramming https://0xpat.github.io/Malware_development_part_6/ basic Ultility To Generate C++ Codes…