MalDev

MalDev Salut ! Bienvenue dans mon dépôt : Je suis Captain Magma, une personne passionnée dédiée à la cybersécurité, au développement de malwares et à l'analyse. Ce dépôt a pour but de gérer mon parcours MalDev au fur et à mesure que j'apprends et que je mets à jour ce dépôt avec mes notes et mon...

Coldfire

ColdFire II Фреймворк для разработки вредоносного ПО на Golang Содержание Содержание Введение Установка Типы включённых функций Требования Отказ от ответственности Лицензия Введение ColdFire II предоставляет различные методы, полезные для разработки вредоносного ПО и защитной инфраструктуры на...

maldev-for-dummies

Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will sho...

maldev-for-dummies

Développement de malwares pour les nuls À l'ère des EDR, les opérateurs red team ne peuvent plus se contenter d'utiliser des charges utiles pré-compilées. Par conséquent, le développement de malwares devient une compétence vitale pour tout opérateur. Se lancer dans le maldev peut sembler...

EGESPLOIT

EGESPLOIT EGESPLOIT est une bibliothèque Go pour le développement de logiciels malveillants, elle possède quelques fonctions uniques pour l'intégration avec meterpreter. DOCUMENTATION CalculateChecksumx : Fonction calcule la somme de contrôle 8 bits à x chiffres pour les connexions meterpreter...

PMD

Практическая разработка вредоносных программ Упражнение 1 - Настройка окружения 1. Настройте виртуальную машину Windows в гипервизоре. a. Обязательно сделайте снимок базовой установки. 2. Скачайте и установите Visual Studio 2022 - https://visualstudio.microsoft.com/vs/ a. При установке выберите...

BlackSnufkin

🎯 프로필 개요 드디어 제 Github 프로필을 발견하셨군요. 더 나은 점이 있다고 생각되면 프로젝트를 클론/포크하고, 이슈를 제기하고, PR을 제출해 주세요. write-up과 연구 자료는 제 블로그에서 확인하세요 - Happy Hacking! 😊 struct OffensiveOperator handle: String, role: String, specialties: Vec, baseofoperations: String, primarylanguages: Vec, impl OffensiveOperator fn new - Sel...

MalwareApiLibrary

MalwareApiLibrary : коллекция API для разработки вредоносного ПО : StringManagementLib : управление строками, строковыми хэшами и прочим WinApiManagementLib : замена функций GetModuleHandle и GetProcAddress SyscallsManagementLib : запускает Hellsgate, TartarusGate, PerunsFart пока что для снятия...

VX-API

管理元: vx-underground | Twitterでフォローする Twitter | VXUG/samplesページでマルウェアサンプルをダウンロード VXUG/samples VX-API バージョン: 2.01.015 開発者: smellyvx VX-APIは、マルウェア開発を支援する悪意のある機能のコレクションです。このリポジトリ全体をクローンまたはダウンロードし、Visual Studioソリューションファイルを開いて機能やコンセプトを簡単に探索することをお勧めします。...

Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel

These are the workshop materials for "Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel", presented at DEF CON 34 and BSidesLV 2026. This workshop explores custom malware development, EDR Architecture and Evasion, C2 customization, and kernel-level techniques using Elastic...

Exploit.Malware-Development

No d...

FOMO in the SOC: Where AI Platforms like Claude Actually Fit

AI is moving incredibly fast, and every security leader is feeling the pressure to keep up. AI platforms like Claude, Codex and Cursor are already helping security teams write detections, investigate alerts, summarize incidents, and automate repetitive work. The conversation has evolved from...

Threat actor abuse of AI accelerates from tool to cyberattack surface

For the last year, one word has represented the conversation living at the intersection of AI and cybersecurity: speed. Speed matters, but it’s not the most important shift we are observing across the threat landscape today. Now, threat actors from nation states to cybercrime groups are embedding...

Threat actor abuse of AI accelerates from tool to cyberattack surface

For the last year, one word has represented the conversation living at the intersection of AI and cybersecurity: speed. Speed matters, but it’s not the most important shift we are observing across the threat landscape today. Now, threat actors from nation states to cybercrime groups are embedding...

Exploit for Out-of-bounds Read in Openssl

--- Cybersecurity Labs Portfolio This repository contain...

OpenAI Disrupts Russian, North Korean, and Chinese Hackers Misusing ChatGPT for Cyberattacks

OpenAI on Tuesday said it disrupted three activity clusters for misusing its ChatGPT artificial intelligence AI tool to facilitate malware development. This includes a Russian‑language threat actor, who is said to have used the chatbot to help develop and refine a remote access trojan RAT, a...

OpenAI Bans ChatGPT Accounts Used by Russian, Iranian, and Chinese Hacker Groups

OpenAI has revealed that it banned a set of ChatGPT accounts that were likely operated by Russian-speaking threat actors and two Chinese nation-state hacking groups to assist with malware development, social media automation, and research about U.S. satellite communications technologies, among...

OpenAI Bans ChatGPT Accounts Used by Russian, Iranian, and Chinese Hacker Groups

OpenAI has revealed that it banned a set of ChatGPT accounts that were likely operated by Russian-speaking threat actors and two Chinese nation-state hacking groups to assist with malware development, social media automation, and research about U.S. satellite communications technologies, among...

Mitigating Cyber Risk in the Age of Open-Weight LLMs: Policy Gaps and Technical Realities

Open-weight general-purpose AI GPAI models offer significant benefits but also introduce substantial cybersecurity risks, as demonstrated by the offensive capabilities of models like DeepSeek-R1 in evaluations such as MITRE's OCCULT. These publicly available models empower a wider range of actors...

Golden Chickens Deploy TerraStealerV2 to Steal Browser Credentials and Crypto Wallet Data

The threat actors known as Golden Chickens have been attributed to two new malware families dubbed TerraStealerV2 and TerraLogger, suggesting continued development efforts to fine-tune and diversify their arsenal. "TerraStealerV2 is designed to collect browser credentials, cryptocurrency wallet...