MalwareApiLibrary

MalwareApiLibrary : collezione di API utilizzate per lo sviluppo di malware : StringManagementLib : gestisce stringhe, hash di stringhe e altro WinApiManagementLib : sostituzione delle funzioni GetModuleHandle e GetProcAddress SyscallsManagementLib : esegue Hellsgate, TartarusGate, PerunsFart...

BlackSnufkin

🎯 Panoramica del Profilo Hai finalmente scoperto il mio profilo GitHub. Sentiti libero di clonare/forkare i progetti, aprire issue e inviare PR se pensi che qualcosa possa essere migliorato. Leggi il mio blog per write-up e ricerche - Buon hacking! 😊 root@kitploit: struct OffensiveOperator handle...

EGESPLOIT

EGESPLOIT EGESPLOIT è una libreria in golang per lo sviluppo di malware, ha alcune funzioni uniche per l'integrazione con meterpreter. DOCUMENTAZIONE root@kitploit: CalculateChecksumx : La funzione calcola un checksum a 8 bit di x cifre per connessioni reverse HTTP/HTTPS meterpreter, restituisce ...

maldev-for-dummies

Malware-Entwicklung für Dummies Im Zeitalter von EDR können Red-Team-Operateure nicht mehr mit vorkompilierten Payloads auskommen. Daher wird Malware-Entwicklung zu einer unverzichtbaren Fähigkeit für jeden Operator. Der Einstieg in die Maldev mag abschreckend wirken, ist aber tatsächlich sehr...

Coldfire

ColdFire II Framework di sviluppo malware in Golang Sommario Sommario Introduzione Installazione Tipi di funzioni incluse Requisiti Disclaimer Licenza Introduzione ColdFire II fornisce vari metodi utili per lo sviluppo di malware e infrastrutture di sicurezza in Golang. La maggior parte delle...

MalDev

MalDev Hallo! Willkommen in meinem Repo : Ich bin Captain Magma, eine leidenschaftliche Person, die sich der Cybersicherheit, der Malware-Entwicklung und -Analyse widmet. Der Zweck dieses Repositorys ist es, meinen MalDev-Lernpfad zu verwalten, während ich lerne und dieses Repository mit meinen...

VX-API

gerenciado por vx-underground | siga-nos no Twitter | baixe amostras de malware na página VXUG/samples VX-API Versão: 2.01.015 Desenvolvedor: smellyvx A VX-API é uma coleção de funcionalidades maliciosas para auxiliar no desenvolvimento de malware. Recomenda-se clonar e/ou baixar este repositório...

maldev-for-dummies

Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will sho...

PMD

Desenvolvimento Prático de Malware Exercício 1 - Configuração do Ambiente 1. Configure uma máquina virtual Windows dentro de um hipervisor. a. Certifique-se de tirar um snapshot da sua instalação base. 2. Baixe e instale o Visual Studio 2022 - https://visualstudio.microsoft.com/vs/ a. Selecione a...

Threat actor abuse of AI accelerates from tool to cyberattack surface

For the last year, one word has represented the conversation living at the intersection of AI and cybersecurity: speed. Speed matters, but it’s not the most important shift we are observing across the threat landscape today. Now, threat actors from nation states to cybercrime groups are embedding...

Threat actor abuse of AI accelerates from tool to cyberattack surface

For the last year, one word has represented the conversation living at the intersection of AI and cybersecurity: speed. Speed matters, but it’s not the most important shift we are observing across the threat landscape today. Now, threat actors from nation states to cybercrime groups are embedding...

Exploit for Out-of-bounds Read in Openssl

--- Cybersecurity Labs Portfolio This repository contain...

OpenAI Disrupts Russian, North Korean, and Chinese Hackers Misusing ChatGPT for Cyberattacks

OpenAI on Tuesday said it disrupted three activity clusters for misusing its ChatGPT artificial intelligence AI tool to facilitate malware development. This includes a Russian‑language threat actor, who is said to have used the chatbot to help develop and refine a remote access trojan RAT, a...

OpenAI Bans ChatGPT Accounts Used by Russian, Iranian, and Chinese Hacker Groups

OpenAI has revealed that it banned a set of ChatGPT accounts that were likely operated by Russian-speaking threat actors and two Chinese nation-state hacking groups to assist with malware development, social media automation, and research about U.S. satellite communications technologies, among...

Mitigating Cyber Risk in the Age of Open-Weight LLMs: Policy Gaps and Technical Realities

Open-weight general-purpose AI GPAI models offer significant benefits but also introduce substantial cybersecurity risks, as demonstrated by the offensive capabilities of models like DeepSeek-R1 in evaluations such as MITRE's OCCULT. These publicly available models empower a wider range of actors...

Golden Chickens Deploy TerraStealerV2 to Steal Browser Credentials and Crypto Wallet Data

The threat actors known as Golden Chickens have been attributed to two new malware families dubbed TerraStealerV2 and TerraLogger, suggesting continued development efforts to fine-tune and diversify their arsenal. "TerraStealerV2 is designed to collect browser credentials, cryptocurrency wallet...

Researchers Uncover RAT-Dropping npm Package Targeting Gulp Users

Cybersecurity researchers have uncovered a new suspicious package uploaded to the npm package registry that's designed to drop a remote access trojan RAT on compromised systems. The package in question is glup-debugger-log, which targets users of the gulp toolkit by masquerading as a "logger for...

Latrodectus Malware Loader Emerges as IcedID's Successor in Phishing Campaigns

Cybersecurity researchers have observed a spike in email phishing campaigns starting early March 2024 that delivers Latrodectus, a nascent malware loader believed to be the successor to the IcedID malware. "These campaigns typically involve a recognizable infection chain involving oversized...

Grandoreiro Banking Trojan Resurfaces, Targeting Over 1,500 Banks Worldwide

The threat actors behind the Windows-based Grandoreiro banking trojan have returned in a global campaign since March 2024 following a law enforcement takedown in January. The large-scale phishing attacks, likely facilitated by other cybercriminals via a malware-as-a-service MaaS model, target ove...

AI likely to boost ransomware, warns government body

The British National Cyber Security Centre NCSC says it expects Artificial Intelligence AI to heighten the global ransomware threat. In a report, the NCSC makes the assessment that AI will almost certainly increase the volume and heighten the impact of cyberattacks over the next two years. We’re...