makin

Ho creato makin per rendere la valutazione iniziale dei malware un po' più facile per me, penso che possa essere utile anche per altri. Aiuta a rivelare le tecniche di rilevamento del debugger utilizzate da un campione. Qualsiasi feedback è molto apprezzato: @qazqaz Come funziona? makin apre un...

IOSSecuritySuite

⭐️ Vuoi diventare un ingegnere certificato di sicurezza delle applicazioni iOS? ⭐️ Dai un'occhiata al nostro corso pratico e completamente online su: https://courses.securing.pl/courses/iase Descrizione ISS di @r3ggi 🌏 iOS Security Suite è una libreria avanzata e facile da usare per la sicurezza...

ghostdebug

GhostDebug GhostDebug ist ein Windows-x64-Debugger-Prototyp, der aus einer nativen Debugging-DLL und einem .NET-Framework-Befehlszeilenclient besteht. Er ist für das Debugging von Zielen gedacht, die Debugger-Erkennungsprüfungen verwenden. Hintergrundinformationen zum Design finden Sie unter...

LockBit3.0: A Threat that Persists

LockBit3.0: A Threat that Persists By Trellix · November 17, 2022 This blog was written by Alexandre Mundo LockBit is a very well-known family of ransomware that has created havoc worldwide over the last few years. In March 2022, a new variant of the ransomware was discovered. The LockBit3.0...

Ransomware Maze

ARCHIVED STORY Ransomware Maze Alexandre Mundo · MAR 26, 2020 Overview The Maze ransomware, previously known in the community as “ChaCha ransomware”, was discovered on May the 29th 2019 by Jerome Segura1. The main goal of the ransomware is to crypt all files that it can in an infected system and...

PrisonLocker Ransomware Emerges From Criminal Underground

Security researchers from Malware Must Die uncovered new ransomware called PrisonLocker, and said the malware author is either a legitimate security researcher or is posing as one via a personal blog and Twitter handle. Malware Must Die has monitored PrisonLocker’s development since spotting it f...

win32 PEB!NtGlobalFlags shellcode 14 bytes

Exploit for win32 platform in category shellcode ========================================== win32 PEB!NtGlobalFlags shellcode 14 bytes ========================================== / PEB!NtGlobalFlags 14 BYTES Author: Koshi Description: Uses PEB method to determine whether a debugger is attached to...

win32 PEB!NtGlobalFlags shellcode 14 bytes

win32 PEB!NtGlobalFlags shellcode 14 bytes. Shellcode exploit for win32 platform / PEB!NtGlobalFlags 14 BYTES Author: Koshi Description: Uses PEB method to determine whether a debugger is attached to the running proccess or not. No 9x. : Length: 14 Bytes Registers Used: EAX,ESI,ESP Compiled:...