Characterizing Phishing Pages by JavaScript Capabilities

In 2024, the Anti-Phishing Work Group identified over one million phishing pages. Phishers achieve this scale by using phishing kits -- ready-to-deploy phishing websites -- to rapidly deploy phishing campaigns with specific data exfiltration, evasion, or mimicry techniques. In contrast, researche...

Hunt-Sleeping-Beacons - Aims To Identify Sleeping Beacons

The idea of this project is to identify beacons which are unpacked at runtime or running in the context of another process. To do so, I make use of the observation that beacons tend to call Sleep between their callbacks. A call to sleep sets the state of the thread to DelayExecution which is take...

os-fingerprinting.txt

Date: Mon, 28 Dec 1998 16:16:40 -0700 From: David G. Andersen To: [email protected] Subject: A few more fingerprinting techniques - time and netmask The release of nmap reminded me about some work I did a while ago for yet-more-information-gathering-programs, and I thought it might be...