maldev-for-dummies

Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will sho...

maldev-for-dummies

Desarrollo de malware para Dummies En la era de EDR, los operadores de red team ya no pueden salirse con la suya usando payloads precompilados. Por lo tanto, el desarrollo de malware se está convirtiendo en una habilidad vital para cualquier operador. Comenzar con maldev puede parecer desalentado...

BlackSnufkin

🎯 Profile Overview You have finally discovered my Github profile. Please feel free to clone/fork projects, raise issues and submit PRs if you think something could be better. Read my blog for write-ups and research - Happy Hacking! 😊 root@kitploit: struct OffensiveOperator handle: String, role:...

MalDev

MalDev ¡Hola! Bienvenido a mi repositorio : Soy Captain Magma, una persona apasionada dedicada a la ciberseguridad, el desarrollo de malware y el análisis. El propósito de este repositorio es gestionar mi camino de aprendizaje en MalDev mientras aprendo y actualizo este repositorio con mis notas ...

Coldfire

ColdFire II Marco de desarrollo de malware en Golang Tabla de contenidos Tabla de contenidos Introducción Instalación Tipos de funciones incluidas Requisitos Aviso legal Licencia Introducción ColdFire II proporciona varios métodos útiles para el desarrollo de malware e infraestructura de segurida...

VX-API

administrado por vx-underground | síguenos en Twitter | descarga muestras de malware en la página VXUG/samples VX-API Versión: 2.01.015 Desarrollador: smellyvx La VX-API es una colección de funcionalidades maliciosas para ayudar en el desarrollo de malware. Se recomienda clonar y/o descargar todo...

EGESPLOIT

EGESPLOIT EGESPLOIT es una biblioteca de golang para desarrollo de malware, cuenta con algunas funciones únicas para la integración con meterpreter. DOCUMENTACIÓN root@kitploit: CalculateChecksumx: Función que calcula un checksum de 8 bits de x dígitos para conexiones meterpreter reversas...

PMD

Practical Malware Development Exercise 1 - Environment Setup 1. Get a Windows virtual machine setup within a hypervisor. a. Make sure to take a snapshot of your base installation. 2. Download and install Visual Studio 2022 - https://visualstudio.microsoft.com/vs/ a. Select Desktop development wit...

MalwareApiLibrary

MalwareApiLibrary : collection d'API utilisées pour le développement de malwares : StringManagementLib : gère les chaînes de caractères, les hachages de chaînes, et autres WinApiManagementLib : remplacement des fonctions GetModuleHandle et GetProcAddress SyscallsManagementLib : exécute Hellsgate,...

Threat actor abuse of AI accelerates from tool to cyberattack surface

For the last year, one word has represented the conversation living at the intersection of AI and cybersecurity: speed. Speed matters, but it’s not the most important shift we are observing across the threat landscape today. Now, threat actors from nation states to cybercrime groups are embedding...

Threat actor abuse of AI accelerates from tool to cyberattack surface

For the last year, one word has represented the conversation living at the intersection of AI and cybersecurity: speed. Speed matters, but it’s not the most important shift we are observing across the threat landscape today. Now, threat actors from nation states to cybercrime groups are embedding...

Exploit for Out-of-bounds Read in Openssl

--- Cybersecurity Labs Portfolio This repository contain...

OpenAI Disrupts Russian, North Korean, and Chinese Hackers Misusing ChatGPT for Cyberattacks

OpenAI on Tuesday said it disrupted three activity clusters for misusing its ChatGPT artificial intelligence AI tool to facilitate malware development. This includes a Russian‑language threat actor, who is said to have used the chatbot to help develop and refine a remote access trojan RAT, a...

OpenAI Bans ChatGPT Accounts Used by Russian, Iranian, and Chinese Hacker Groups

OpenAI has revealed that it banned a set of ChatGPT accounts that were likely operated by Russian-speaking threat actors and two Chinese nation-state hacking groups to assist with malware development, social media automation, and research about U.S. satellite communications technologies, among...

Mitigating Cyber Risk in the Age of Open-Weight LLMs: Policy Gaps and Technical Realities

Open-weight general-purpose AI GPAI models offer significant benefits but also introduce substantial cybersecurity risks, as demonstrated by the offensive capabilities of models like DeepSeek-R1 in evaluations such as MITRE's OCCULT. These publicly available models empower a wider range of actors...

Golden Chickens Deploy TerraStealerV2 to Steal Browser Credentials and Crypto Wallet Data

The threat actors known as Golden Chickens have been attributed to two new malware families dubbed TerraStealerV2 and TerraLogger, suggesting continued development efforts to fine-tune and diversify their arsenal. "TerraStealerV2 is designed to collect browser credentials, cryptocurrency wallet...

Researchers Uncover RAT-Dropping npm Package Targeting Gulp Users

Cybersecurity researchers have uncovered a new suspicious package uploaded to the npm package registry that's designed to drop a remote access trojan RAT on compromised systems. The package in question is glup-debugger-log, which targets users of the gulp toolkit by masquerading as a "logger for...

Latrodectus Malware Loader Emerges as IcedID's Successor in Phishing Campaigns

Cybersecurity researchers have observed a spike in email phishing campaigns starting early March 2024 that delivers Latrodectus, a nascent malware loader believed to be the successor to the IcedID malware. "These campaigns typically involve a recognizable infection chain involving oversized...

Grandoreiro Banking Trojan Resurfaces, Targeting Over 1,500 Banks Worldwide

The threat actors behind the Windows-based Grandoreiro banking trojan have returned in a global campaign since March 2024 following a law enforcement takedown in January. The large-scale phishing attacks, likely facilitated by other cybercriminals via a malware-as-a-service MaaS model, target ove...

AI likely to boost ransomware, warns government body

The British National Cyber Security Centre NCSC says it expects Artificial Intelligence AI to heighten the global ransomware threat. In a report, the NCSC makes the assessment that AI will almost certainly increase the volume and heighten the impact of cyberattacks over the next two years. We’re...