ByteShield – Telegram

ByteShield

1.29K subscribers

99 photos

32 videos

107 files

519 links

Download Telegram

About

Blog

Apps

Platform

1.29K subscribers

mas_1_rev_1.pdf

Malware Analysis Series (MAS) – Article

Part1
@Author

👍2

265 views16:16

https://cn-sec.com/archives/4560574.html

A report reveals that the OceanLotus group, also known as APT32 or APT-Q-31, has been conducting long-term cyber operations against China and neighboring Southeast Asian countries.
#CyberSecurity
#APT32

CN-SEC 中文网

APT | 海莲花组织Havoc远控木马分析

👍3

272 viewsedited 02:38

Malware Analysis Series (MAS) – Article

Part2
@Author

👍3

281 views05:27

Malware Analysis Series (MAS) – Article

Part3
@Author

👍4

275 views09:43

Malware Analysis Series (MAS) – Article

Part4
@Author

👍4

286 views14:31

Malware Analysis Series (MAS) – Article

Part5
@Author

👍3

293 views02:32

Malware Analysis Series (MAS) – Article

Part6
@Author

👍4

280 views08:32

Malware Analysis Series (MAS) – Article

Part7
@Author

👍4

268 views14:33

Malware Analysis Series (MAS): article | MacOS/iOS

Part8
@Author

👍3

268 views04:34

Malware Analysis Series (MAS): article | Shellcode

PS: there is a typo on page 07 at the last bullet. Where you read “0x00000095” you must change it to “0x00000099“, as stated at the previous bullet.

Part9
@Author

👍3

281 views10:36

Malware Analysis Series (MAS): article | Linux

Part10
@Author

👍1

272 views16:37

exploit_reversing_01-1.pdf

Exploiting Reversing (ER) series: article 01 | Windows kernel drivers – part 01

Author

279 views20:33

exploit_reversing_02-2.pdf

Exploiting Reversing (ER) series: article 02 | Windows kernel drivers – part 02

Author

264 views09:16

exploit_reversing_03.pdf

Exploiting Reversing (ER) series: article 03 | Chrome (part 01)

Author

250 views13:17

https://github.com/DarkBitx/ICRev

GitHub - DarkBitx/ICRev: Establishes an encrypted reverse shell between a server and client over an ICMP-based covert tunnel

Establishes an encrypted reverse shell between a server and client over an ICMP-based covert tunnel - DarkBitx/ICRev

👍1👎1

282 views13:33

midnight computer lab - directory
Open from 12am - 6am daily

https://midnightcomputerlab.net/directory/

👍2

271 views17:45

exploit_reversing_04.pdf

Exploiting Reversing (ER) series: article 04 | macOS/iOS (part 01)

Author

👍2

293 views22:18

exploit_reversing_05.pdf

Exploiting Reversing (ER) series: article 05 | Hyper-V (part 01)

Author

👍2

259 views08:18

https://youtu.be/jPDJ_Zo6jiY?si=37I_NmUpNf6NxOvH

Recon 2025 - Breaking Obfuscated .NET Malware with Profiler Based Dynamic Binary Instrumentation

Recon 2025 - Breaking Obfuscated .NET Malware with Profiler Based Dynamic Binary Instrumentation

Presenters: Lars Wallenborn, Tillmann Werner, Sebastian Walla, Steffen Haas

As malware authors increasingly adopt .NET for its ease of development and stability…

227 views06:11

https://bohops.com/2023/06/09/no-alloc-no-problem-leveraging-program-entry-points-for-process-injection/

No Alloc, No Problem: Leveraging Program Entry Points for Process Injection

Introduction Process Injection is a popular technique used by Red Teams and threat actors for defense evasion, privilege escalation, and other interesting use cases. At the time of this publishing,…

219 views03:57

https://swarm.ptsecurity.com/buried-in-the-log-exploiting-a-20-years-old-ntfs-vulnerability/

Buried in the Log. Exploiting a 20 years old NTFS Vulnerability

Intro Filesystems implementation is old complex and not very well audited by independent researchers. In this article I would like to share beautiful exploitation showcase of vulnerability that I found in Windows NTFS implementation. This vulnerabilty, CVE…

199 views03:59