In this article, you'll be diving into an introduction to how packers work, some tips to unpack, and two walkthroughs showing off how i usually deal with custom packers.

In-detailed analysis for the famous loader, SmokeLoader

Throughout this blog post we provide Binary Ninja automation strategies for analyzing obfuscation techniques implemented by Qakbot.

渗透测试C2、支持Lua插件扩展、域前置/CDN上线、自定义profile、前置sRDI、文件管理、进程管理、内存加载、截图、反向代理、分组管理 - INotGreen/XiebroC2

https://blogs.vmware.com/security/2023/10/hunting-vulnerable-kernel-drivers.html
https://github.com/TakahiroHaruyama/VDR

Microsoft Windows allows lo…

x86/x64 emulation internals on Windows 11 ARM # Introduction # Since the introduction of Intel processors for the MacBooks, malware analysis on Mac has become quite popular, and it has become the hardware of choice for malware analysts. With the...

About Rust symbol recovery: a journey into reversing Krustyloader, a rust-based dropper targeting Invanti

\\\\YUNG MANIC DEPRESSION FLOATS AT THE GATES OF HEAVEN LIKE A LONELY GOD SHOUTING "SWERVE LEFT YOUNG SHIT, YOU KNOW NOT WHAT LIVETH HERE"////
†††††††††††††

alone alone alone alone alone
alone alone alone alone alone alone
alone alone alone alone alone alone…

In this comprehensive guide, we delve into the world of Android security from an offensive perspective, shedding light on the various techniques and methodologies used by attackers to compromise Android devices and infiltrate their sensitive data.

Learning how to use Trusted Platform Modules (TPMs)

Permanent dark(er) theme for Poole

Intro When analyzing the security of mobile applications, it’s important to verify that all data is stored securely (See OWASP MASVS-STORAGE-1). A recent engagement involved a Flutter app tha…

Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features. - eversinc33/Banshee

Jeremy Blackthorne goes over the major features of Ghidra in his highly interactive 2 hour workshop Reversing with Ghidra.

GitHub Gist: instantly share code, notes, and snippets.