#Pwn

10x Full stack pwnr 🎇. | Intrested in Browser, Kernal, Virtualisation 💤

[ςεяβεяμs - мαℓωαяε яεsεαяςнεя & мαℓωαяε gεиεтιςιѕт @c3rb3ru5d3d53c]

#Malware Analysis and #Reverse #Engineering Workflow Guide. 👩‍🏫

✅ Establishing a Methodology
✅ Detection
✅ Process Graph
✅ Tips and Tricks
✅ Malicious Intent
✅ Triage
✅ Types of Analysis
✅ Additional Resources

I hope you all enjoy! 😘

https://t.co/YYcFtnKGRo

[LetsDefend @LetsDefendIO]

You can investigate the #Follina incident as a SOC analyst for free. We prepared a SIEM alert about CVE-2022-30190 in the SOC environment

Investigation: https://t.co/hyUMTL64An

[vx-underground @vxunderground]

We just pitched a movie idea to Warner Brothers Pictures. It's a cutting edge movie about a Malware Developer - a psychological thriller. The movie is 180 minutes of nothing but a chronically depressed man trying to get his code to compile.

[Andy Nguyen @theflow0]

bd-jb: Blu-ray Disc Java Sandbox Escape affecting PS3, PS4, PS5. My talk at @hardwear_io will be uploaded in a few weeks. #hardwear_io
https://t.co/gVs03Ie46q

[#Pwn @0xn3_]

@vxunderground Wake up, Neo.. ✨😅

[inversecos @inversecos]

Russian #APTs are still abusing Cisco SMIs and modifying router configurations to export info out via FTP.

Make sure you’re monitoring for untrusted connections to management protocols on network devices… or get rid of SMI…

[Anastasios Pingios @xorlgr]

Just updated DPRK's APT groups too, mainly based on the latest Mandiant publication.

Changes: Added the 6 Bureaus and assigned Mandiant/FireEye's APT groups as they attributed them in their post.

https://t.co/8F9r3QqopV

[NULLCON @nullcon]

💥We have a 'Secret' & only Stok✌️ @stokfredrik knows about it!😎

😉Can you guess? 💬Drop in the comments section

👊Meet us on Stok's 'Bounty Thursdays' Live on 31st March

Stay Tuned▶️https://t.co/ajcOzHocQ7

#Nullcon #bountythursdays #infosec #Conference #Cybersecurity

[SEKTOR7 Institute @SEKTOR7net]

Very intriguing report from Pangu Lab about advanced, allegedly NSA's, top-tier backdoor - Bvp47. Features are indeed impressive.
The last screenshot is very telling.

source: https://t.co/9eafZtyoYo

#ShadowBrokers #EquationGroup

[DirectoryRanger @DirectoryRanger]

PostDump. tool to perform a memory dump (lsass) using several technics to bypass EDR hooking and lsass protection
https://t.co/SygIbwdFdV

[#Pwn @0xn3_]

@BrunoModificato CA

[binaryboy @b1n4r1b01]

https://t.co/bW6ifMBiCX

[vx-underground @vxunderground]

We have downloaded and archived everything shared by @ContiLeaks thus far.

- Chat logs 2020 - 2022
- Internal software source code
- Jabber chat logs 2021 - 2022
- Pony leak
- Rocket Chat logs
- Screenshots, December 2021
- Trickbot forum

Download: https://t.co/mD5pLteoZQ

[NULLCON @nullcon]

⚡Next-Gen security professionals 🙌 Nullcon in collaboration with @intigriti has come up with a Student Scholarship Opportunity

😎Fill up the form & increase your chances to get selected➡️https://t.co/u4U03zBnJN

#NullconBerlin2022 #Infosec #bugbounty #intigriti

[ThreatDown @Threat_Down]

ℹ️ Our latest blog covers #Lazarus Group in their most recent campaign.

🚨 New techniques 🚨

➡️ KernelCallbackTable to hijack control flow and shellcode execution
➡️ Windows Update client for malicious code execution
➡️ GitHub for C2 communication

https://t.co/1LvJ5EbkVO

[EvilMog® @mog.evil.af @Evil_Mog]

Who remembers jumpers on IDE drives and primary vs secondary and those Cthulhu awful ribbon cables.

Never again

[#Pwn @0xn3_]

@HarshitRMahajan @whackyhit @nullcon Ty harshit😍😍

[#Pwn @0xn3_]

@Ministraitor @whackyhit @nullcon Ty cooper 😍😍

[#Pwn @0xn3_]

@whackyhit @nullcon Thank you baba!! 😘

[Hitesh Madhwani @whackyhit]

On behalf of Team @nullcon we would like to wish our Con-troller Nesooh @0xn3_ a very happy birthday. Wish you a wonderful year ahead!