Ravaan:)

CRTO | Reverse Engineering | MALDEV

[Ravaan:) @DebprasadBaner9]

@5mukx Sentin*l and a calc pop does not prove any bypass. Why is the AV there in the first place makes no sense.

[Ravaan:) @DebprasadBaner9]

@C2IRIS How does it compete with evasive frameworks like BRC4?

[Ravaan:) @DebprasadBaner9]

@C2IRIS Y’all are actually one of the few ones who actually has no bs posts, straight up FACTS! Adore it🫡

[Ravaan:) @DebprasadBaner9]

@Alh4zr3d
I remember watching his streams on youtube few years back. OG at breaking stuff down making it digestible.
His tips are golden. I picked up so much from him thats its unreal.

[Ravaan:) @DebprasadBaner9]

@justmyownenemy @vxunderground I think Evasion is a subset of Maldev and not the other way around. The op is trying to say that, most courses that claim maldev actually delivers evasion tactics. Makes sense ngl.

[Ravaan:) @DebprasadBaner9]

@I_Am_Jakoby @justmyownenemy Im sorry you felt that way,
More power to you improving this in the future:)

[Ravaan:) @DebprasadBaner9]

@I_Am_Jakoby @justmyownenemy Buddy i like your work, but in honesty this is not evasion or bypass. A rev shell compiled in any language with basic api hashing will not be marked malicious natively by AV/EDR depending on the engine.
Mature solution monitor call stack, even the most basic AVs.

[Ravaan:) @DebprasadBaner9]

@xCipher007 @offsectraining This is so inspiring, congratulations, you deserve this.

[Ravaan:) @DebprasadBaner9]

@5mukx Dump lsass in EDRs https://t.co/gkvhltgrIV

[Chetan Nayak (Brute Ratel C4 Author) @NinjaParanoid]

@0xBoku @cyb3rops @hasherezade Blue team todolist be like:
1. Dont share detection tools online
2. Dont want to improve knowledge on latest TTPs
3. Sell snake oil EDR for millions
4. Cant detect shit
5. Blame offsec tooling
6. Tweet red team helps threat actors
7. loop

[Ravaan:) @DebprasadBaner9]

@_JohnHammond The amount of malware tricks ive picked up from your video is unreal, enjoy this buddy you deserve this and more.

[Ravaan:) @DebprasadBaner9]

@praveengirotra @imTkarmarkar Do ask a retired judge for his salary, not demeaning the work but yeah not really putting life at risk.

[Ravaan:) @DebprasadBaner9]

@Ox4d5a Do you test the methods on enterprise AV/EDR?

[Ravaan:) @DebprasadBaner9]

@Ox4d5a Literally wtfff happened to this community

[Ravaan:) @DebprasadBaner9]

@Virdoex_hunter Means a lot, would you mind dming?

[vx-underground @vxunderground]

We'll tell you a secret. Not very many people know this.

Most malware development courses and papers cover the same material: process injection, persistence, basic anti-reverse engineering techniques, etc

This doesn't scratch the surface of what malware or malware research is.

[Ravaan:) @DebprasadBaner9]

@ShitSecure Ayo ayo this sauce is gonna get patched now🥲

[Ravaan:) @DebprasadBaner9]

@AliakbarZahravi I dont believe this is new though, its a common technique, basically appending 256 chars that explorer is limited to preview.