kl43s

Reverse Engineering | Malware | Exploit Dev | DFIR Analyst

[kl43s @__s34lk__]

Hi, here's my latest article on API hooking from a red/blue team perspective. I explore driver programming to leverage kernel callbacks to inject hooks into every new process on the system.

Also, you'll find a script to detect inline hooks in a DLL.

https://t.co/dZNMZ3adEz

[cousky @cousky_]

We'll be in Cork for the week, hit us up if you want to hang out!

[cousky @cousky_]

New article published showcasing a Client-Side Path Traversal bug in Grafana, leading to complete takeover in the worst-case scenario🤠

Props to the Grafana team for the quick response !

[jabba @jabbaw0nky]

🚨 New article ! Explore the WPA3 downgrade attack and how DragonShift can help analyze it. 🔍
Tool : https://t.co/AgF8g4UDN9
Blog : https://t.co/GkUpooQghu
#CyberSecurity #WPA3 #WiFi #Redteam

[Ar4h @_Ar4h_]

Happy to release the deployment powershell script for AD Canaries - sorry for the huge latency.

https://t.co/pRkghhqsFn

Added some new default canary objects such as CertificateTemplate - but you can customize the JSON with any AD object class upon before deployment.

Cheers

[kl43s @__s34lk__]

Hi everyone, here is my latest article on brute ratel (out-of-date version) focusing configuration, encryption and decryption. You'll find a script to extract the config and another to decrypt agent data.
https://t.co/JUT7UWXrwm

#reverseengineering #malware #infosec #bruteratel

[kl43s @__s34lk__]

Hi everyone, I'm happy to share my latest article on malware analysis techniques, focusing on PEB parsing and API hashing methods.
This article is available in both English and French.
Let me know what you think :
https://t.co/OzPbZdhYD1

#reverseengineering #malware #infosec