Meelo

Lifelong learner.

[Meelo @CaptMeelo]

Here's the tool that I demoed during my #SANSHackFest talk. Let's make it better by filing any issues you identified and submitting PRs.
#redteam #maldev
https://t.co/KvCJzVwSxi

[Last Week in Security (LWiS) @lastweekinfosec]

CUPS RCE (@evilsocket), driver vulns (@vinopaljiri), NamelessC2 release (@trickster012), liveness detection bypass (@CaptMeelo), and more! https://t.co/PDhwEbwpOf

[S4ntiagoP @s4ntiago_p]

🔥 New blogpost 🔥
Running PEs inline without a console.
You now can, for example, run PowerShell in CobaltStrike and obtain its output without spawning any process (including conhost.exe)

https://t.co/oF7jh95m0F

[Alice Climent @AliceCliment]

Finally done!

My latest article introduce the basics of Windows kernel drivers/internals and how to find and exploit process killer drivers using LOLDrivers 🤓

I hope you'll enjoy it!

https://t.co/yt4zZwQNdk

[secret club @the_secret_club]

Abusing undocumented features to spoof PE section headers by @x86matthew https://t.co/91VcLtxiz9

[S4ntiagoP @s4ntiago_p]

I just published my implementation of call stack spoofing using hardware breakpoints 😁
Works for syscalls and APIs, supports x64, x86 and WoW64.
https://t.co/SwEl9cu1nh

[mr.d0x @mrd0x]

For the past couple of months @NUL0x4C and I have been working on a module-based malware dev training course that covers various techniques in-depth. Its emphasis is on simplifying complex concepts & evasion. Every module contains highly commented custom code. Stay tuned!

[Meelo @CaptMeelo]

@snovvcrash @carlospolopm @OscarAkaElvis @cube0x0 @HackAndDo @Flangvik @ippsec @0xdf_ @n00py1 @_EthicalChaos_ @_xpn_ @podalirius_ @KlezVirus @tifkin_ @FuzzySec @mariuszbit @Jean_Maes_1994 @tiraniddo @N4k3dTurtl3 @NotMedic @s4ntiago_p @icyguider @x86matthew @ly4k_ @bohops Thanks for including me. It's my pleasure.

[sn🥶vvcr💥sh @snovvcrash]

[BLOG 📝] Some notes on how to automate the generation of Position Independent Shellcodes (without msfvenom windows/x64/exec) from object files in memory (by @NinjaParanoid) to be used in Threadless Process Injection (by @_EthicalChaos_) ⬇️

https://t.co/OFdHn7lR7I

[William Burgess @joehowwolf]

My first blog at CS - Dynamically spoofing call stacks with timers: https://t.co/qxsVkesDWZ
PoC: https://t.co/QB1I9R3zI3

[Will Hunt @[email protected] @Stealthsploit]

Finally revamped my original @hashcat rule OneRuleToRuleThemAll.

The new and improved OneRuleToRuleThemStill has ~5% reduced rules with 0% performance drop against multiple breach datasets.

Link is in the blog. Happy cracking!

https://t.co/iDzFgQmh5G

#pentest #redteam

[Bobby Cooke @0xBoku]

macOS x64 shellcode that uses an eggHunter to find and decipher the command shell string. Tinkering with macOS x64 shellcoding as I work through the offsec macOS course.

Check it out here:
https://t.co/UKX7egZ8bL

[Meelo @CaptMeelo]

@vxunderground @_RastaMouse This is a nice re-implementation. :) Just an FYI, my PoC does not spawn certain binaries because of the lack of CSRSS notification. @s4ntiago_p solved this issue in his implementation.
https://t.co/ikE7aM81bU

[Meelo @CaptMeelo]

Here's a copy of my slides from my #SANSHackFest talk. Sorry it took me awhile to upload it.
#maldev #redteam
https://t.co/cXy3gL57X0

[klez @KlezVirus]

[BLOG POST] And as promised, this is a brief article the describing the technique used within SilentMoonwalk. Might be a good weekend read!
https://t.co/FUnW2Ca6VP

[Mr. Rc @rcx86]

Windows internals resources that I have collected in around an year #infosec
Win32 programming with code examples: https://t.co/193gozDCgY
Notes for Windows API programming;
https://t.co/K5gcQZ8dUZ
Windows undocumented functions' docs:
https://t.co/LhHmRJ4T2R

[vx-underground @vxunderground]

We have published a paper: "About malware writing and how to start"

This paper exists to address the questions we frequently encounter. It is an opinionated piece on malware development, the path to success, and some personal anecdotes

Check it out here: https://t.co/jCxMrDlnPK

[klez @KlezVirus]

[RELEASE] After a little wait, I'm happy to present SilentMoonwalk, a PoC implementation of a TRUE call stack spoofer, result of a joint research on an original technique developed by namazso, done with my friends @trickster012 and @waldoirc.
Enjoy! ;)
https://t.co/C5QBzNawza

[Zero-Point Security @_ZeroPointSec]

[NEW SHORT COURSE]
DevOps for Pentesters

https://t.co/OnItTH0E1J

[Binni Shah @binitamshah]

laZzzy : a shellcode loader, developed using different open-source libraries, that demonstrates different execution techniques : https://t.co/SrGNjqxsF4 credits @CaptMeelo

[OrdinalExport @OrdinalExport]

Releasing a new tool: Orpheus! Bypasses most Kerberoast Detections (including my own). Blog post and video is up at @TrustedSec! Even used @HackingDave's old alias in the demo. https://t.co/qhP8r28s4K #infosec #security #kerberoast