After struggling a lot, finally pwned https://t.co/0d8pfnVyot with the latest PHP2Shell hand-made exploit. It was quite tricky to get it working.
I decided to release a partial PoC:
https://t.co/ZPrmgXzkbi
Thx again to the site owner (can't disclose the name)
If REs are making 8¢ an hour we’re gonna need cheaper tools…
IDA Home now comes with idalib (MCP ready) and code AIRPORT40 gets you 40% off for the next two weeks (new and returning customers). Duncan buried that at the end of the article 😉
My new article, “Ryūjin – Writing a Bin2Bin Obfuscator from Scratch for Windows PE x64 and Fully Deobfuscating It,” covers in detail the creation of a own Bin2Bin obfuscator tool, named “Ryūjin". Check it out:
https://t.co/iR7HXSPObf
Hiya. Just posted a write-up on an experiment with shellcode delivery using fonts ~ and how to dodge static detection along the way.
"Fonts Carry The Shellcode"
➡️ https://t.co/lu8KoNN8Ou
Open to feedback & discussion. Enjoy the read.
Finally implemented a built-in mutation engine to the library. It's still primitive and under development. So feel free to contribute/discuss.
https://t.co/3eMJ6Etjs9