God, its been forever since I made an update. I figured if I was to make an update after more than a year’s absence, it better damned well be a good fucking update. OK, so Smart Screen is a windows defender utility that comes with Windows 10. It pops up a warning if you attempt […]
Maybe we’re all a little black hat at times – you have to bend the rules to get things done sometimes.I thought of a couple kinds of shellcode – basically checking to see if the user is in a particular country or timezone.The concept of weaponizing shellcode is nothing new. This is just more fuel […]
Whaddup RE people? I have a treat especial just for you. I didn’t find 1 botnet host, I found 3. The first item on the menu is Linux based. This one with working clients across many platforms including MIPS, Motorola, and even ARM. For those of you living under a rock, botnets are networks of […]
Howdy dudey! I’m back with an update. A quickey mind you, but I’m out here posting real UPDATES for once. The Metasploit Framework expiration of shellcode commit that was never taken into master had me thinking – how come I never made POC code for Windows? Why the fuck not right? Well, let’s fucking do […]
Another 2600 speech, this one given in January. Might as well share my slides here. Hacking Your Local Internets
I gave this speech at a 2600 meet. Might as well share the slides here: Yet Another Botnet Find
What about Linux? Why all the love for Windows? What is this crap? The code for linux is a bit different in MSF. They use a modified ELF template that puts the shellcode directly into the end of the file which is built by nasm. Example: ; build with: ; nasm elf_x86_template.s -f bin -o […]
I had this thought speaking with fellow hacker friendos at 2600. Alternative ways to persist. Why not backdoor some popular programs? Sure why not? Today let’s scope in on backdooring some plugins for popular software. I will be covering a bunch of other programs, mainly stuff already on my computer. First plugin to backdoor will […]
Happy clucking new year everyone! People say i don’t “gave back” to the hacker community enough. That I’m “too cool” for school. Well I got a blog post for those people. What’s something that would be super annoying as a threat analyst? What if you had a piece of malware that only worked temporarily? Regardless […]
Hi! In a vain effort to not lose what little knowledge I have, I have made an update to a C# project called ‘XOR By’. In this version I added ‘Rc4’ because I was going to but then didn’t. Source is here. As a small update I’ve been playing with drivers and kernel land. its […]