30 posts
-
Virtual Assistant: Defeating Liveness Detection with the Help of Virtual Devices
Explore how cybercriminals are leveraging virtual devices, which are affordable, accessible, and efficient means to defeat liveness detection in face, document, and voice verification systems.
-
[ROOTCON 18] Seeing is Not Believing: Bypassing Facial Liveness Detection by Fooling the Sensor
A copy of the slides from my ROOTCON 18 talk demonstrating how to bypass facial liveness detection systems on different platforms.
-
[SANS HackFest 2022] Developing High-Impact Malware with Minimal Effort
A copy of the presentation I presented on how to quickly and easily develop malware from the perspective of someone who has limited time and basic programming skills.
-
Lessons Learned from Cloning Windows Binaries and Code Signing Implants
Lessons learned and observed while experimenting with code signing and cloning file attributes.
-
Writing an Independent Malware
A quick guide and high-level discussion on how to remove runtime dependencies when writing malware.
-
Making NtCreateUserProcess Work
Here's my journey on how I developed a 'minimal' PoC to make NtCreateUserProcess work.
-
Adventures with KernelCallbackTable Injection
A walkthrough on how I made KernelCallbackTable process injection work according to what I wanted.
-
Useful Libraries for Malware Development
A list of some easy-to-use libraries and how to use them for malware development.
-
Quick & Lazy Malware Development
Quickly and lazily write malware from the perspective of a newbie and someone who has very basic programming skills.
-
Picky PPID Spoofing
Performing PPID Spoofing by targeting a parent process with a specific integrity level.
-
When You sysWhisper Loud Enough for AV to Hear You
Evading Windows Defender when SysWhisper got caught!
-
Bypassing Android’s RootBeer Library (Part 2)
How to bypass the different checks used by RootBeer library by changing the application’s process during runtime through dynamic instrumentation.
-
Bypassing Android’s RootBeer Library (Part 1)
How to bypass the different checks used by RootBeer library by changing the application’s process through code manipulation.
-
Comparison of Different Root-Detection Bypass Tools
This research shows the effectiveness of different root-detection tools. The goal is to have a “go-to” tool when bypassing an app’s root-detection implementation.
-
Bypassing OkHttp Certificate Pinning
Different methods I attempted to bypass OkHttp Certificate Pinning.
-
Filtering the OPTIONS Method in Burp
Removing the "unwanted" preflight requests that fills up Burp’s "HTTP history".
-
Lesser-known Tools for Android Application PenTesting
A list of not-so popular tools useful for android application assessment.
-
Asset Enumeration: Expanding a Target's Attack Surface
Expanding a target's attack surface by performing vertical and horizontal enumeration.
-
Finding the Balance Between Speed & Accuracy During an Internet-wide Port Scanning
A research on performing port scanning efficiently.
-
OffSec Certs - Are They Still Worth the Money?
My personal opinion regarding Offensive Security's courses and certs.
-
Pwning Web Applications via Telerik Web UI
A method of exploiting vulnerable versions of Telerik Web UI.
-
[Backdoor 101] Backdooring PE File w/ User Interaction & Custom Encoder Using Existing Code Cave
A walkthrough on how to backdooring PE files.
-
[Backdoor 101] Backdooring PE File by Adding New Section Header
A walkthrough on how to backdooring PE files.
-
[VulnServer] Exploiting HTER Command using Hex Characters Only
Exploitation of VulnServer's HTER command using Hex characters only.
-
[VulnServer] Exploiting LTER Command using Restricted Characters
Exploitation of VulnServer's LTE command with restricted characters.
-
[VulnServer] Exploiting GMON Command via SEH and Egghunter
Exploitation of VulnServer's GMON command via SEH and Egghunter.
-
[VulnServer] Exploiting KSTET Command with Minimal Buffer Space Using Egghunter
Exploitation of VulnServer's KSTET command with minimal buffer space using Egghunter.
-
[VulnServer] Exploiting GTER Command with Limited Buffer Space Using Egghunter
Exploitation of VulnServer's GTER command with limited buffer space using Egghunter.
-
[VulnServer] Exploiting TRUN Command via Vanilla EIP Overwrite
Exploitation of VulnServer's TRUN command using vanilla EIP overwrite method.
-
Patching DoublePulsar to Exploit Windows Embedded Machines
Patching DoublePulsar to make the exploit work against Windows Embedded devices.
no posts matched