Howdy all! What exploit code do you think I run into on a daily basis? Java! Every day, its the same 2 exploits. I’ve stated this before, but today I’m going to post the code. Most of the time, malware distributors are smarter and obfuscate their exploit code as much as possible as to avoid […]
Howdy fellow h4x0rs & Cr4x0rs alike! Today I ran into some vmware aware malware and it threw me off until I ran procmon and apispy. I had to patch the program to skip the checks, but I don’t want to get into that. Instead, let’s cover what this malware was checking. First off, it was […]
Greetings fellow crackers and reversers! Happy new year and all that junk. Today I decided to add a UDP option to my TCP flooder for windows. I guess its no longer a TCP flooder and now more of just an IP flooder. Oh well. You can download an updated version of it ZeroLengthWindow_Dos. The password […]
So here I am at work on Christmas Eve (because I have no soul) and the malware is insulting me. See it? Fuck you too buddy! And in another one, to be an asshole, they embedded their program in another program. I was wondering why IDA was showing a stub program less than 5 kb […]
I came across this one individual’s page whom is an avid reverse engineer with some great material. Check out his pdf cheat sheet on anti-debugging. There were a few in there I didn’t know about like the ‘csr’ trick which involves calling an undocumented ‘CsrGetProcessId’ function within OpenProcess. CsrGetProcessId is a native API that returns […]
Some may say this is crazy, I call it Wednesday. This came across my desk yesterday and I worked it out today. It came as the payload following a java exploit from an old 2012 CVE (SecurityManager one I think). I’m calling it 0day because there were no listing for the exe in VirusTotal / […]
Hello all! I’m cracking away on various projects and trying to keep focus. As I was going through my old notes, I came across a talk I wanted to give but could not due to my car accident and the subsequent down time caused me to forget. I wanted to cover making your own debugger […]
Hello again fellow readers and security enthusiasts. The last post was filler and I’m sorry for that. Today we’re going to go over some typical malware, start to finish. Exploit to C&C communication. We start with our exploit file. Java of course. Most of the time when I encounter a java file, it’s heavily obfuscated […]
I love C. It was my first language I learned. Any other security professional will tell you, C is the bomb, but on the same token, a source for a lot of head ache. To anyone out there aspiring to be a security professional, get to know C and assembly. C lets you inline assembly […]
Hello fellow readers! I thought I’d be nice and upload my talk slides as well as the code used and video. Slides Code Video Enjoy!