Daily Live Feed

Shadow Dumper is a powerful tool used to dump LSASS (Local Security Authority Subsystem Service) memory, often needed in penetration testing and red teaming activities. It offers flexible options to users and uses multiple advanced techniques to dump memory, allowing to access sensitive data in LSASS memory. Capabilities Build Usage… Read more »

shadow-rs is a Windows kernel rootkit written in Rust, demonstrating advanced techniques for kernel manipulation while leveraging Rust’s safety and performance features. This project is intended for educational and research purposes. The project also provides useful crates for developing rootkits, such as shadowx, which consolidates core logic and essential techniques.… Read more »

Extract and execute a PE embedded within a PNG file using an LNK file. The PE file is encrypted using a single-key XOR algorithm and then injected as an IDAT section to the end of a specified PNG file. Quick Links Maldev Academy Home Maldev Academy Syllabus Maldev Academy Pricing… Read more »

Embark on the journey of becoming a certified Red Team professional with our definitive guide. This article provides a comprehensive overview of the top Red Team certifications including CRTP, CRTE, and CRTO, complete with detailed course write-ups and indispensable cheat sheets. Whether you’re starting out or looking to advance your… Read more »

This repository contains proof of concept exploits for CVE-2024-5836 and CVE-2024-6778, which are vulnerabilities within the Chromium web browser which allowed for a sandbox escape from a browser extension. To run these, you must be on a version of Chromium older than 126.0.6478.54. Write up Bug report Both the CVE-2024-5386… Read more »

This took me like 4 days (+2 days for an update), but I got it working… rust core + alloc for Cobalt Strike BOFs.This is very much a PoC, but I’d love to see others playing around with it and contributing. Building Make Your Own Edit the entry function in… Read more »

MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection. Its foundation is a 100% custom-built C# LDAP parser that handles tokenization and syntax tree parsing along with numerous custom properties that enable accurate and efficient obfuscation, deobfuscation and detection of LDAP SearchFilters. The rest of the project… Read more »

There are a number of excellent tutorials. I recommend this one: Basically, you are going to create a .htaccess file in the directory you want to protect. This .htaccess file will have a line in it, AuthUserFile, that will point to an htpasswd file. The htpasswd file should be placed… Read more »

Pwnlook is an offensive postexploitation tool that will give you complete control over the Outlook desktop application and therefore to the emails configured in it. What it does: It’s possible to do almost everything that Outlook can do: send emails, create forward rules, list contacts… But all this is out… Read more »

In the evolving landscape of cybersecurity, understanding and mitigating threats through advanced tools is paramount. “EDRenum-BOF” emerges as a critical utility designed to streamline the process of identifying and assessing Endpoint Detection and Response (EDR) systems. This article delves into the functionalities of EDRenum-BOF, demonstrating its capability to identify common… Read more »