Collaborate Disseminate
I want to study the api windows step by step for example amsi or how google-chrome uses the windows api.I already know how they works,but how people study them? Where do I start from?All i have to do is start the debugger on a program and … Continue reading How to study the functionality of windows?
I am a beginner in analyzing javascript code on Linux and whenever the code is for a Windows machine I cannot proceed with debugging because there are undefined functions.
Examples:
GetObject(_6078(1),7983()) -> error GetObject is not d… Continue reading How to debug javascript code with Windows functions on Linux?
I have started analyzing malware, but sometimes when it’s packed I have difficulty finding the tail jump or other times to check the system api imported.Is there a site/blog that posts detailed malware reports to check with my analysis? In… Continue reading Where to find malware reports to verify personal analysis? [closed]
I wrote a keylogger that hooks keystrokes. I learned about the AV’s detection with hooked syscall and wanted to know if my keyboard hook is side by side with the av’s…so can AV monitor that function?. I have opened the ntdll.dll file but… Continue reading Understand Hooked syscalls – Do win32 api always call system ones in ntdll.dll?
Is there a service or independent work (github) where I can learn about that service? Metasploit for each module/payload wants an lhost, is it possible set lhost in Metasploit to receive requests from any IP?
Is it possible to create a backdoor without configuring an IP? For example, if I want to create a listener that everyone can access, what can I do? Something like a backdoor, RAT or something like that?
Continue reading Is creating a backdoor without specifying an IP possible?
If I’m in my private network with my IP 192.168.4.5 and public IP 34.124.x.x, can hackers access my computer only with exploit/vulnerability (no malware) from a different network? The videos, sites and books all have examples with private … Continue reading can hackers access a subnet in different network? [duplicate]