Collaborate Disseminate
I was working on a restricted system today and needed to take some html to an internet computer.
I emailed the html file to my gmail and opened the html file and immediately noticed that a script tag had been added silently during download… Continue reading Kaspersky silently inserting script tags in my downloaded files [closed]
We use custom threat policies for anti-phish and anti-spam in Microsoft Defender, and Security Center’s remediation list is showing us that 56% of users are covered by the custom policy, and 44% are covered by the default policy which is l… Continue reading User Coverage for Microsoft Anti-Phish Policy [migrated]
I have an offline network with 200 users. and routers, switches, 4 esxi servers and 1 netapp rack.
After about a year, my team found out that we have a virus in the network called streamer.exe that is a coin miner but because the network … Continue reading Streamer Virus on offline network [closed]
I was wondering how threat actors actually test their exploits without them being automatically detected and added to the library of an antivirus detection system, thereby being marked as useless and shared with different vendors.
The simp… Continue reading How are virus or exploits tested without being detected?
I have read up on compressed folders of file types such as .zip, .rar and .7zip being the malicious file itself (excluding cases such as an .exe file being disguised as a .zip file etc…), only requiring the user to open the file in their… Continue reading How does malware work when compressed?
I’m looking for a program for Windows that can securely store my code. The program should be able to encrypt my files on-the-fly, such that only the file I’m currently using is kept decrypted (mainly the current source file(s) I’m working … Continue reading Zero-day prevention. Is there a Windows program that encrypts files on-the-fly, keeping only the currently open file decrypted?
I have Ubuntu OS with no desktop/display driver. I need a free application firewall (like glasswire for windows); but the constraint is that it should be solely cli; can anyone give some suggestions. Description of why I think I might need… Continue reading What some free cli application level firewalls for Linux?
So I have a few PDFs on my computer I got online a few years ago on my Mac computer.
When I ran a virus total scan on some of them I got a couple that were concerning. Here is the one that most concerned me: https://www.virustotal.com/gui… Continue reading help in understanding hybrid analysis results? Mac
I am trying to test something on a web app and i need a malware code. I tried eicar test file but i cannot rename it, the app always show the name as "test" but i need to change the name because im testing for xss. Do yall have a… Continue reading Testing an antivirus feature on an app [closed]
This time for my red teaming engagement I decided to use Covenant as my C2.
I literally changed everything from it, to evade every type of detection and finally get a FUD detection on antiscan.me. Obviously it was for Static Detection
For … Continue reading Evading behavioral detection