Collaborate Disseminate
I want to make well-known malicious programs, like Mimikatz and Incognito, undetectable by anti-virus solutions.
I have already tried various approaches myself, like packing the binary with UPX or modifying the source code i… Continue reading How to make a well-known malicious programs undetectable by anti-virus solutions?
we have a dedicated build (Jenkins based )server and code signing server,
As part of the post build process,build script access the signing server and perform the code signing.
Is there any way to restrict the signing proce… Continue reading What is the best way to access/interact with the code signing server from build server (Jenkins) to sign the binaries in automated way
I’m doing basic exploitation test on a simple program with fiew lines of code. I intend to exploit a buffer overflow vulnerability to perform a ROP attack.
To gather the available gadgets I use ROPgadget tool.
I found a very … Continue reading ROP Attack :Force the program to manipulate an instruction as a gadget
I have a binary that is SUID which I can currently use a buffer overflow exploit to obtain an elevated EUID shell.
However I haven’t worked much with changing IDs through shellcode, and the file I need to access requires me to have a GID … Continue reading Binary Exploitation – How to set GID of a SUID binary using shellcode?
How to compile c code in 32bit kali linux to execute in 64bit ubuntu system.
When I compile using gcc as below:
gcc setuid.c -o setuid
file setuid
setuid: ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV… Continue reading Compiling C code for 64bit system on 32bit linux
Consider the following files with their permissions:
-rw-r—– 1 root root 398 1 22:00 fild.c
-r-sr-x— 1 pwnables fd 8888 1 22:00 fildes
-r–r—– 1 pwnables root 34 1 22:10 flag
Where fild.c source code… Continue reading How to make a file execute another file with same owner and different groups
During the security assessment of Android applications, I have encountered multiple instances where .so (Shared Objects) files are present in lib directory.
What can be possible security test cases for the same.
I have one … Continue reading How to Check Compilation Options For SO File – Android Application VA
During the security assessment of Android applications, I have encountered multiple instances where .so (Shared Objects) files are present in lib directory.
What can be possible security test cases for the same.
I have one … Continue reading How to Check Compilation Options For SO File – Android Application VA
Unidirectional Data Transmission to a Smartphone
I’m going to use an old Android phone to store sensitive data (e.g., Bitcoin wallet private key), with no SIM card and WiFi and Bluetooth turned off. I could disable wireless … Continue reading Unidirectional Data Transmission to a Smartphone
Some background: My org is potentially involved in a legal dispute with a securities brokerage in a under-developed country with mediocre rule of law. The broker also is responsible for co-locating a machine used for trading … Continue reading Malicious Actor with Physical Access to Encrypted Machine