#shellcode Suchergebnisse

Introduction to windows shellcode development series. PART 1: securitycafe.ro/2015/10/30/int… PART 2: securitycafe.ro/2015/12/14/int… PART 3: securitycafe.ro/2016/02/15/int… #redteam #exploit #shellcode

5mukx's tweet image. Introduction to windows shellcode development series. 

PART 1: securitycafe.ro/2015/10/30/int…
PART 2: securitycafe.ro/2015/12/14/int…
PART 3: securitycafe.ro/2016/02/15/int…

#redteam #exploit #shellcode
5mukx's tweet image. Introduction to windows shellcode development series. 

PART 1: securitycafe.ro/2015/10/30/int…
PART 2: securitycafe.ro/2015/12/14/int…
PART 3: securitycafe.ro/2016/02/15/int…

#redteam #exploit #shellcode

Introduction to PIC shellcodes (MinGW, GetProcAddress, GetModuleHandle) Credits @0xTriboulet steve-s.gitbook.io/0xtriboulet/ju… #shellcode #cybersecurity

0xor0ne's tweet image. Introduction to PIC shellcodes (MinGW, GetProcAddress, GetModuleHandle)
Credits @0xTriboulet

steve-s.gitbook.io/0xtriboulet/ju…

#shellcode #cybersecurity
0xor0ne's tweet image. Introduction to PIC shellcodes (MinGW, GetProcAddress, GetModuleHandle)
Credits @0xTriboulet

steve-s.gitbook.io/0xtriboulet/ju…

#shellcode #cybersecurity
0xor0ne's tweet image. Introduction to PIC shellcodes (MinGW, GetProcAddress, GetModuleHandle)
Credits @0xTriboulet

steve-s.gitbook.io/0xtriboulet/ju…

#shellcode #cybersecurity

A trojanized Autoruns DLL loading shellcode from its .data section. Currently, only @thor_scanner detects it on VirusTotal. virustotal.com/gui/file/1c962… #shellcode #peb @nextronresearch

marius_benthin's tweet image. A trojanized Autoruns DLL loading shellcode from its .data section. Currently, only @thor_scanner detects it on VirusTotal.

virustotal.com/gui/file/1c962…

#shellcode #peb @nextronresearch
marius_benthin's tweet image. A trojanized Autoruns DLL loading shellcode from its .data section. Currently, only @thor_scanner detects it on VirusTotal.

virustotal.com/gui/file/1c962…

#shellcode #peb @nextronresearch

🧵2 ☣️ama.tar➡️28063efd137c9c38a99f86f855d7950e ⚠️📸Interesting Python #Loader⤵️ ☣️load.py➡️b899a35b242190bb0db649bdd9f8d227 ⚠️#Shellcode ☣️new.bin➡️882d583cf87740b8942d653cb16137de ⚠️📸#Shellcode #xor key ⤵️ ☣️a.txt

ShanHolo's tweet image. 🧵2

☣️ama.tar➡️28063efd137c9c38a99f86f855d7950e

⚠️📸Interesting Python #Loader⤵️
☣️load.py➡️b899a35b242190bb0db649bdd9f8d227

⚠️#Shellcode 
☣️new.bin➡️882d583cf87740b8942d653cb16137de

⚠️📸#Shellcode #xor key ⤵️
☣️a.txt
ShanHolo's tweet image. 🧵2

☣️ama.tar➡️28063efd137c9c38a99f86f855d7950e

⚠️📸Interesting Python #Loader⤵️
☣️load.py➡️b899a35b242190bb0db649bdd9f8d227

⚠️#Shellcode 
☣️new.bin➡️882d583cf87740b8942d653cb16137de

⚠️📸#Shellcode #xor key ⤵️
☣️a.txt

Inspired by @0gtweet, I created PoC: EXE-or-DLL-or-ShellCode that can be: Executed as a normal #exe Loaded as #dll + export function can be invoked Run via "rundll32.exe" Executed as #shellcode right from the DOS (MZ) header that works as polyglot stub github.com/Dump-GUY/EXE-o…


Check our rule for detecting #shellcode with low detections valhalla.nextron-systems.com/info/rule/MAL_…

MalGamy12's tweet image. Check our rule for detecting #shellcode with low detections
valhalla.nextron-systems.com/info/rule/MAL_…
MalGamy12's tweet image. Check our rule for detecting #shellcode with low detections
valhalla.nextron-systems.com/info/rule/MAL_…
MalGamy12's tweet image. Check our rule for detecting #shellcode with low detections
valhalla.nextron-systems.com/info/rule/MAL_…
MalGamy12's tweet image. Check our rule for detecting #shellcode with low detections
valhalla.nextron-systems.com/info/rule/MAL_…

Nice introduction to Position Independent shellcodes (MinGW, GetProcAddress, GetModuleHandle) by @0xTriboulet steve-s.gitbook.io/0xtriboulet/ju… #shellcode #infosec

0xor0ne's tweet image. Nice introduction to Position Independent shellcodes (MinGW, GetProcAddress, GetModuleHandle) by @0xTriboulet

steve-s.gitbook.io/0xtriboulet/ju…

#shellcode #infosec

Introduction to Position Independent shellcodes (MinGW, GetProcAddress, GetModuleHandle) Credits @0xTriboulet steve-s.gitbook.io/0xtriboulet/ju… #shellcode #cybersecurity

0xor0ne's tweet image. Introduction to Position Independent shellcodes (MinGW, GetProcAddress, GetModuleHandle)
Credits @0xTriboulet

steve-s.gitbook.io/0xtriboulet/ju…

#shellcode #cybersecurity
0xor0ne's tweet image. Introduction to Position Independent shellcodes (MinGW, GetProcAddress, GetModuleHandle)
Credits @0xTriboulet

steve-s.gitbook.io/0xtriboulet/ju…

#shellcode #cybersecurity
0xor0ne's tweet image. Introduction to Position Independent shellcodes (MinGW, GetProcAddress, GetModuleHandle)
Credits @0xTriboulet

steve-s.gitbook.io/0xtriboulet/ju…

#shellcode #cybersecurity

Shellcode Execution Series => [ EnumChildWindows ,EnumDesktopsW ,EnumObjects EnumWindows,CreateThreadpoolWait, QueueUserAPC] Link: github.com/Whitecat18/Rus… #maldev #shellcode #execution #pentesting #redteaming #CyberSecurity #pwn #Rust #Windows

5mukx's tweet image. Shellcode Execution Series => 
[ EnumChildWindows ,EnumDesktopsW ,EnumObjects
EnumWindows,CreateThreadpoolWait, QueueUserAPC]

Link:   github.com/Whitecat18/Rus…

#maldev #shellcode #execution #pentesting #redteaming #CyberSecurity #pwn #Rust #Windows

Executing shellcode in macros by manipulating VBA pointers adepts.of0x.cc/vba-hijack-poi… #shellcode

0xor0ne's tweet image. Executing shellcode in macros by manipulating VBA pointers

adepts.of0x.cc/vba-hijack-poi…

#shellcode

d146c2f70cb0ddda09e69e694584dc39-loader e545335ca4915b81459e1cf99f7dee65-Mem dump StartServiceCtrlDispatcherA API as callback IP:64[.]44[.102.226 #CobaltStrike #beacon #shellcode #malware #cybersecurite @malwrhunterteam @JAMESWT_MHT @James_inthe_box @VK_Intel @bohops @cyb3rops

Loki_RE_artist's tweet image. d146c2f70cb0ddda09e69e694584dc39-loader
e545335ca4915b81459e1cf99f7dee65-Mem dump

StartServiceCtrlDispatcherA API as callback
IP:64[.]44[.102.226
#CobaltStrike #beacon #shellcode #malware #cybersecurite 
@malwrhunterteam @JAMESWT_MHT @James_inthe_box @VK_Intel @bohops @cyb3rops
Loki_RE_artist's tweet image. d146c2f70cb0ddda09e69e694584dc39-loader
e545335ca4915b81459e1cf99f7dee65-Mem dump

StartServiceCtrlDispatcherA API as callback
IP:64[.]44[.102.226
#CobaltStrike #beacon #shellcode #malware #cybersecurite 
@malwrhunterteam @JAMESWT_MHT @James_inthe_box @VK_Intel @bohops @cyb3rops
Loki_RE_artist's tweet image. d146c2f70cb0ddda09e69e694584dc39-loader
e545335ca4915b81459e1cf99f7dee65-Mem dump

StartServiceCtrlDispatcherA API as callback
IP:64[.]44[.102.226
#CobaltStrike #beacon #shellcode #malware #cybersecurite 
@malwrhunterteam @JAMESWT_MHT @James_inthe_box @VK_Intel @bohops @cyb3rops
Loki_RE_artist's tweet image. d146c2f70cb0ddda09e69e694584dc39-loader
e545335ca4915b81459e1cf99f7dee65-Mem dump

StartServiceCtrlDispatcherA API as callback
IP:64[.]44[.102.226
#CobaltStrike #beacon #shellcode #malware #cybersecurite 
@malwrhunterteam @JAMESWT_MHT @James_inthe_box @VK_Intel @bohops @cyb3rops

I have just developed an advanced #shellcode loader implemented in x64 #assembly language with sophisticated #evasion capabilities called AsmLdr, designed for #Windows x64 environments. Check out key capabilities and source code from here: github.com/0xNinjaCyclone… #redteam


#opendir hosting #shellcode loader and #GOST (Go Tunneler) 220.158.232.186:8000 🇰🇭 payload connects to 212.192.15.59:9092 🇭🇰 --> kafka001.bliln[.]com Also see a DNS resolution for vpn.chd[.]one Zip of files: virustotal.com/gui/file/443b5…

sicehice's tweet image. #opendir hosting #shellcode loader and #GOST (Go Tunneler)

220.158.232.186:8000 🇰🇭

payload connects to 212.192.15.59:9092 🇭🇰 --> kafka001.bliln[.]com
Also see a DNS resolution for vpn.chd[.]one

Zip of files: virustotal.com/gui/file/443b5…
sicehice's tweet image. #opendir hosting #shellcode loader and #GOST (Go Tunneler)

220.158.232.186:8000 🇰🇭

payload connects to 212.192.15.59:9092 🇭🇰 --> kafka001.bliln[.]com
Also see a DNS resolution for vpn.chd[.]one

Zip of files: virustotal.com/gui/file/443b5…

Trying and playing with undocumented API's. #windows #rust #shellcode #maldev

5mukx's tweet image. Trying and playing with undocumented API's. 

#windows #rust #shellcode #maldev

#shellcode #marte #beacon #metasploit 44 entries with marte´s shellcode/beacon on service banner censys query: search.censys.io/search?resourc… all info: pastebin.com/0SjzQSfS CC:@banthisguy9349

RacWatchin8872's tweet image. #shellcode #marte #beacon #metasploit
44 entries with marte´s shellcode/beacon on service banner
censys query: search.censys.io/search?resourc…
all info: pastebin.com/0SjzQSfS
CC:@banthisguy9349
RacWatchin8872's tweet image. #shellcode #marte #beacon #metasploit
44 entries with marte´s shellcode/beacon on service banner
censys query: search.censys.io/search?resourc…
all info: pastebin.com/0SjzQSfS
CC:@banthisguy9349

#cobaltstrike #shellcode that gets triggered through .exe filenames. All that matters is that the shellcode urls get listed so the payloads can be analysed. 100 + urls active #cobaltstrike #shellcodes were send towards urlhaus. urlhaus.abuse.ch/browse/tag/Cob…

banthisguy9349's tweet image. #cobaltstrike #shellcode that gets triggered through .exe filenames. All that matters is that the shellcode urls get listed so the payloads can be analysed.

100 + urls active #cobaltstrike #shellcodes were send towards urlhaus.

urlhaus.abuse.ch/browse/tag/Cob…
banthisguy9349's tweet image. #cobaltstrike #shellcode that gets triggered through .exe filenames. All that matters is that the shellcode urls get listed so the payloads can be analysed.

100 + urls active #cobaltstrike #shellcodes were send towards urlhaus.

urlhaus.abuse.ch/browse/tag/Cob…

Cuando te pasan una #ShellCode a revisar... #4n4lDetector la analiza, extrae un ejecutable automáticamente, lo analiza también y detecta que se trata de una librería x64 que actúa cómo #Rootkit. Todo esto en menos de 1 segundo. No es magia.. se llama #4n4lDetector 😅

enelpc's tweet image. Cuando te pasan una #ShellCode a revisar... #4n4lDetector la analiza, extrae un ejecutable automáticamente, lo analiza también y detecta que se trata de una librería x64 que actúa cómo #Rootkit. Todo esto en menos de 1 segundo. No es magia.. se llama #4n4lDetector 😅
enelpc's tweet image. Cuando te pasan una #ShellCode a revisar... #4n4lDetector la analiza, extrae un ejecutable automáticamente, lo analiza también y detecta que se trata de una librería x64 que actúa cómo #Rootkit. Todo esto en menos de 1 segundo. No es magia.. se llama #4n4lDetector 😅

Patut di duga org ini jlnkan agenda pabrikan otomotif spy mesin cepat rontok dan konsumen lbh cepat belanja kendaraan. #etanol #shellcode

Pemerintah Bakal Wajibkan Campuran Etanol 10 Persen di BBM Baca di money.kompas.com/read/2025/10/0…

kompascom's tweet image. Pemerintah Bakal Wajibkan Campuran Etanol 10 Persen di BBM

Baca di money.kompas.com/read/2025/10/0…


🧵2 ☣️ama.tar➡️28063efd137c9c38a99f86f855d7950e ⚠️📸Interesting Python #Loader⤵️ ☣️load.py➡️b899a35b242190bb0db649bdd9f8d227 ⚠️#Shellcode ☣️new.bin➡️882d583cf87740b8942d653cb16137de ⚠️📸#Shellcode #xor key ⤵️ ☣️a.txt

ShanHolo's tweet image. 🧵2

☣️ama.tar➡️28063efd137c9c38a99f86f855d7950e

⚠️📸Interesting Python #Loader⤵️
☣️load.py➡️b899a35b242190bb0db649bdd9f8d227

⚠️#Shellcode 
☣️new.bin➡️882d583cf87740b8942d653cb16137de

⚠️📸#Shellcode #xor key ⤵️
☣️a.txt
ShanHolo's tweet image. 🧵2

☣️ama.tar➡️28063efd137c9c38a99f86f855d7950e

⚠️📸Interesting Python #Loader⤵️
☣️load.py➡️b899a35b242190bb0db649bdd9f8d227

⚠️#Shellcode 
☣️new.bin➡️882d583cf87740b8942d653cb16137de

⚠️📸#Shellcode #xor key ⤵️
☣️a.txt

I have just developed an advanced #shellcode loader implemented in x64 #assembly language with sophisticated #evasion capabilities called AsmLdr, designed for #Windows x64 environments. Check out key capabilities and source code from here: github.com/0xNinjaCyclone… #redteam


🧵2 ☣️ama.tar➡️28063efd137c9c38a99f86f855d7950e ⚠️📸Interesting Python #Loader⤵️ ☣️load.py➡️b899a35b242190bb0db649bdd9f8d227 ⚠️#Shellcode ☣️new.bin➡️882d583cf87740b8942d653cb16137de ⚠️📸#Shellcode #xor key ⤵️ ☣️a.txt

ShanHolo's tweet image. 🧵2

☣️ama.tar➡️28063efd137c9c38a99f86f855d7950e

⚠️📸Interesting Python #Loader⤵️
☣️load.py➡️b899a35b242190bb0db649bdd9f8d227

⚠️#Shellcode 
☣️new.bin➡️882d583cf87740b8942d653cb16137de

⚠️📸#Shellcode #xor key ⤵️
☣️a.txt
ShanHolo's tweet image. 🧵2

☣️ama.tar➡️28063efd137c9c38a99f86f855d7950e

⚠️📸Interesting Python #Loader⤵️
☣️load.py➡️b899a35b242190bb0db649bdd9f8d227

⚠️#Shellcode 
☣️new.bin➡️882d583cf87740b8942d653cb16137de

⚠️📸#Shellcode #xor key ⤵️
☣️a.txt

Loading...

Something went wrong.


Something went wrong.


United States Trends