How to build a hook syscall detector
Windows API calls are often hooked by AV and EDR systems by using inline patching approaches to find strange behaviors or malicious artifacts.
Etiqueta: hacking
Android vulnerability allows attackers to spoof any phone number
Introduction Because many employees use mobile devices for work, the widespread use of mobile devices has come to put company networks at risk for cyberattacks….
What is a side-channel attack?
Introduction The origin of the side-channel attack is closely related to the existence of physically observable phenomena caused by the execution of computing tasks in…
NetWire malware analysis
NetWire is a remote access Trojan focused on password stealing and keylogging, as well as including remote control capabilities. This threat has been used by…
MalLocker Android ransomware analysis
Malware is persistent presence in our life. In the past few months, several pieces of different malware families were identified as affecting mobile devices. This…
Hack de certificados de vacinação COVID-19 no mundo e em Portugal
Hack de certificados de vacinação COVID-19 no mundo e em Portugal.
How to create a subdomain enumeration toolkit
Introduction A domain name is an important part of the reconnaissance process during a security assessment or even for many bug bounty challenges. In this…
Using Merlin agents to evade detection
Introduction While penetration testing and Red Teaming are crucial to check a system’s security and to validate potential entry-points in the infrastructure, sometimes establishing an…
Fuzzing introduction: Definition, types and tools for cybersecurity pros
Introduction Fuzzing is a black-box software testing technique and consists of finding implementation flaws and bugs by using malformed/semi-malformed payloads via automation. Fuzzing an application…
Bypassing security products via DNS data exfiltration
Criminals are using different strategies to compromise computer networks, infrastructures, and organizations. Cyber incidents have increased in number and complexity since the exploitation of public…
Atualize os navegadores web Chrome, Opera, Brave e Edge para evitar um ataque via 0day
Atualize os navegadores web Chrome, Opera, Brave e Edge para evitar um ataque via 0day
RCE will not be fixed on Cisco EOL Business routers
RCE will not be fixed on Cisco EOL Business routers.
PHP git server hacked with backdoor implanted
PHP git server hacked with backdoor implanted.
New cryptojacking malware called Pro-Ocean is now attacking Apache, Oracle and Redis servers
New cryptojacking malware called Pro-Ocean is now attacking Apache, Oracle and Redis servers.
Adrozek pode infetar 30.000 dispositivos num só dia
Adrozek pode infetar 30.000 dispositivos num só dia, diz a Microsoft.
Vulnerabilidade zeroday no plugin ‘Easy WP SMTP’ do WordPress deixa expostos milhares de websites
Vulnerabilidade zeroday no plugin ‘Easy WP SMTP’ do WordPress deixa expostos milhares de websites.