mov eax, 27 – Medium

mov eax, 27

JTAG not working? Here’s why!

Quick tips on how to deal with your JTAG interface not working properly.

Nov 7, 2023

JTAG not working? Here’s why!

Nov 7, 2023

Code Injection Series — #8 — EWM Injection (T1055.011)

A Extra Window Memory Injection é uma das técnicas menos vistas in-the-wild, neste artigos veremos uma das implementações da mesma.

Aug 26, 2023

Code Injection Series — #8 — EWM Injection (T1055.011)

Aug 26, 2023

Published in
InfoSec Write-ups

Lidando com Named Pipes em Malwares

Uma breve introdução sobre como malwares podem utilizar o mecanismo de IPC: Named Pipes para realizarem suas ações maliciosas.

Aug 6, 2023

Lidando com Named Pipes em Malwares

Aug 6, 2023

Published in
InfoSec Write-ups

Code Injection Series — #7 — Atom Bombing

Neste artigo, entederemos como a vulnerablidade “unpatchable” do windows funciona, e como malwares se aproveitam dela.

Jul 30, 2023

Code Injection Series — #7 — Atom Bombing

Jul 30, 2023

Published in
InfoSec Write-ups

Unpacking Emotet Trojan

Emotet, in general, is a banking trojan. Identified in-the-wild for the first time in 2014 as a stealth info stealer (mainly targeting…

Jul 23, 2023

Unpacking Emotet Trojan

Jul 23, 2023

Published in
InfoSec Write-ups

Code Injection Series — #6 — PE Injection (T1055.002)

PE, ou Portable Executable, é um modelo padrão de armazenamento de dados em arquivos, onde os mesmos contém todas as informações…

Jul 16, 2023

Code Injection Series — #6 — PE Injection (T1055.002)

Jul 16, 2023

Published in
InfoSec Write-ups

Code Injection Series — #5 — APC Injection (T1055.004)

APC, ou Asynchronous Procedure Call, é uma chamada de função executada assincronamente em relação ao contexto de uma thread em particular.

Jul 8, 2023

Code Injection Series — #5 — APC Injection (T1055.004)

Jul 8, 2023

Published in
InfoSec Write-ups

FotaProvider.apk — Arbitrary Command Execution

This is an exercise from Maddiestone “Android Reverse Engineering 101” workshop.

Jul 1, 2023

FotaProvider.apk — Arbitrary Command Execution

Jul 1, 2023

Published in
InfoSec Write-ups

Code Injection Series — #4 — Process Doppelgänging (T1055.013)

Process Doppelgänging pode ser considerada a evolução de Process Hollowing. Uma vez que Process Hollowing substitui a imagem do processo…

Jul 1, 2023

Code Injection Series — #4 — Process Doppelgänging (T1055.013)

Jul 1, 2023

Published in
InfoSec Write-ups

Code Injection Series — #3 — Process Hollowing (T1055.012)

Process Hollowing é uma técnica semelhante a DLL Injection, da mesma forma que injetamos uma DLL no process address space de um processo…

Jun 24, 2023

Code Injection Series — #3 — Process Hollowing (T1055.012)

Jun 24, 2023

mov eax, 27

mov eax, 27

Malware analyst / Reverse Engineer

Following

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams