Hey Squad, Today, we will be hunting for 2 famous rootkits Diamorphine and Reptile. To learn more about Linux Rootkits. Please follow this blog https://foxtrot-sq.medium.com/linux-rootkits-multiple-ways-to-hook-syscall-s-7001cc02a1e6. Diamorphine -> https://github.com/m0nad/Diamorphine Reptile -> https://github.com/f0rb1dd3n/Reptile/ We got access to the memory dump of infected machines. So, let’s start our analysis

Hey Squad, Today, I am going to write a blog about something interesting. It is about “Memory Forensics”. Memory forensics (sometimes referred to as memory analysis) refers to the study of volatile data in a computer’s memory dump. Information security professionals conduct memory forensics to investigate and identify attacks or…

Hi Squad, Today, I will discuss the usefulness of timeline creation during Forensic analysis. Let’s get into it. (Gonna be short and to the point) Introduction The idea behind timeline analysis is to list out the events that happened in your system in chronological order. …

Co-contributor: Dheeraj Nayak Hey Squad, Today I will be telling you guys how I found CVE-2022–40088. Simple College Website 1.0 allows a user to perform Reflected Cross-site scripting via /college_website/index.php?page= when sending Javascript code to the “page” parameter. Vendor Homepage: https://www.sourcecodester.com/php/14548/simple-college-website-using-htmlphpmysqli-source-code.html Source Code: https://www.sourcecodester.com/sites/default/files/download/oretnom23/simple-college-website.zip

Hey Squad, Today, we will see how to write shellcode on windows to create a Dialog box. Investigate the MessageBoxA Function https://docs.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-messageboxa int MessageBoxA( HWND hWnd, LPCSTR lpText, LPCSTR lpCaption, UINT uType ); The first argument as well as the last one can be zeroed. …

Hey Squad, Hope everyone is doing great!!! Today, we will be looking at how to exploit Kolibri HTTP Server using “Egg Hunter” method. What is Egg Hunter? In the normal Stack Based Buffer Overflow technique, there was as much space as we wanted to write the shellcode on the memory. When examining an application…

Hey Squad, Today, We will be looking at how to fuzz for vulnerabilities in Windows applications. Vulnserver will be used for demonstration. For fuzzing, we will be using Spike. Let’s get started… Spike Fundamentals According to OWASP, fuzz testing, often known as fuzzing, is a Black Box software testing approach that essentially…

Let’s first discuss what Exception Handlers actually are, the different varieties, and what function they provide inside the Windows OS before we move into looking at this from an exploitation standpoint. What is an Exception? An exception is an event that occurs during the execution of a program/function Different Types of Handlers Exception Handler (EH) — A piece…