Hacking Android Games

https://8ksec.io/hacking-android-games/


🎖@malwr

59

1

Writing a PE Loader for the Xbox in 2024 | lander's posts
Adventures in reinventing the wheel. Also: I hate thread-local storage.

https://landaire.net/reflective-pe-loader-for-xbox/


🎖@malwr

253

2

Iranian backed group steps up phishing campaigns against Israel, U.S.

Google’s Threat Analysis Group shares insights on APT42, an Iranian government-backed threat actor.

https://blog.google/threat-analysis-group/iranian-backed-group-steps-up-phishing-campaigns-against-israel-us/


🎖@malwr

266

3

Abusing AV/EDR Exclusions to Evade Detections | by Arun Nair | SEERcurity Spotlight | Aug, 2024 | Medium
Long time dear readers. In this blog post we’ll see how to abuse a common feature in Antivirus and EDRs that’s not often talked about. I will be using Windows Defender AV, as that’s common and often…

https://medium.com/seercurity-spotlight/abusing-av-edr-exclusions-to-evade-detections-21fe31d7ed49


🎖@malwr

377

8

Server-Side Template Injection: Transforming Web Applications from Assets to Liabilities

https://research.checkpoint.com/2024/server-side-template-injection-transforming-web-applications-from-assets-to-liabilities/


🎖@malwr

399

5

CVE-2024-38112: Void Banshee Targets Windows Users Through Zombie Internet Explorer in Zero-Day Attacks

Our threat hunters discovered CVE-2024-38112, which was used as a zero-day by APT group Void Banshee, to access and execute files through the disabled Internet Explorer using MSHTML. We promptly identified and reported this zero-day vulnerability to Microsoft, and it has been patched.

https://www.trendmicro.com/en_us/research/24/g/CVE-2024-38112-void-banshee.html


🎖@malwr

411

4

ASLRn’t: How memory alignment broke library ASLR - zolutal’s blog
As it turns out, on recent Ubuntu, Arch, Fedora, and likely other distro’s releases, with kernel versions >=5.18, library ASLR is literally broken for 32-bit libraries of at least 2MB in size, on certain filesystems. Also, ASLR’s entropy on 64-bit libraries that are at least 2MB is significantly reduced, 28 bits -> 19 bits, on certain filesystems.

https://zolutal.github.io/aslrnt/


🎖@malwr

449

6

Extension Trojan Malware Campaign | ReasonLabs
This research article intends to highlight a specific ongoing threat and the larger issue: malicious web extensions. The ReasonLabs Research Team has identified a new widespread polymorphic malware campaign that forcefully installs extensions on endpoints.

https://reasonlabs.com/research/new-widespread-extension-trojan-malware-campaign


🎖@malwr

498

5

captainzero93/Protect-Images-from-AI-PixelGuard: PixelGuard protects images from AI scraping and unauthorized use in AI training, such as facial recognition models or style transfer algorithms. It employs multiple invisible protection techniques that mostly imperceptible to the eye but can interfere with AI processing.

https://github.com/captainzero93/Protect-Images-from-AI-PixelGuard


🎖@malwr

420

2

captainzero93/security_harden_linux: Semi-automated bash scripts that provide security hardening for Linux, Debian based, 2024

https://github.com/captainzero93/security_harden_linux/


🎖@malwr

362

6