Feb 3 · 8 min read · Tổng quan Trong nhiều năm trở lại đây thì mục tiêu chính của nhóm gián điệp HoneyMyte (còn gọi là Mustang Panda hoặc Bronze President) thường xuyên diễn ra ở Châu Á và Châu Âu, trong đó khu vực Đông Nam Á bị ảnh hưởng nhiều nhất. Là một nhóm APT, Hon...
Join discussion
Feb 3 · 6 min read · Overview In recent years, the main targets of the espionage group HoneyMyte (also known as Mustang Panda or Bronze President) have frequently been in Asia and Europe, with Southeast Asia being the most affected. As an APT group, HoneyMyte uses many c...
Join discussion
Jan 11, 2025 · 2 min read · In this article, we’ll cover the Shellcodes - Shellcodes of the world, unite! write-up as the Day 8 challenge of the Advent of Cyber event challenge. It was interesting to grasp the fundamentals of writing shellcodes for reverse shells while executin...
Join discussion
Jul 22, 2024 · 4 min read · Hey there! Today, we're diving into the fascinating and somewhat intimidating world of shellcode. If you've ever wondered how hackers manage to take control of a compromised machine, shellcode is often a big part of the answer. Let's break it down to...
Join discussion
Oct 25, 2023 · 5 min read · One of my favorite quotes of all time comes from Jon Erickson's Hacking the Art Of Exploitation: "Shellcode is injected into a running program, where it takes over like a biological virus inside a cell." I studied molecular biology in college and t...
Join discussion
Jul 15, 2023 · 5 min read · Process A process is an executing program with a unique process ID (PID). The PID is an integer value used by the operating system for process management, resource allocation, and inter-process communication. PPID, or Parent Process IDentifier, repre...
Join discussionJul 5, 2023 · 5 min read · The question that might come naturally after reading this title is:Why should you know how to code a shellcode runner for your malware analysis? Malware analysis is a dark art. Every time you conduct a routine analysis, you get a surprise.Often, you ...
Join discussion
Jun 30, 2023 · 5 min read · A good malware analyst has to know how to embed shellcode payload into an executable in just a few minutes, which is the best way to recognize it during analysis. Trojans or, more generally, some malware often embed shellcode within their code, in pa...
Join discussion
Jun 16, 2023 · 6 min read · Now we can finally start coding our trojan. The malware we are going to use for testing is a reverse TCP shell from Metasploit. Before coding the shellcode loader, let's see if AVs can detect the reverse shell executable. To generate the reverse TCP ...
Join discussion