Search for a command to run...
We have recently received a URL inside of an email that redirected to a page that downloaded a zip file. Inside this zip file there was a .HTA file. 馃挕 This file is very simple and is a very good entry point to reversing for anyone interested in lea...
Now we can finally start coding our trojan. The malware we are going to use for testing is a reverse TCP shell from Metasploit. Before coding the shellcode loader, let's see if AVs can detect the reverse shell executable. To generate the reverse TCP ...
Now that we have the development and testing environments set up we can start designing and implementing our trojan. The first question to answer is how we will store the piece of malware inside of our trojan. There are two options: Shellcoded hardco...
Before starting, we need to set up the testing environment and the development environment. The Static Analysis will be tested with an online service that allows running a file through 27 different AVs. The most known service is called VirusTotal, ho...
An AV (Anti Virus) is a piece of software that analyses files and monitors the OS (Operative System) status to detect malware. AVs can also analyze the machine鈥檚 traffic to determine suspicious behaviour. AVs only work in the machine they are install...
As a final project for my degree, I decided to make a study on how safe are AVs and how to bypass them. This led me to scorch the internet looking for how AVs work and how they can be bypassed. While there is a lot of information online about this to...
[1] - Withdrawer can incur loss due to bad withdraw timing. Loss pressure not distributed equally Withdrawer can incur loss due to bad withdraw timing. Loss pressure not distributed equally. 路 Issue #44 路 code-423n4/2023-02-ethos-findings (github.com...