
5 min read
Cybersecurity Research Using a few tricks we can make a PE payload, that looks like a PDF - including file name.
Using a few tricks we can make a PE payload, that looks like a PDF - including file name.
Exploiting suo and csproj files recently gained attention, used in attacks on Cybersecurity researchers. We found another way
At times, it will be handy to have all complementary evasion commands at hand. We tried to compile the ultimate list, without going overboard.
We made the bold claim, that all AMSI evasions still work. But is that really true? Come in for a ride.
We created a custom reverse shell from scratch and made it persistent - the result is scary, to say the least.
Once made some architecture visualisations - maybe a chance to explain how these came to life and how I discovered: all evasions still work fine.