Omri Baso·Aug 13Microsoft Configuration Manager RCE 0-Day Exploit Chain (SCCM 𝗖𝗩𝗘-𝟮𝟬𝟮𝟲-𝟰𝟳𝟯𝟬𝟭)Hey, My name is Omri Baso I am a 28 years old Security Researcher from Israel — I like researching about Windows, Active Directory, Malware…A response icon2
PepperMalware·May 28Analysis of .Net Deucalion IrcBot Sample Obfuscated with ConfuserEx+KoiVMIn this post I perform a quick analysis of a sample that seems to be an ircbot, named alphaircbot (based on the any.run tags) or deucalion…
PepperMalware·May 25Analysis of .Net Stealer GrandSteal (2019–03–18)In this post I share my notes about the analysis of a sample (an stealer written in .Net) whose family is unknown to me (any feedback is…
Life of a Pentester·May 13HSC RTV CTF — Msg Packed (Reversing — 250 pts)This reversing challenge was a little easy considering you know what the MessagePack format is, which is a serialized binary data. Think of…
Life of a Pentester·May 12HSC RTV CTF — Unknown Architect (Reversing — 200 pts)This was an easy one. The title gives the hint of finding the right architecture in which the binary should be run on.
