First things first: I am not affiliated with White Knight Labs (WKL) and I am not getting paid or compensated for this review. This is just my personal stream of thoughts on the course and certification. With that out of the way, it’s time to share my review of the Offensive Development Practitioner Certification (ODPC) by WKL. Course Link This isn’t going to be one of those typical reviews where I go through modules from the vendor page. You can click click the link above and read the syllabus for yourself. ...
Hiding In Plain Sight (Windows) - Store Payload in Events
Weird but insane Going through some different persistence techniques on Windows, I was highly inspired by one that is about storing your payload within the Windows Event Log and then retrieving it when needed. This is suuuuper funny, however, I do believe it would be rather effective. The idea is simple: - Write and Event to Application channel with Source that looks “legit enough” and store binary data of shellcode there (gonna do simple MessageBox) - Retrieve the binary data and execute it ...
Overcomplicated Linux Process Enumeration
The guide on how to overthink process enumeration in Linux. I am coming from the Windows heavy internals background, however, Linux has been always super interesting to me. This is where I started, back in the day doing some heavy auditd stuff here and there. It is time that I have decided to get back to Linux and share something that might help or inspire others. Why the f.. would you want to enumerate processes? Well, this would be the case of your typical recon phase once you got into the host. You can find some interesting stuff… From the maldev point of view, you usually want to enumerate processes to find some juicy targets for potential process injection (that’s what you do in Windows world, so I assume that would be also valid in Linux land, lol, idk). ...