@dankitan
Joined November 2015
  • Tweets107
  • Following460
  • Followers42
1Media
Dankitani retweeted
ö@r0keb7 Jul 2025
Good morning! Just published a blog post diving into Windows Kernel Pool internals: basics, memory allocation functions, internal structures, and how Segment Heap, LFH, and VS work. r0keb.github.io/posts/Window…

Windows Kernel Pool Internals

Good morning! In today’s blog post we’re going to dive into a topic that has interested me for quite some time, the Windows kernel pool. It’s a topic that tends to have “scarce” documentation online...

r0keb.github.io
4
134
3
400
33,251
As promised, the research on CVE-2023-28252 is already published with its PoC and the detailed explanation of the reversing that we did with my friend @solidclt. github.com/fortra/CVE-2023-2…

GitHub - fortra/CVE-2023-28252

Contribute to fortra/CVE-2023-28252 development by creating an account on GitHub.

github.com
1
86
1
185
23,789
Dankitani retweeted
Mr. Rc
@rcx8629 Dec 2022
Are you interested in learning reverse engineering in 2023? I've spent the this year studying RE, and I want to share all the resources that helped me along the way in the following tweets. Trust me, you won't be disappointed! 🧵 #infosec
94
596
21
1,747
232,686
Do you sit at a computer for longer than 6 hours a day? You’re destroying your body if so. Here’s the setup you need to protect yourself from posture problems and crippling long-term injuries: 🧵
1,300
30,134
2,656
132,294
My new paper for @MBThreatIntel: "#JSSLoader - the #shellcode edition" : malwarebytes.com/blog/threat… // #FIN7
16
167
4
452
"A practical guide to bypassing userland API Hooking" #redteam #infosec #pentest perspectiverisk.com/a-practi…
30
56
Shielder - Reversing embedded device bootloader (U-Boot) - Part 2 : shielder.com/blog/2022/03/re… Part 1 : shielder.com/blog/2022/03/re…
2
15
52
Dankitani retweeted
Relyze@relyze1 Apr 2022
Pwning a Cisco RV340 with a 4 bug chain exploit: blog.relyze.com/2022/04/pwni…
73
1
184
Insane amount of good quality resources 👏 github.com/FULLSHADE/Windows…

GitHub - FULLSHADE/WindowsExploitationResources: Resources for Windows exploit development

Resources for Windows exploit development. Contribute to FULLSHADE/WindowsExploitationResources development by creating an account on GitHub.

github.com
4
4
Dankitani retweeted
hacksys@flopyash5 Feb 2022
[Red Team] "Advanced Process Injection Techniques" Workshop is now LIVE ! Workshop Outline : PE Basics APC injection Module Stomping Process Hollowing Process Doppelgänging Transacted Hollowing Process Herpaderping Process Ghosting Code Repo : github.com/RedTeamOperations…
1
149
3
367
Dankitani retweeted
Mr. Rc
@rcx863 Feb 2022
Windows internals resources that I have collected in around an year #infosec Win32 programming with code examples: installsetupconfig.com/win32… Notes for Windows API programming; caiorss.github.io/C-Cpp-Note… Windows undocumented functions' docs: undoc.airesoft.co.uk/
9
185
2
470
Dankitani retweeted
wrongbaud
@wrongbaud17 Jan 2022
New blog series: Intro to Embedded RE Part 1: Tools and Series Overview voidstarsec.com/blog//2022/0… The next post releases on Friday, I'm looking forward to sharing this work with the community!
3
60
3
186
Investigadores encuentran múltiples puertas traseras en el popular dispositivo VoIP fabricado por el fabricante alemán Auerswald ↘️CVE-2021-40859 -> CVSS 9.8 ↘️CVE-2021-40856 ↘️CVE-2021-40857 blog.redteam-pentesting.de/2… 🔁Actualizaciones firmware disponibles: auerswald.de/en/start/news/a…
10
19
Process injection via the KernelCallBackTable involves replacing original callback function by custom payload so that whenever the function is invoked, payload will be triggered. In this case the fnCOPYDATA callback function has been used. C# code snippet: gist.github.com/sbasu7241/5d…
3
129
1
364
Dankitani retweeted
d00rt
@D00RT_RM22 Dec 2021
Finally, we've released my last investigation on the recent attacks of #andariel #apt group. It covers the previous work done by @kaspersky @Malwarebytes and @KrCERT . Where we study the code reuse and evolution of #TigerRAT #TigerDownloader. Enjoy :) #malware
Threatray
@threatray22 Dec 2021
Check out our newest research on the Andariel APT group where we take a deep dive on the TigerDownloader and TigerRAT malware families. threatray.com/blog/establish… #malware #apt #andariel #lazarus #threatintelligence

Establishing the TigerRAT and TigerDownloader malware families | Threatray

Recent research by Malwarebytes (April 2021), Kaspersky (June 2021) and the Korean CERT (September 2021), reports about attacks on South Korean entities, employing new techniques and malware not...

threatray.com
3
19
2
41
Finally got around to adding training material from my #defcon 29 workshop "Modern Malware Analysis for Threat Hunters". 👉 github.com/jstrosch/malware-…
3
110
2
329
I will also giveaway 1 copy to a random person who retweetd this . 400 followers to go 🌟🌟🌟🌟🌟🌟🌟 #BugBounty
Hussein Daher
@HusseiN98D17 Dec 2021
Giveaway time! I will send 3 copies of my hacking workshop done at @THREAT_CON. That's +12 hours of content 🔥 ✅ Like 🔁 RT the post ✅ Follow 👉🏿 Giveaway ends at reaching 20k Followers 🌟
15
214
3
171
Giveaway time! I will send 3 copies of my hacking workshop done at @THREAT_CON. That's +12 hours of content 🔥 ✅ Like 🔁 RT the post ✅ Follow 👉🏿 Giveaway ends at reaching 20k Followers 🌟
131
636
7
925
Do you reverse engineer or perform #Android apps security research? Check the latest #jadx v1.3.0: code renaming (w/o deobfuscation), code comments (plus searching, with regex & in resource files), smali debugger and much more (Core & GUI)… Level up!👍 github.com/skylot/jadx
2
3
My writeup for #flareon8 task 7: hshrzd.wordpress.com/2021/10…

Flare-On 8 – Task 7

Flare-On is an annual “reverse engineering marathon” organized by Mandiant (formerly by FireEye). You can see more information here. It is a Capture-The-Flag type of a contest, where yo…

hshrzd.wordpress.com
5
46
2
208
Load more