All Posts

Bypass YARA Rule f0b627fc for CobaltStrike to Evade EDRs

Bypass YARA Rule f0b627fc for CobaltStrike to Evade EDRs

Bypass Yara Rule Windows_Trojan_CobaltStrike_f0b627fc by randomizing its shellcode signature using a Python script.

EDR EvasionCobalt Strike

Make Your Malware Look Legitimate: Spoofing File Details

Make Your Malware Look Legitimate: Spoofing File Details

Learn how to make your malware appear as legitimate software by adding an icon to your malware, and copying file properties from real programs.

EDR EvasionC++Shellcode

How to Easily Build a Malware Testing Lab with Elastic EDR and TCM's AD Lab

How to Easily Build a Malware Testing Lab with Elastic EDR and TCM's AD Lab

Learn how to create your own malware testing lab with Elastic EDR and TCM Security's AD lab for malware evasion testing.

Malware LabEDR Setup

Store, Read, and Convert Shellcode in .bin and C Arrays: C++ and xxd

Store, Read, and Convert Shellcode in .bin and C Arrays: C++ and xxd

Learn to store and read shellcode in .bin files using C++, and quickly convert between .bin files and C arrays with xxd.

ShellcodeC++Malware