matheuzsec_

4 ms·

1. 1.▲
   Fileless ELF Execution via O_tmpfile(matheuzsecurity.github.io)

   4 points by matheuzsec_ 23d ago|0 comments
2. 2.▲
   by matheuzsec_ 25d ago

   The keyring separates staging from execution, payload can be written by a different process at a different time with no file, no memfd, no open fd in /proc/pid/fd, by the time the loader runs, the payload only exists in kerne
3. 3.▲
   Fileless ELF Execution via Kernel Keyring(matheuzsecurity.github.io)

   11 points by matheuzsec_ 25d ago|7 comments
4. 4.▲
   Rootkit Evading Elastic Defend Module Load Detection(matheuzsecurity.github.io)

   1 points by matheuzsec_ 1mo ago|0 comments
5. 5.▲
   by matheuzsec_ 3mo ago

   Isnt that kind of obvious? Projects like this are incredibly valuable because they help defenders develop new detection techniques and improve EDR capabilities.
6. 6.▲
   Furtex: Post-exploitation, rootkit and evasion research toolkit for Linux(github.com)

   18 points by matheuzsec_ 3mo ago|2 comments