Exciting news! My book is finally 100% finished and in production. The release date is scheduled for May 2023! 🥳 I’ll make an official announcement with the exact date and pre-sale links as soon as I get them.

I published a totally refactored version of ShellcodeTester. The new version is developed in Python and runs over Linux and Windows machines. Assembly ASM file (32 and 64 bits) Check badchars Output to several formats Other amazing features... github.com/helviojunior/s…

Dei a louça no patrão! Treinamentos Sec4US com 20% de desconto.

Justamente no dia do meu aniversário (07/ago) chegou a atualização que pedi para o Ilustrador com as certificações da OffSec. #sec4us #m4v3r1ck #osce3 #osep #osed #oswe #oscp #offsec

Refreshed "pass the things" AD mindmap, the previous one was not in a dark theme (outrageous I know) ⏩ thehacker.recipes/ad/movement/nt… 💡 made with draw.io

“Using Windows In/Direct System call to bypass AV/EDR“. Nossa palestra realizada no MindTheSec 2023 já está disponível em nosso canal no YouTube. #sec4us #bypassedr #avbypass #lowlevel

Black Week Sec4US! 30% off em todos os treinamentos até dia 24/11. #pentest #sec4us #CyberSecurity

Desejamos a todos um Feliz 2024! 🎉

CVE-2023-32434 Exploited: PoC Unlocks Full Command of iOS Devices Proof-of-concept (PoC) code has been released for a zero-day iOS vulnerability (CVE-2023-32434) that can be chained to take full control of a mobile device securityonline.info/cve-2023-32434…

Absolutely beautiful, can't wait to pull this apart. How many file signatures can you identify in this hex dump alone?

Excellent series by Ahmed Hesham on PE file format internals 0xrick.github.io/win-internals/… 0xrick.github.io/win-internals/… 0xrick.github.io/win-internals/… 0xrick.github.io/win-internals/… 0xrick.github.io/win-internals/… 0xrick.github.io/win-internals/… 0xrick.github.io/win-internals/… #infosec #cybersecurity

Wondering what telemetry an EDR collects? Wonder no more! Kostas and Alex Teixeira run an EDR Telemetry Project, covering all major EDRs: "The main goal of the EDR Telemetry project is to encourage EDR vendors to be more transparent about the telemetry they provide". Blog:

I'm thrilled to share an exciting update from the forefront of cybersecurity research! Diving deep into bypass defenses, specifically EDR/XDR systems, I've developed an innovative technique named HookChain. #bypass #bypassedr #hookchain #m4v3r1ck #bitdefender #crowdstrikefalcon

HookChain loading Havoc => CrowdStrike Falcon Bypass #HookChain #Havoc #edr #bypass #m4v3r1ck

HookChain loading (Havoc/Metasploit/ProcDump LSASS) => Trend Apex One Bypass #HookChain #Havoc #edr #bypass #m4v3r1ck

This is a public invitation to EDR/XDR vendors to provide environments for testing the HookChain technique. linkedin.com/pulse/call-edr… via LinkedIn

Hélvio Júnior, SCMPA e SCWAP Leader, OSCE3, OSCP, eCXD no LinkedIn: CrowdStrike are you playing fair with researchers? Full video with PoC… | ⁦CrowdStrike⁩ ⁦Helvio Junior (M4v3r1cK)⁩ linkedin.com/posts/helvioju…

Phrack is a highly respected hacking magazine, founded in 1985. It symbolizes the hacker ethos of knowledge sharing and freedom. I recently achieved a significant milestone in my underground journey by publishing there. You can check out the article: phrack.org/issues/71/3.ht…

😂

Feliz ano novo 🍾✨ Um ano de muito crescimento aqui pela Sec4US, onde pudemos formar, certificar e dividir nossos conhecimentos com muitas pessoas Brasil à fora. Que 2025 possamos crescer ainda mais juntos 🚀