Creează un cont pentru a te abona la acest blog și a-i urmări articolele pe pagina Lectură.
-
Testing local LLMs: Qwen 3.5 vs. PowerShell Obfuscation
Recently I finally got to test some local models with Nous Research Hermes-Agent.
-
About Malfind Labs
About Malfind Labs Welcome to Malfind Labs, a research blog dedicated to exploring the intersection of malware analysis and artificial intelligence.
-
Malware triage in 30 minutes or how to get infected when browsing google
Today when looking to download a new version of VLC Player, I got served with this malicious advertisement on google and thought it might be an excellent opportunity to show how to make a quick malware triage.
-
From the archive #2: Ursnif dropper deobfuscation
In this article, I want to show a simple approach to JavaScript deobfuscation, based on an older Ursnif dropper sample.
-
From the archive #1: OSTap downloader deobfuscation and analysis
In this article, I deobfuscate and analyze a quite old but very interesting OSTAP JavaScript downloader.
-
Revisiting Code Injection #1. Classic DLL injection
Lately I am involved in a project that requires me to write some C/C++ code.
-
Tips & tricks #1: MITM proxy with fakenet and realnet mode
This post will be the first of quick tips & tricks series.
-
Extracting IP and port from a meterpreter payload
When an attacker has already gained access to our network and he managed to steal some passwords or hashes, he is usually looking to break into something more interesting than HR workstation.
-
How I accidentally found a clickjacking feature in Facebook
I would’ve never thought that one of my first blog posts will be about looking for bugs in Facebook.
-
Deobfuscating Emotet's powershell payload
Emotet is a banking trojan, targeting computer users since around 2014.