📈#HighlyCitedPaper!
💻Pinicorn: Towards Automated Dynamic Analysis for #Unpacking 32-Bit PE #Malware
🔗Paper Link: mdpi.com/2079-9292/13/11/208…
Authors from @Soongsilglobal
#OEP #API #deobfuscation #IntelPin #obfuscation #PortableExecutable #OEPobfuscation #APIobfuscation #Pin
64
📈#HighlyCitedPaper!
💻Pinicorn: Towards Automated Dynamic Analysis for #Unpacking 32-Bit PE #Malware
🔗Paper Link: mdpi.com/2079-9292/13/11/208…
Authors from @Soongsilglobal
#OEP #API #deobfuscation #IntelPin #obfuscation #PortableExecutable #OEPobfuscation #APIobfuscation #Pin
35
8 Sep 2025
رشتو: قسمت پنجم دوره ی رایگان بررسی ساختار فایلهای PE در یوتیوب منتشر شد.
در ادامه بررسی #NTHeaders، در این قسمت رفتیم سراغ بررسی ساختار #FileHeader .
#ویندوز_اینترنالز #تیم_قرمز #تیم_آبی
#PortableExecutable #PEBear #WindowsInternals #redteam #Blueteam #PEParser #Lief
5 Aug 2025
دوره ی رایگان جدیدی با عنوان "بررسی ساختار فایلهای #PE (#PortableExecutable)" رو شروع کردیم.
سایت:
onhexgroup.ir/analysis-of-pe…
یوتیوب:
youtube.com/playlist?list=PL…
اسلاید:
github.com/onhexgroup/Tutori…
#ویندوز_اینترنالز #تیم_قرمز #تیم_آبی
#PEBear #WindowsInternals #redteam #Blueteam
1
1
2
166
2 Sep 2025
رشتو: در قسمت چهارم، #NTHeaders رو بررسی کردیم که از سه بخش #Signature و #FileHeader و #OptionalHeader تشکیل شده و بصورت ویژه ساختار Signature رو آنالیز کردیم. این بخش چون ویژگی امضاء رو داره، بنابراین ابزار معروف #Suricata رو نصب و پیکربندی کردیم
#PortableExecutable #PEBear
5 Aug 2025
دوره ی رایگان جدیدی با عنوان "بررسی ساختار فایلهای #PE (#PortableExecutable)" رو شروع کردیم.
سایت:
onhexgroup.ir/analysis-of-pe…
یوتیوب:
youtube.com/playlist?list=PL…
اسلاید:
github.com/onhexgroup/Tutori…
#ویندوز_اینترنالز #تیم_قرمز #تیم_آبی
#PEBear #WindowsInternals #redteam #Blueteam
1
1
2
168
12 Aug 2025
3/3: در نهایت روش بررسی ساختار PE در ابزارهای #x64dbg و #IDAPro و #Windbg رو معرفی کردیم.
سایت دوره:
onhexgroup.ir/analysis-of-pe…
مشاهده در یوتیوب
youtube.com/watch?v=zQeA8KJw…
اسلاید و کد
github.com/onhexgroup/Tutori…
#تیم_آبی
#PortableExecutable #PEBear #WindowsInternals #redteam #Blueteam
339
5 Aug 2025
دوره ی رایگان جدیدی با عنوان "بررسی ساختار فایلهای #PE (#PortableExecutable)" رو شروع کردیم.
سایت:
onhexgroup.ir/analysis-of-pe…
یوتیوب:
youtube.com/playlist?list=PL…
اسلاید:
github.com/onhexgroup/Tutori…
#ویندوز_اینترنالز #تیم_قرمز #تیم_آبی
#PEBear #WindowsInternals #redteam #Blueteam
3
4
3,236
21 Jul 2024
Extrude - Analyse Binaries For Missing Security Features, Information Disclosure And More... dlvr.it/T9sNCD #Extrude #Nx #PortableExecutable #Relro
1
2
1,416
Abusing Windows Internals - I have just completed this room! Check it out: tryhackme.com/room/abusingwi… #tryhackme #RedTeam #PortableExecutable #DLLInjection #PEInjection #ProcessHollowing #abusingwindowsinternals via @tryhackme
20
26 Feb 2024
Abusing Windows Internals - I have just completed this room! Check it out: tryhackme.com/room/abusingwi… #tryhackme #Windows #Evasion #ProcessInjection #RedTeam #PortableExecutable #DLLInjection #PEInjection #ProcessHollowing #abusingwindowsinternals via @tryhackme
1
43
7 Feb 2024
Abusing Windows Internals - I have just completed this room! Check it out: tryhackme.com/room/abusingwi… #tryhackme #Windows #Evasion #ProcessInjection #RedTeam #PortableExecutable #DLLInjection #PEInjection #ProcessHollowing #abusingwindowsinternals via @tryhackme
5
116
3 Jan 2024
Abusing Windows Internals - I have just completed this room! Check it out: tryhackme.com/room/abusingwi… #tryhackme #Windows #Evasion #ProcessInjection #RedTeam #PortableExecutable #DLLInjection #PEInjection #ProcessHollowing #abusingwindowsinternals via @tryhackme
1
65
4 Dec 2023
Abusing Windows Internals - I have just completed this room! Check it out: tryhackme.com/room/abusingwi… #tryhackme #Windows #Evasion #ProcessInjection #RedTeam #PortableExecutable #DLLInjection #PEInjection #ProcessHollowing #abusingwindowsinternals via @tryhackme
37
Abusing Windows Internals - I have just completed this room! Check it out: tryhackme.com/room/abusingwi… #tryhackme #Windows #Evasion #ProcessInjection #RedTeam #PortableExecutable #DLLInjection #PEInjection #ProcessHollowing #abusingwindowsinternals via @tryhackme
37
Abusing Windows Internals - I have just completed this room! Check it out: tryhackme.com/room/abusingwi… #tryhackme #Windows #Evasion #ProcessInjection #RedTeam #PortableExecutable #DLLInjection #PEInjection #ProcessHollowing #abusingwindowsinternals via @tryhackme 👍👍
54
26 Oct 2023
Abusing Windows Internals - I have just completed this room! Check it out: tryhackme.com/room/abusingwi… #tryhackme #Windows #Evasion #ProcessInjection #RedTeam #PortableExecutable #DLLInjection #PEInjection #ProcessHollowing #abusingwindowsinternals via @tryhackme
34
25 Oct 2023
Abusing Windows Internals - I have just completed this room! Check it out: tryhackme.com/room/abusingwi… #tryhackme #Windows #Evasion #ProcessInjection #RedTeam #PortableExecutable #DLLInjection #PEInjection #ProcessHollowing #abusingwindowsinternals via @tryhackme
40
Abusing Windows Internals - I have just completed this room! Check it out: tryhackme.com/room/abusingwi… #tryhackme #Windows #Evasion #ProcessInjection #RedTeam #PortableExecutable #DLLInjection #PEInjection #ProcessHollowing #abusingwindowsinternals via @tryhackme
12
895
Help us burn Trillions of Shib. blockqa.io/blog-details/burn… #shib #shibtoken #shibarmy
How to extract shellcode from PE file?... #c #portableexecutable
blockqa.io/question-details/…
3
8 Jul 2023
Abusing Windows Internals - I have just completed this room! Check it out: tryhackme.com/room/abusingwi… #tryhackme #Windows #Evasion #ProcessInjection #RedTeam #PortableExecutable #DLLInjection #PEInjection #ProcessHollowing #abusingwindowsinternals via @tryhackme
2
78
7 Jul 2023
Abusing Windows Internals - I have just completed this room! Check it out: tryhackme.com/room/abusingwi… #tryhackme #Windows #Evasion #ProcessInjection #RedTeam #PortableExecutable #DLLInjection #PEInjection #ProcessHollowing #abusingwindowsinternals from @tryhackme
2
54