Oct 17, 2021Unsupervised Text Classification in PowerShell :Part 1Text classification or text analysis is one of the growing fields in the IT world. Cyber Security is not an exception, especially in Threat Hunting. Understanding the infrastructure and log sources is a very important and crucial part before we start hunting. While understanding the data and log sources we…Algorithms6 min readAlgorithms6 min read
Oct 10, 2021The Threat Hunting Hypothesis Defined ?Human intelligence gives us the liberty of interpreting things as per our own will and understanding. This is the drawback of our free-thinking since in this way truth will be relative rather than absolute. The same goes for the Hypothesis based hunting term. …Threat Hunting3 min readThreat Hunting3 min read
Aug 29, 2021Simple DarkWeb Monitoring Bot with TelegramOne of the aspects of threat hunting is to look for data breaches and leaks that happen on the dark web. Good threat hunter keeps looking for such leaks for clients it supports. There are many ways to look for data leaks via darknet monitoring, but it’s very tedious to…Osint3 min readOsint3 min read
Jan 10, 2021RE-loaded : THM room HintsHi Folk i have created room for zero-hero RE challenge room on THM. Currently room is hosting on 4 challenges, I will add more challenges as per the response. Bear In mind i have created this room by keeping in mind that challenge gradually increase and each binary teach something…Thm5 min readThm5 min read
Nov 14, 2020ShellCoding : The syscall dilemmaShellcoding or simply exploit writing depends heavily the on syscall or system call for their success. OS architecture is designed in such way that it mainly divided in to two section firstly as User Mode and Second one is [Protected] kernel mode. Normal user is forbidden to talk to kernel…Shellcoding4 min readShellcoding4 min read
Oct 10, 2020Token Impersonation PrivEsc: C++ CodeIt was suppose to be a part of my malware programming series but unfortunately i am unable to create a whole blog series. Never minds lest see how we can write program to perform token impersonation on windows system and get SYSTEM privileges What is token Impersonation exploit? Token impersonation PrivEsc is technique when attacker…Exploit Development2 min readExploit Development2 min read
Jul 11, 2020Replacing Original file without changing creation dateHello, every one writing after a long time . This time i have decided to brief you all about interesting concepts of the DFIR and TH very quickly. So today we will be looking at what is File System Tunneling its demonstration Concept in nut shell In windows every file has the meta data…Dfir2 min readDfir2 min read
Feb 16, 2020Bro log file analysis using Python and PandasIn the world of cybersecurity, we have multiple Dimensions to deal with. Among this, there is a log analysis, which is a crucial part of threat hunting and incident response. While there are many tools available to do this, one expert analyst should keep a few manual methods to do…Threat Hunting8 min readThreat Hunting8 min read
Sep 23, 20190x00 Basics of Reverse Engineering: StackI fell in love of reverse engineering after watching a video of buffer overflow exploit explanation by computerphile. …Programming5 min readProgramming5 min read
Sep 18, 2019NetCat & Cache Level Attacks ExplainedCache attacks are one of the most formidable attacks ever developed againts any system, recent progress In this class of attacks made it even more scary. In this article we will try to understand what it actually looks like on abstarct level and what is a NetCat attack. I would…Netcat5 min readNetcat5 min read
