https://d3ext.github.io/D3ExtMy own blog. 2024-11-20T14:47:40+00:00 D3Ext https://d3ext.github.io/ Jekyll © 2024 D3Ext /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png Course Review - HackTheBox Bug Bounty Hunter2024-11-20T00:00:00+00:00 2024-11-20T14:44:28+00:00 https://d3ext.github.io/posts/htb-bug-bounty-hunter/ D3Ext Introduction Hi there! Today I bring you a review of a the Bug Bounty Hunter course offered by HackTheBox (HTB), which I have recently completed. I will discuss its main aspects, price and subscriptions, its content, the certification, my personal opinion, if it’s worth or not, and more. Having said so, let’s start with this review. Course main aspects First of all, this is a course aimed t... Malware Development 17 - Introduction to offensive Nim2024-10-05T00:00:00+00:00 2024-10-05T10:25:59+00:00 https://d3ext.github.io/posts/malware-dev-17/ D3Ext Introduction Hi there! Some days back I thought about learning a new language that could was powerful, lightweight, modern and easy to learn. Finally, I decided that Nim was the language I was looking for. As the official page says: Nim is a statically typed compiled systems programming language. It combines successful concepts from mature languages like Python, Ada and Modula. It’s able to g... Malware Development 16 - Process Hollowing (Golang)2024-10-01T00:00:00+00:00 2024-10-01T00:00:00+00:00 https://d3ext.github.io/posts/malware-dev-16/ D3Ext Introduction Hi there! After almost one year since last post, today we will be discussing a well-known technique used by Red Teamers and malware developers to make shellcode injection a little bit more OPSEC, this technique is called Process Hollowing. And, in a few words, it is used to replace the executable section of a legitimate process with malicious code, generally a PE. Explanation D... Malware Development 15 - Using Hooka and Maldev for Malware Dev (Golang)2023-10-13T00:00:00+00:00 2023-10-13T00:00:00+00:00 https://d3ext.github.io/posts/malware-dev-15/ D3Ext Introduction Hi there! This post is definitely much more special for me since today we’ll use two different tools/projects I’ve coded and are published on my Github, to develop malware in an easier way. If you want to check them out before reading the post, this are the official repositories: Hooka and maldev First Example In this first part of the post, we are going to create a shellcode l... Malware Development 14 - UAC bypass privilege escalation (Golang)2023-09-16T00:00:00+00:00 2023-09-16T00:00:00+00:00 https://d3ext.github.io/posts/malware-dev-14/ D3Ext Introduction Hi hackers! In this posts we’ll see how threat actors can approach default Windows misconfigurations to elevate from common user to Administrator privileges by bypassing UAC Only for educational purposes Explanation First of all, what is UAC? User Account Control is a security feature implemented in various versions of Windows, starting with Windows Vista and continuing in...