Jump to content
How to unhide the content

betweengap

Members
 View Profile  See their activity

  • Content Count

    0

  • Joined

  • Last visited

Posts posted by betweengap

  1. Posted

    ptrace advanced software exploitation is very old; there is one type confusion in java runtime and a info leak in firefox (vulns are around 2010-2011)

    as for driver/kernel exploitation, you probably can learn a lot by reading HEVD write-ups; patch diffing is also a good way to spot vulns;

    I'm in very similar situation like you (lack of modern public exploitation document/tutorial); the only way I know is to read AWE prep guides[1][2] and practice based on them;

    the other option is to look for logical vulns[3]. they are way way more easy to understand and find;

    you can DM me and we will talk about it more; sharing useful links/tutorials/documents and ...

    [1]:

    Hidden Content

      Give reaction to this post to see the hidden content.

    [2]:

    Hidden Content

      Give reaction to this post to see the hidden content.

    [3]:

    Hidden Content

      Give reaction to this post to see the hidden content.


     

     

    • Like 49
    • Thanks 9
    • Haha 1

  2. Posted · Edited by betweengap

    1 hour ago, corelanc0d3r said:

    Please stop sharing the Corelan bootcamp courseware. Take down the files, and if you have a copy, please stop sharing them.

    Aside from the fact that this is copyrighted content (and thus illegal to share), it's also absolutely morally wrong.

    Think about it for a moment:

    1. Corelan has been sharing tons of FREE content on their website since 2019.  Knowledge is already free.  In fact, the free content is written in a tutorial-like manner. The slides are just slides.

    2. Corelan is operating a Slack workspace, free for anyone to join, and actively supports people in their learning process.  Even if you have no money, you can still learn how to write exploits, for free.

    3. Teaching classes is my main source of income.  He charges a very reasonable price for his classes, and travels to various places around the world to make it easier for people to attend.    The classes are based on custom made courseware.  And this courseware should not be shared. I am trying to protect the work that I did to put the slides together.  I'm asking for a bit of respect here.

    4. Aside from feeding my family, the income is used to buy time to do research, and to post research for free.   The www.corelan.be website has been up since 2009 and continues to be available.   If you take away or affect my income, I will simply lose the incentive / motivation to give away content for free.

     

    So, please. Stop using the "knowledge should be free" as an excuse to cause damage to my small business and my personal life.  Remove the files, stop sharing.  Go to www.corelan.be and learn for free.  Join our Slack workspace and ask questions.  But please, stop hurting my business.

    And if you see other people sharing the files, I would appreciate if you could ask them to stop sharing.

     

    thanks

    Peter "corelanc0d3r" Van Eeckhoutte

    Hidden Content

      Give reaction to this post to see the hidden content.

    Hidden Content

      Give reaction to this post to see the hidden content.

    I'm sorry for that and I will keep telling people about not exchanging/selling/sharing it;

    please back the blog about modern exploitation - Microsoft Edge - CFG-ACG - Sandbox Escape, ..
    other people in Exploit Dev world seem to not like publish tutorials about modern exploitation; there are certainly people that started your tutorial series back in 2009-2012(exactly when you started writing) and they are people that took your "Advanced Training"; but please tell me one new|modern series about exploitation!!
    I know that most red teams don't use exploits in their tradecrafts but there are individuals just like me that like exploitation;

    • Like 22
    • Thanks 8
    • Haha 3

  7. Posted

    based on 2017 version of 610 (uploaded). the course main focus is on behaviour analysis, which is what you do in 80% cases as malware analyst; but sometimes you need to dig deeper; (write scrip to deobfuscate strings - write script to comment run-time loaded API Calls; see this:

    Hidden Content

      Give reaction to this post to see the hidden content.


    if you are supposed to have Certificate to get job, then go for it. side effect of taking 610 is you will join sans forum on DFIR, which is good way to show your skills, expand your network, etc
    in general, take a look at other courses/materials out there: OALabs (free) - Zero2Auto (paid) - MalwareUnicorn RE 102 Workshop (free), ...

    I"m not professional, but these are my opinion on it; It may be wrong; also there was a discussion on reddit on certificates/courses on Malware Analysis; they talk about 610 too;



    at the end, read this:

    Hidden Content

      Give reaction to this post to see the hidden content.


     

    • Like 85
    • Thanks 20
    • Haha 1
    • Sad 3

  9. Posted

    on reply to a idiot seller, here is the Embedded/IoT Linux for Red-Blue Teams:

    Hidden Content

      Give reaction to this post to see the hidden content.

    key:

    Hidden Content

      Give reaction to this post to see the hidden content.


    Open Source Intelligence Techniques - 7th Edition (2019)

    Hidden Content

      Give reaction to this post to see the hidden content.

    key:

    Hidden Content

      Give reaction to this post to see the hidden content.

    • Like 93
    • Thanks 27
    • Haha 5
    • Sad 1

  10. Posted · Edited by betweengap

    3 hours ago, isign said:

    Can you share these as well? Thanks!

    be sure that I will share them when I get one of the these courses:
    Advanced Fuzzing and Crash Analysis
    Zero 2 Automated
    Adversary Simulation and Red Team Tactics by MDsec

  11. Posted · Edited by betweengap

    Fuzzing for Software Security Testing and Quality Assurance, Second Edition
     Malware Analysis and Detection Engineering
    Professional Rootkits
    Secure Coding in C and C++
    Surreptitious Software: Obfuscation, Watermarking, and Tamper proofing

    Hidden Content

      Give reaction to this post to see the hidden content.

    key:

    Hidden Content

      Give reaction to this post to see the hidden content.


    I also have the followings:
    SEC760: Advanced Exploit Development for Penetration Testers - 2019 - FULL
    Open Source Intelligence Techniques - 7th Edition (2019)
    Embedded/IoT Linux for Red-Blue Teams
    Dark Side Ops: Malware Dev
    Dark Side Ops 2: Adversary Simulation code - I will support you if you have any question regarding codes Ex: how they work, improvements- be aware that it's only the code of course
    1 Day To Forensics Mastery 2.0
    Exploit Development Student - FULL
    Proof of some of them:

    Hidden Content

      Give reaction to this post to see the hidden content.


    I want the followings: If you have one of them, you can reach me at discord:

    Hidden Content

      Give reaction to this post to see the hidden content.

    Advanced Fuzzing and Crash Analysis
    Zero 2 Automated
    Adversary Simulation and Red Team Tactics by MDsec

    after I got one of the above course, I will upload mine (course/books) to your desired upload center

    • Like 186
    • Thanks 54
    • Haha 2
    • Confused 3
    • Sad 3
×
×
  • Create New...