@wetw0rk7.bsky.social
Released my write for gaining a fundamental understanding of the Windows _SECURITY_DESCRIPTOR structure. I then created a custom Windows Kernel shellcode stub to perform process injection for privilege escalation which is also implemented in Sickle :P
wetw0rk.github.io/posts/unders...
Trick or Treat!! Would you still love my malware if it was a worm 🥺❤️?
Sickle V4 has added a handler module for easy payload distribution and yes, you can do it over HTTPS!
Download it here: github.com/wetw0rk/Sick...
Anyone hungry for a🍪? Today we learn about Stack Cookies! Also known as Canaries!
This will be the last tutorial within the Windows Kernel Exploitation series.
As of today all 10 tutorials are available for English speakers!
wetw0rk.github.io/posts/0x09-r...
Are you ready for an introduction to Windows Kernel Race Conditions?
You can find the tutorial below :)
wetw0rk.github.io/posts/0x07-i...
Type Confusions pueden ser... difícil, especialmente cuando se trata de una versión más moderna de Windows. Hoy explotamos uno contra Windows 11 (x64). Un saludo a
@w4fz5uck5 y @xct_de! Por ayudarme a superar esto!
Puedes encontrar el tutorial aquí:
wetw0rk.github.io/posts/0x06-a...
Type Confusions can be… confusing, especially when targeting a more modern version of Windows. Today we exploit one against Windows 11 (x64). Shoutout to @w4fz5uck5 and @xct_de for helping me get through this one!
You can find the tutorial here:
wetw0rk.github.io/posts/0x06-a...
Mmm… Hrmmmmm… Mmm… mmm… Mm! Oh-hoh! Perdóname. Estaba absorto en mis pensamientos. Esta semana veremos una introducción a Type Confusions dentro del kernel de Windows! Más específicamente Windows 7 (x86).
Puedes encontrar el tutorial aquí!
wetw0rk.github.io/posts/0x05-i...
Mmm… Hrmmmmm… Mmm… mmm… Mm! Oh-hoh! Forgive me. I was absorbed in thought. This week, we’ll get an Introduction to Type Confusions within the Windows Kernel! More specifically Windows 7 (x86).
You can find the link to the tutorial down below!
wetw0rk.github.io/posts/0x05-i...
Se me ocurrió algo más gracioso que 24… 25. Qué mejor manera de comenzar 2025 que con una introducción a una vulnerabilidad Write-What-Where dentro del kernel de Windows 7 (x86) y Windows 11 (x64)!
Puedes encontrar el tutorial aquí:
wetw0rk.github.io/posts/0x04-e...
I thought of something funnier than 24… 25. What better way to start 2025 than with an introduction to a Write-What-Where vulnerability within the Windows 7 (x86) and Windows 11 (x64) Kernel!
You can find the tutorial here:
wetw0rk.github.io/posts/0x04-w...
La semana pasada aprovechamos una vulnerabilidad de heap en el Windows 7 (x86) Kernel. Esta semana, un sistema más moderno - Windows 11 (x64)!
El tutorial se puede encontrar aquí:
wetw0rk.github.io/posts/0x03-a...
Last week, we successfully exploited a Windows Kernel vulnerability in the heap on a Windows 7 (x86) system. This week, we're targeting a more modern OS - Windows 11 (x64)!
Check out the tutorial here:
wetw0rk.github.io/posts/0x03-a...
Sickle v3.1.0 is out!! Shellcode generation is now supported and I've added 9 new payloads including a reflective loader for Linux on both AARCH64 and x64! Along with a new module asm_shell which supports x86, x64, and AARCH64!
Check it out here:
github.com/wetw0rk/Sickle
En la serie de Windows Kernel Exploitation hemos aprovechado la vulnerabilidad de “Stack Overflow” contra Windows 7 (x86) y Windows 11 (x64). Esta semana volveremos a Windows 7 (x86) y vamos a exploit un Use-After-Free dentro del Windows Kernel!
wetw0rk.github.io/posts/0x02-i...
So far in the Windows Kernel Exploitation series we have successfully exploited a Stack Overflow against both Windows 7 (x86) and Windows 11 (x64). This week you'll be getting an introduction on how to exploit a Use-After-Free within the Windows Kernel!
wetw0rk.github.io/posts/0x02-i...
Demo can be seen below :)
14.12.2024 04:06 — 👍 0 🔁 0 💬 0 📌 0
It’s that time of the year, when you put your elf on a shelf and your ELFs in memory. Sickle now supports payload generation for reflective ELF loading!
Currently AARCH64 (ARM64) and x86-64 supported.
May your ELF payloads never touch disk!
github.com/wetw0rk/Sickle
Se me olvidó el gif 😭
08.12.2024 22:19 — 👍 0 🔁 0 💬 0 📌 0Es hora de aprender a evitar las mitigaciones modernas de Windows! Como parte de este próximo tutorial, estoy revelando Violet Phosphorous, una técnica para evadir SMEP/VBS!
Puedes encontrar el primer tutorial aqí:
wetw0rk.github.io/posts/0x01-m...
It's time to learn how to bypass the latest mitigations deployed on Windows. As part of this next tutorial, I am dropping Violet Phosphorous, a SMEP/VBS bypass tested against the latest Windows 11 (x64) build as of today!
You can find the post here:
wetw0rk.github.io/posts/0x01-k...
