s4ya suk4 0rak ar1k anuxraw

Assembly Language / Reversing / Malware Analysis / Game Hacking -resources

⭐Assembly Language

Modern x64 Assembly

https://www.youtube.com/playlist?list=PLKK11Ligqitg9MOX3-0tFT1Rmh3uJp7kA

WARNING

May contain out of date information. Check the comments below!

The list of actions listed below was taken mostly from Book Of Zeus with minor modifications and did the job well for Ubuntu version, which was available at that moment (May 2016). This gist was created for internal use and was never meant to be discovered by the web, although Google managed to find and index this page, which was a great surprise for me. Please check the original source for the updated information (links are provided in most of the sections), and read the comments below: they provide more details about the usage experience.

System Updates

http://bookofzeus.com/harden-ubuntu/initial-setup/system-updates/

Keeping the system updated is vital before starting anything on your system. This will prevent people to use known vulnerabilities to enter in your system.

	<?xml version="1.0" encoding="UTF-8" ?>
	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
	<html expr:dir='data:blog.languageDirection' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>
	<head>
	<meta content='width=device-width, initial-scale=1, maximum-scale=1' name='viewport'/>
	<title>
	<b:if cond='data:blog.pageType == "index"'>
	<data:blog.pageTitle/>
	<b:else/>
	<b:if cond='data:blog.pageType != "error_page"'>

	/*
	*********************************************************************

	Part of UEFI DXE driver code that injects Hyper-V VM exit handler
	backdoor into the Device Guard enabled Windows 10 Enterprise.

	Execution starts from new_ExitBootServices() -- a hook handler
	for EFI_BOOT_SERVICES.ExitBootServices() which being called by
	winload!OslFwpKernelSetupPhase1(). After DXE phase exit winload.efi
	transfers exeution to previously loaded Hyper-V kernel (hvix64.sys)

	#AND

	<b:if cond='data:blog.pageType == "index"'>
	<b:if cond='data:blog.searchQuery'>
	<!--search_page AND index_page-->
	</b:if>
	</b:if>


	#OR

	/*
	*********************************************************************

	Part of UEFI DXE driver code that injects Hyper-V VM exit handler
	backdoor into the Device Guard enabled Windows 10 Enterprise.

	Execution starts from new_ExitBootServices() -- a hook handler
	for EFI_BOOT_SERVICES.ExitBootServices() which being called by
	winload!OslFwpKernelSetupPhase1(). After DXE phase exit winload.efi
	transfers exeution to previously loaded Hyper-V kernel (hvix64.sys)

	typedef interface ICMLuaUtil ICMLuaUtil;

	typedef struct ICMLuaUtilVtbl {

	BEGIN_INTERFACE

	HRESULT(STDMETHODCALLTYPE *QueryInterface)(
	__RPC__in ICMLuaUtil * This,
	__RPC__in REFIID riid,
	_COM_Outptr_ void **ppvObject);

	{
	"vars": {
	"@gray-base": "#000",
	"@gray-darker": "lighten(@gray-base, 13.5%)",
	"@gray-dark": "lighten(@gray-base, 20%)",
	"@gray": "lighten(@gray-base, 33.5%)",
	"@gray-light": "lighten(@gray-base, 46.7%)",
	"@gray-lighter": "lighten(@gray-base, 93.5%)",
	"@brand-primary": "darken(#428bca, 6.5%)",
	"@brand-success": "#5cb85c",

	#!/usr/bin/env python3

	import sys
	import re
	import shutil
	import argparse
	import binascii

	#
	# Author: Daxda