Richard Minder - Minder-Security

Minder-Security

Sign in Subscribe

Richard Minder

Malware Analysis: PhantomStealer

One calm evening, I was browsing MalwareBazaar and saw a bunch of submissions belonging to the malware family "PhantomStealer": EXE, ZIP, JS, BAT, PS1, XLSX, HTA... Seems interesting... ELG_RFQ_3751897.js SHA256: 6c0f5796eef37c032ba6b5712d056f9e9191f9d950b3debbdcee9728c5fd0860 I chose the newest JS Submission, as I was hoping for an interesting chain

Weaponizing Havoc: Stealthy DLL Execution with regsvr32 via WebDav

Weaponizing Havoc: Stealthy DLL Execution with regsvr32 via WebDav

Fileless execution now possible for LNK files!

Red Teaming with Sliver C2

Red Teaming with Sliver C2

During Red Teaming operations, machines will be compromised and controlled remotely to allow the operator to follow down the kill chain. The infrastructure and tooling is partially different than during penetration tests. We need to have a tool which allows us to: * Centralize and organize the entire operation * Enable multiple

Automate Malware Analysis with AI

Automate Malware Analysis with AI

This blog post was inspired by @lauriewired's amazing research and provided tool GhidraMCP (YouTube: https://www.youtube.com/watch?v=u2vQapLAW88) Analyzing Malware is a difficult task, which requires skill and a deep understanding of operating systems, executable file formats, process structures & technologies, and low-level programming languages

Crashing Windows Drivers for Educational Purposes

windows-internals

Crashing Windows Drivers for Educational Purposes

In this Blog article, I would like to introduce you into the world of Windows Drivers. Instead of writing our own, we will work with HEVD (HackSysExtremeVulnerableDriver) in order to learn more about the world of Windows Sysinternals, Windows Drivers, and Windows Kernel Debugging. What we will do We will

Building a Purple Teaming Test Environment with Ludus

Building a Purple Teaming Test Environment with Ludus

Introduction In my previous post, I demonstrated how to install Ludus on Debian 12. Automate your Cyber Security Lab with LudusLudus is a free and open source project saving you all the hours you usually needed to setup your lab!Minder-SecurityRichard Minder In this blog post, I want to go

Automate your Cyber Security Lab with Ludus

Automate your Cyber Security Lab with Ludus

As much as I love setting up and installing various VMs, I would also not be upset if I had a dedicated engineer at home doing these tasks for me. Since this exceeds my Homelab budget, I invested countless hours setting up various VMs I used for a couple of

Use Pwntools to level up your Toolset

Use Pwntools to level up your Toolset

While the standard hacking toolset can get you far, there will be some challenges that require you to be able to craft your own. I have used pwntools numerous times throughout my learning path, and now I want to show you why you should add this powerful tool to your

Build your own free SOC Lab with Splunk

Build your own free SOC Lab with Splunk

The term Splunk is associated with software solutions widely used in the fields of data analysis. In this tutorial, I will use what I learned during my time as a SOC Analyst to showcase how you can build your own SOC at home for free. Lab Setup Tutorial Our simplified