正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

🚨 I'm looking for a Job🚨 A user-mode code and its rootkit that will Kill EDR Processes permanently by leveraging the power of Process Creation Blocking Kernel Callback Routine registering and ZwTerminateProcess. Project : =========== Looking for roles in User/Kernel mode Malware Dev, Evasion, Reverse Eng, Kernel Exploit Weaponization,... show more

Saad AHLA

8,397 subscribers

17,113 次观看 • 1 年前 •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

7 条评论

Fawaz - بوجابر 的头像

Fawaz - بوجابر1 年前

I was just mentioning your work to a couple of Moroccan friends a few hours ago Great work

Saad AHLA 的头像

Saad AHLA1 年前

Thanks, I appreciate it, Fawaz 😁

jian liu 的头像

jian liu1 年前

Please PM me, I have a lot of work to do.

jian liu 的头像

jian liu1 年前

Hi bro

nemo 的头像

nemo1 年前

kool and you will find your job boss

Moppel Mat 的头像

Moppel Mat1 年前

No CrowdStrike kill?

Janus Pannonius 的头像

Janus Pannonius1 年前

How you signed the driver?

相关视频

Kernel Mode vs User Mode explained by a retired Windows developer!

Kernel Mode vs User Mode explained by a retired Windows developer!

Dave W Plummer

126,524 次观看 • 1 年前

🚨 THREAT INTELLIGENCE ALERT 🚨 The tool 🇨🇳 KernelGhost820 is being actively sold on the underground market for US$ 2,500, complete with full source code. This is a professional-grade suite with an intuitive graphical interface and six advanced modules, specifically designed for EDR evasion and sophisticated ransomware operations with efficient lateral movement: • EDR Removal Engine: Automatically detects and terminates more than 40 security products (including CrowdStrike, SentinelOne, Microsoft Defender, Kaspersky, and others). Supports Kernel, UserMode, and NTDLL termination modes, kernel driver loading for protected processes, disabling Windows Defender, and blocking telemetry connections. • Ransomware Module: Dual encryption using AES256CBC + RSA2048, supporting over 70 file types (documents, images, databases, backups, etc.). Automatically deletes Volume Shadow Copies to prevent recovery, generates custom ransom notes with Bitcoin addresses and contact emails, and changes the desktop wallpaper. • Remote Operations & Mass Deployment: Connects to remote devices on the local network via WMI (requires username and password). Scans installed software on target hosts, performs process termination, and enables one-click full tool deployment. Includes full-network scanning for open SMB port 445 with real-time progress tracking. • Detailed Process Manager and full Operation Logger (exportable to TXT). This tool significantly lowers the technical barrier for advanced ransomware actors targeting corporate environments. Immediate monitoring recommendations: • Evaluate the resilience of your EDR/XDR controls against kernel-mode bypass techniques • Intensify monitoring of anomalous SMB (port 445) traffic and WMI connections • Strengthen network segmentation and the principle of least privilege Our team is actively tracking this tool and any emerging variants. #ThreatIntelligence #Ransomware #EDRBypass #CyberSecurity #InfoSec #CyberThreat

🚨 THREAT INTELLIGENCE ALERT 🚨 The tool 🇨🇳 KernelGhost820 is being actively sold on the underground market for US$ 2,500, complete with full source code. This is a professional-grade suite with an intuitive graphical interface and six advanced modules, specifically designed for EDR evasion and sophisticated ransomware operations with efficient lateral movement: • EDR Removal Engine: Automatically detects and terminates more than 40 security products (including CrowdStrike, SentinelOne, Microsoft Defender, Kaspersky, and others). Supports Kernel, UserMode, and NTDLL termination modes, kernel driver loading for protected processes, disabling Windows Defender, and blocking telemetry connections. • Ransomware Module: Dual encryption using AES256CBC + RSA2048, supporting over 70 file types (documents, images, databases, backups, etc.). Automatically deletes Volume Shadow Copies to prevent recovery, generates custom ransom notes with Bitcoin addresses and contact emails, and changes the desktop wallpaper. • Remote Operations & Mass Deployment: Connects to remote devices on the local network via WMI (requires username and password). Scans installed software on target hosts, performs process termination, and enables one-click full tool deployment. Includes full-network scanning for open SMB port 445 with real-time progress tracking. • Detailed Process Manager and full Operation Logger (exportable to TXT). This tool significantly lowers the technical barrier for advanced ransomware actors targeting corporate environments. Immediate monitoring recommendations: • Evaluate the resilience of your EDR/XDR controls against kernel-mode bypass techniques • Intensify monitoring of anomalous SMB (port 445) traffic and WMI connections • Strengthen network segmentation and the principle of least privilege Our team is actively tracking this tool and any emerging variants. #ThreatIntelligence #Ransomware #EDRBypass #CyberSecurity #InfoSec #CyberThreat

Clandestine

40,619 次观看 • 2 个月前

It's the bug of the month for June 2026! CVE-2026-45657 - A CVSS 9.8 vulnerability in Kernel that allows remote, unauthenticated code execution at SYSTEM without user interaction. Yikes!

It's the bug of the month for June 2026! CVE-2026-45657 - A CVSS 9.8 vulnerability in Kernel that allows remote, unauthenticated code execution at SYSTEM without user interaction. Yikes!

TrendAI Zero Day Initiative

31,835 次观看 • 14 天前

🚨 New advisory was just published! 🚨 An out-of-bounds write vulnerability in the Linux kernel achieves local privilege escalation on Ubuntu 22.04 for active user sessions:

🚨 New advisory was just published! 🚨 An out-of-bounds write vulnerability in the Linux kernel achieves local privilege escalation on Ubuntu 22.04 for active user sessions:

SSD Secure Disclosure

174,881 次观看 • 1 年前

🎥 QEMU Dev Starter guide, Part 1 The QEMU codebase can be quite daunting for new developers, Anton with this talk aims to give an overview of both the major APIs one might encounter as well as the high control flow of user-mode emulation.

🎥 QEMU Dev Starter guide, Part 1 The QEMU codebase can be quite daunting for new developers, Anton with this talk aims to give an overview of both the major APIs one might encounter as well as the high control flow of user-mode emulation.

rev.ng

21,851 次观看 • 3 个月前

At Black Hat tomorrow!! "Close Encounters of the Advanced Persistent Kind: Leveraging Rootkits for Post-Exploitation" by b33f | 🇺🇦✊ and I. Come if you want to learn cool kernel techniques and evade those pesky mitigations. Sneak peak demo: leveraging 0-day to load our rootkit 😎

At Black Hat tomorrow!! "Close Encounters of the Advanced Persistent Kind: Leveraging Rootkits for Post-Exploitation" by b33f | 🇺🇦✊ and I. Come if you want to learn cool kernel techniques and evade those pesky mitigations. Sneak peak demo: leveraging 0-day to load our rootkit 😎

chompie

101,403 次观看 • 2 年前

WIRED DEV UPDATE There's a lot of developments going on for the Wired Project. I'll highlight some in this thread! Firstly (and finally), WIRED Trigger: User Clicks User

WIRED DEV UPDATE There's a lot of developments going on for the Wired Project. I'll highlight some in this thread! Firstly (and finally), WIRED Trigger: User Clicks User

Jonas

31,948 次观看 • 1 年前

Join the Tooling, Process and Training Team to help develop the equipment that will help build a world of amazing abundance – Design advanced tooling – Streamline service processes – Deliver new training approaches to maximize fleet health Roles based in Hayward, California

Join the Tooling, Process and Training Team to help develop the equipment that will help build a world of amazing abundance – Design advanced tooling – Streamline service processes – Deliver new training approaches to maximize fleet health Roles based in Hayward, California

Tesla Recruiting

59,509 次观看 • 3 个月前

#Config2023 Launch 1: Dev Mode A new space in Figma for developers with features that help translate design into code, faster. Read more: Here are all the ways you can use Dev Mode 👇

#Config2023 Launch 1: Dev Mode A new space in Figma for developers with features that help translate design into code, faster. Read more: Here are all the ways you can use Dev Mode 👇

Figma

617,326 次观看 • 3 年前

Example of the speed of the new PSFree WebKit exploit chained with 9.00 kernel exploit.

Example of the speed of the new PSFree WebKit exploit chained with 9.00 kernel exploit.

MODDED WARFARE

38,650 次观看 • 2 年前

PS4 8.00 No USB Jailbreak Lapse Kernel Exploit!

PS4 8.00 No USB Jailbreak Lapse Kernel Exploit!

Andrew2007

13,981 次观看 • 1 年前

A cheat code that can be unlocked in CS2 Premier mode has just been detected. It is not recommended to play Premier mode for a while. Each user can open a cheat with 1 code.

A cheat code that can be unlocked in CS2 Premier mode has just been detected. It is not recommended to play Premier mode for a while. Each user can open a cheat with 1 code.

CS2 NEWS

905,778 次观看 • 2 年前

Geometry of Machine Learning Models - Gaussian Process Kernel In 1948 Norbert Wiener framed prediction as a correlation problem, and in the 1970s George Wahba clarified that picking a smoothness preference is the same as picking a kernel. The motivation is that whenever data i s sparse and noisy, you don't just want a fit, you want a fit with calibrated uncertainty.

Geometry of Machine Learning Models - Gaussian Process Kernel In 1948 Norbert Wiener framed prediction as a correlation problem, and in the 1970s George Wahba clarified that picking a smoothness preference is the same as picking a kernel. The motivation is that whenever data i s sparse and noisy, you don't just want a fit, you want a fit with calibrated uncertainty.

Mathelirium

15,625 次观看 • 3 个月前

Did you know that you can use GitHub Copilot in notebooks? Accept and run generated code with just a click. You can even attach variables from the Jupyter kernel in your requests ✨

Did you know that you can use GitHub Copilot in notebooks? Accept and run generated code with just a click. You can even attach variables from the Jupyter kernel in your requests ✨

Visual Studio Code

44,371 次观看 • 1 年前

An anonymous user preserved a whopping 23 Konami i-mode games, including the the keitai-exclusive Gradius NEO and its sequel Gradius NEO Imperial. The full list of games is in the replies. The DoJa 5.1 SDK does not run these games very well, in addition to poor sound emulation.

An anonymous user preserved a whopping 23 Konami i-mode games, including the the keitai-exclusive Gradius NEO and its sequel Gradius NEO Imperial. The full list of games is in the replies. The DoJa 5.1 SDK does not run these games very well, in addition to poor sound emulation.

RockmanCosmo

21,285 次观看 • 1 年前

Writing a CUDA kernel requires a shift in mental model. Instead of one fast processor, you manage thousands of tiny threads. Here is the code and the logic explained for Matrix Multiplication.

Writing a CUDA kernel requires a shift in mental model. Instead of one fast processor, you manage thousands of tiny threads. Here is the code and the logic explained for Matrix Multiplication.

Ashutosh Maheshwari

189,009 次观看 • 6 个月前

❗️Chronomaly: Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable Linux kernels v5.10.x. GitHub:

❗️Chronomaly: Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable Linux kernels v5.10.x. GitHub:

Dark Web Informer

12,635 次观看 • 5 个月前

Coming next week: New features in Dev Mode to bring design + dev closer. Annotations (!!), improvements to diffing, plugins, and the VS Code extension. What's shipping January 31 as Dev Mode moves out of free beta →

Coming next week: New features in Dev Mode to bring design + dev closer. Annotations (!!), improvements to diffing, plugins, and the VS Code extension. What's shipping January 31 as Dev Mode moves out of free beta →

Figma

789,323 次观看 • 2 年前

On a previous #TeawithGaryVee I was asked "I'm looking for a job and I constantly interview. I'm working a seasonal job I hate too. How can I kill the interview and get that job?" If you have a question for me, drop it here so my team can add it to the next Rapid Fire Q&A and follow me on

On a previous #TeawithGaryVee I was asked "I'm looking for a job and I constantly interview. I'm working a seasonal job I hate too. How can I kill the interview and get that job?" If you have a question for me, drop it here so my team can add it to the next Rapid Fire Q&A and follow me on

Gary Vaynerchuk

18,075 次观看 • 3 个月前

Sanctions Hit Linux Kernel, Russian Programmers Banned Biden's Executive Order 14071, forbids Russians from working with or using GPL'd software made in the USA. And that includes the Linux Kernel.

Sanctions Hit Linux Kernel, Russian Programmers Banned Biden's Executive Order 14071, forbids Russians from working with or using GPL'd software made in the USA. And that includes the Linux Kernel.

The Lunduke Journal

19,412 次观看 • 1 年前