Login

u/adocrox

r/PUBATTLEGROUNDS r/cybersecurity r/SecurityCareerAdvice r/jamia_hamdard r/cybersecurityindia r/AskNetsec r/Pentesting
▲ 9 r/cybersecurityindia

how to get Malware analysis contract work for delhi police, or similar organizations

Same as the title, I once met a guy who had just graduated and was working on a contract basis. The pay wasn't good, but I don't really care about it.

I was learning malware dev and some RE, so I, thought, why not give it some more time and learn RE and malware analysis properly, and try the contract work? But I'm pretty tight on time, so I want to know if it's realistic.

From what ig getting, that contract/work is mainly possible through connections, but is there still any other way?

reddit.com
u/adocrox — 7 days ago
▲ 2 r/cybersecurity

help - Grinded CRTP/AD labs on HTB, pivoted to C2 Ops & Malware Dev, and now cant solve even medium AD boxes anymore

So i gave CRTP exam on 1st january, then did portswigger labs and some Web App Sec modules on HTB academy in rest of the july, then a lot of portswigger academy in Feb, then around 35-40 AD & windows machines in march, after that i mostly did linux and web App sec labs in April-May, then CRTO in June and and some maldev academy in July... so it has been like 4-5 months since i last touched AD labs, but now im getting stuck on even medium HTB AD labs (I used to solve hard level machines easily).

I'm confused if I've lost AD skills, or what

reddit.com
u/adocrox — 13 days ago
▲ 10 r/cybersecurityindia

Maldev project - GhostlyIAT, A project about hiding and obfuscating IAT and stealthily calling functions from DLLs

When a Windows program calls an API like VirtualAllocEx, the compiler writes that function’s name and its parent DLL into the Import Address Table (IAT). Security tools inspect the IAT for suspicious combinations – for instance, seeing VirtualAllocEx, WriteProcessMemory, and CreateRemoteThread together is an immediate red flag.

A common trick is to load the function at runtime using GetProcAddress and GetModuleHandle, which keeps VirtualAllocEx out of the IAT. But this still leaves two problems:

  • The strings "VirtualAllocEx" and "kernel32.dll" are still present in the binary.
  • GetProcAddress and GetModuleHandle themselves appear in the IAT, and they’re well‑known indicators that a program is trying to hide something.

This project takes it a step further: it replaces both GetModuleHandle and GetProcAddress with fully custom implementations that walk the Process Environment Block (PEB) and parse export tables using DJB2 hashes.So even the plain‑text DLL or function names exist do not exist in the binary, which makes the binary even more evasive against static analysis, and the two “hiding” APIs are never imported in the IAT.

The result is a clean executable whose static IAT reveals nothing malicious – all API resolution happens silently, by hand, inside the process’s own memory.

project link - https://github.com/Adroxz1122/GhostlyIAT

u/adocrox — 1 month ago
▲ 7 r/cybersecurityindia

Day 2 of maldev - Execution phase

Learnt about three code injection techniques: APC Injection, Early Bird APC Injection, and Function Stomping.

  • APC Injection: Queues shellcode as an Asynchronous Procedure Call (APC) to a target thread, which executes when the thread enters an alertable wait state.
  • Early Bird APC Injection: Creates a process in a suspended state, queues an APC to its primary thread before it starts running, then resumes the thread so the payload executes very early.
  • Function Stomping: Overwrites the code of an existing function in a loaded module with shellcode and executes it by calling that function, avoiding allocation of new executable memory.

This is kind of a summary for each; check out my GitHub repo for more details (and how they work under the hood) - https://github.com/Adroxz1122/Injections-Part-1

u/adocrox — 1 month ago
▲ 16 r/cybersecurityindia

Just finished CRTO. Starting maldev now, here's my first Repo (Day 1/x)

Thread Hijacking - Thread hijacking is a technique where an attacker (or security tool) modifies the execution context of an existing thread to run arbitrary code. This can be used for process injection, evasion, or persistence. The four examples cover:

  • Local Thread Creation
  • Remote Thread Creation
  • Local Thread Enumeration
  • Remote Thread Enumeration

___

After learning enough topics, I'll also pair up different techniques to make full Malware PoCs, since these individual topics/techniques are just a small part of malware/Offensive Tool, pairing up different techniques involves-

  • Loading
  • Payload Storage
  • Payload Protection
  • Execution
  • API evasion (To bypass userland hooks, and syscall monitoring)
  • Process Lineage
  • Memory Scanning Evasion
  • Blinding System Telemetry
  • Anti-Analysis

We don't have to use every technique but yeah, whatever

u/adocrox — 1 month ago
▲ 2 r/jamia_hamdard

Projects I made this week, 2nd is still in-progress

Classic DLL Injection → Resource‑Encrypted Stealth Loader

project demonstrating remote thread DLL injection, payload obfuscation (RC4 + UUID encoding), and resource‑section embedding. The final loader carries an encrypted payload inside its own .rsrc section, decrypts it at runtime, and injects it into a target process

https://github.com/Adroxz1122/injected-host-enumeration

  • Things to add-
  1. Avoid writing the DLL to the disk, and directly load it into memory using Reflective Loader
  2. Change RC4 to AES
  3. Integrate C2 so the enumeration result will be transmitted to the team server using beacon, and not written to a file on the system

Thread Hijacking

demonstrating classic thread hijacking on Windows. A suspended thread is created with a dummy function, its execution context is redirected to position‑independent shellcode, and the thread is resumed to execute the payload.

https://github.com/Adroxz1122/Thread-Hijacking

THIS IS STILL WORK-IN-PROGRESS, AND WILL GET AT LEAST 3 MORE MODULES FOR HIJACKING, AND MAYBE SOME MODULES FOR ENCRYPTION AND STUFF

reddit.com
u/adocrox — 1 month ago
▲ 10 r/cybersecurityindia

made a simple maldev project

remote thread DLL injection, payload obfuscation (RC4 + UUID encoding), and resource‑section embedding. The final loader carries an encrypted payload inside its own .rsrc section, decrypts it at runtime, and injects it into a target process

Ik it's pretty basic😅, so I'll make the following changes to it

  • Avoid writing the DLL to the disk, and directly load it into memory using Reflective Loader or Prepended Loader, and change classic injection with Process Hollowing, or Early Bird
  • Change RC4 to AES
  • Integrate C2 so the enumeration result will be transmitted to the team server using beacon, and not written to a file on system

PROJECT LINK - github link

But I'm going to first practice some Reverse-Engineering on it lol.

would appreciate suggestions and stuff : )

u/adocrox — 2 months ago
▲ 20 r/cybersecurityindia

looking for a red-teaming grp/team

Thinking about making/joining a team focused on red-teaming, I've been learning by myself for a long time cos i thought group study would slow me down, but i think its the opposite lol

specifically - Windows & AD, OpSec, Maldev and OTD.

A little bit about me, I'm doing CRTO rn, with a bit of Windows Internals, OTD, and DSA (Cos im planning on doing a lot of Evasion, Maldev, OTD, ProLabs this year)... So I'm expecting someone with similar or higher skills lvl

reddit.com
u/adocrox — 2 months ago
▲ 19 r/cybersecurityindia

how do you guys balance learning with life? and imposter syndrome?

I try to study a lot, at least 6 hrs, tho i've gone up to 9, and as low as 4 (when I'm too busy with housework or sem exams, etc), for context, I've done CRTP, CPTS's course on HTB academy, ~85 machines on HTB, a lot of portswigger academy and a couple vulns on Hacker1 (I'm not really into web so i did bug bounty only for a month)... Now I'm doing CRTO with Windows internal crash course and OTD course... but every time I open LinkedIn, there's a guy doing 100s of challenges on HTB, solving pro labs and everything at once, so it makes me feel like I'm not doing enough.

What skills/achievements are in the top 10% candidates for roles like Red-teaming, VAPT, etc that differentiates them from others

I'm planning to complete Maldev Academy and learn some RE by the end of this year, and move on to Azure AD and HTB's AI red-teaming cert next year.

reddit.com
u/adocrox — 2 months ago
▲ 2 r/Pentesting

Is CPTS a deal-breaker?

So I've done CRTP, and I'm doing CRTO now, and even though I've done the CPTS course, I don't really wanna do the exam. I do HTB occasionally (I've done around ~70 machines this year), I was planning to do ODPC and/or AORTC along with MalDev Academy, as this stack might tell me I'm more interested in Windows, MalDev, OTD, and red-teaming... I also have 2 vulnerabilities on Hacker1...

I feel like I'd rather do Azure (cos I've done MCRTA from CWL so ik the basics of cloud pentesting) or AI red-teaming... Will not doing CPTS be a deal-breaker for a job-hunting as a fresher (India)

reddit.com
u/adocrox — 2 months ago
▲ 1 r/cybersecurityindia

made a simple TimeStomping tool, is it *LinkedIn* worthy?

so i made this Timestomping tool using C and Windows API, it changes the Time metadata of the malicious tool to blend with the on-system files for OPSEC (IK it's pretty basic nothing state-level stuff)... my main objective was to get better with Windows API, without using AI...

I expected it to be pretty difficult and lengthy, but it finished in like 30-45mins, and ~90 lines... so is this good enough to post on LinkedIn like "made a small project" stuff...

I've attached the link

github.com
u/adocrox — 2 months ago
▲ 7 r/cybersecurityindia

Would you still buy certs if they sell just courses(with labs) for 30%

If courses like CRTO, OSCP have an option that you can just buy the courses and labs (but no cert ) @ 70% of the price, would you still pay 100% and get the cert or just 70% and get the course+lab?

reddit.com
u/adocrox — 2 months ago
▲ 0 r/SecurityCareerAdvice

second-guessing my study plan cos of the amount of domains (and LinkedIn posts)

3rd year CSE student here (graduating in 2028), trying to get into red teaming. I've got time, I have a rough plan, but seeing what other people are doing and what different companies are asking got me second-guessing my plans (every time I,make one)

Here's where I'm at: I've done CRTP, ~75 machines on HTB (60% AD, 40% linux and web), finished most of the HTB Academy Penetration Tester path, studied basic web vulns (client-side and server-side PortSwigger), and found 2 bugs on HackerOne. Currently doing CRTO, and after that I planned to go: Windows Internals → Maldev Academy → ODPC by WhiteKnightLabs → Azure AD — with a bit of reverse engineering on the side. Also want to squeeze in AI red teaming from HTB Academy since that space is blowing up, and I have enough time.

Then I see someone on LinkedIn with 10 CVEs and Bug-Bounties, someone else says web pentesting is a dealbreaker for any beginner offensive sec role and if you can't do web, you won't get hired. I do know web pentesting, but not as good as a pro-BBhunter...

Everyone is saying something different, and it's hard to know who to listen to.

The thing is, the web is not really my thing. I do it because everyone says you have to. I find AD, Windows internals, evasion, and maldev more interesting. I'd rather spend my time building a custom loader or understanding how EDR hooks work than chasing SSRF bugs in web apps. But then I feel like I'm leaving a gap that'll cost me in interviews.

I guess my actual questions are:

  • For red team roles specifically, how much does web depth actually matter vs. AD/maldev/evasion depth?
  • Is CVE hunting on open source projects worth pursuing alongside a red team path, or is it a distraction?
reddit.com
u/adocrox — 3 months ago
▲ 1 r/AskNetsec

second-guessing my study plan cos of the amount of domains (and LinkedIn posts)

3rd year CSE student here (graduating in 2028), trying to get into red teaming. I've got time, I have a rough plan, but seeing what other people are doing and what different companies are asking got me second-guessing my plans (every time I,make one)

Here's where I'm at: I've done CRTP, ~75 machines on HTB (60% AD, 40% linux and web), finished most of the HTB Academy Penetration Tester path, studied basic web vulns (client-side and server-side PortSwigger), and found 2 bugs on HackerOne. Currently doing CRTO, and after that I planned to go: Windows Internals → Maldev Academy → ODPC by WhiteKnightLabs → Azure AD — with a bit of reverse engineering on the side. Also want to squeeze in AI red teaming from HTB Academy since that space is blowing up, and I have enough time.

Then I see someone on LinkedIn with 10 CVEs and Bug-Bounties, someone else says web pentesting is a dealbreaker for any beginner offensive sec role and if you can't do web, you won't get hired. I do know web pentesting, but not as good as a pro-BBhunter...

Everyone is saying something different, and it's hard to know who to listen to.

The thing is, the web is not really my thing. I do it because everyone says you have to. I find AD, Windows internals, evasion, and maldev more interesting. I'd rather spend my time building a custom loader or understanding how EDR hooks work than chasing SSRF bugs in web apps. But then I feel like I'm leaving a gap that'll cost me in interviews.

I guess my actual questions are:

  • For red team roles specifically, how much does web depth actually matter vs. AD/maldev/evasion depth?
  • Is CVE hunting on open source projects worth pursuing alongside a red team path, or is it a distraction?
reddit.com
u/adocrox — 3 months ago
▲ 22 r/cybersecurityindia

Me after fumbling my first internship interview

I didn't even know what they'll ask, so i prepared questions about my projects (ransomware poc in C using win API and CNG, ssh honeypot in python, priv escalation enumeration tool in PS), spent 3 days learning about pointers and memory management, cloud IAM, and was confident about AD from my HTB & CRTP experience... they asked about ssrf, and very conceptual questions about AD pentesting... (It was a security intern/red teaming intern)

Any tips/suggestions on how i should prep for future interviews?

P.S: mera dukh baatne ki jagah, log mjhse "kahan se apply kia" puch rhe hain

u/adocrox — 3 months ago