https://bsky.app/profile/darbonzo.bsky.social/post/3lngscfauck2t
Published: April 22, 2025 23:08
We've seen adversaries stomp VBA scripts... but how about *Javascript stomping?* π₯Ύ
Read on for a dive into Node.js single executable applications (SEAs), and how their v8 caching features might catch malware analysts and blue teamers off guard!
β¦
https://bsky.app/profile/darbonzo.bsky.social/post/3ln4mzxd3vu2s
Published: April 18, 2025 22:07
I've been using GoReSym a lot recently for unstripping Golang malware samples, can't stress enough how awesome that tool is as a timesaver! One gotcha though, there's no way to easily import function symbols into x64dbg sessions πͺ²
Wrote a quick script toβ¦