DuMp-GuY TrIcKsTeR

5.29K subscribers

42 videos

View on YouTube

Some of my publicly available Malware analysis and Reverse engineering. (Reports, Tips, Tricks...) Sharing is caring ❤

Latest Videos

ConfuserEx2 - Full Deobfuscation Guide

ConfuserEx2 - Full Deobfuscation Guide

DuMp-GuY TrIcKsTeR

22.8K views·2 years ago

IDA Memory Snapshot - Amadey Malware Unpacking & Initterm Poisoning

IDA Memory Snapshot - Amadey Malware Unpacking & Initterm Poisoning

DuMp-GuY TrIcKsTeR

4.9K views·3 years ago

Reverse Engineering Mixed Mode Assemblies (IDA, DnSpyEx)

Reverse Engineering Mixed Mode Assemblies (IDA, DnSpyEx)

DuMp-GuY TrIcKsTeR

6.6K views·3 years ago

Deobfuscation of .NET using PowerShelling & dnlib - Eternity Malware

Deobfuscation of .NET using PowerShelling & dnlib - Eternity Malware

DuMp-GuY TrIcKsTeR

9.6K views·3 years ago

Advanced DnSpy tricks in .NET reversing 2 - PS debugging, Watch vs Locals, Code Optimization, more..

Advanced DnSpy tricks in .NET reversing 2 - PS debugging, Watch vs Locals, Code Optimization, more..

DuMp-GuY TrIcKsTeR

15.3K views·3 years ago

Invoke-AttachDnSpy work-in-progress (register dnSpy debugger to attach on process creation)

Invoke-AttachDnSpy work-in-progress (register dnSpy debugger to attach on process creation)

DuMp-GuY TrIcKsTeR

3.0K views·3 years ago

In-Memory ZipArchive object creation from HTTP Stream

In-Memory ZipArchive object creation from HTTP Stream

DuMp-GuY TrIcKsTeR

966 views·3 years ago

From Zero to Hero - Advanced Usage of Tiny_Tracer tracing APT29

From Zero to Hero - Advanced Usage of Tiny_Tracer tracing APT29

DuMp-GuY TrIcKsTeR

5.0K views·3 years ago

Get-UnJlaive - Jlaive Protector Reconstructor

Get-UnJlaive - Jlaive Protector Reconstructor

DuMp-GuY TrIcKsTeR

1.3K views·3 years ago

Analyzing HTML Application HTA Loading .NET Runtime

Analyzing HTML Application HTA Loading .NET Runtime

DuMp-GuY TrIcKsTeR

1.9K views·3 years ago

VoiceC2 POC - Using Speech Recognition

VoiceC2 POC - Using Speech Recognition

DuMp-GuY TrIcKsTeR

747 views·4 years ago

NET Reversing Get-PDInvokeImports - Dealing with PInvoke, DInvoke and Dynamic PInvoke

NET Reversing Get-PDInvokeImports - Dealing with PInvoke, DInvoke and Dynamic PInvoke

DuMp-GuY TrIcKsTeR

1.8K views·4 years ago

IDAPro Reversing Delphi MBR Wiper and Infected Bootstrap Code

IDAPro Reversing Delphi MBR Wiper and Infected Bootstrap Code

DuMp-GuY TrIcKsTeR

6.8K views·4 years ago

Decryption of Midas Ransomware - based on thanos ransomware builder

Decryption of Midas Ransomware - based on thanos ransomware builder

DuMp-GuY TrIcKsTeR

1.8K views·4 years ago

Deobfuscation SmartAssembly 8+ and recreating Original Module SAE+DnSpy

Deobfuscation SmartAssembly 8+ and recreating Original Module SAE+DnSpy

DuMp-GuY TrIcKsTeR

21.9K views·4 years ago

Full malware analysis Work-Flow of AgentTesla Malware

Full malware analysis Work-Flow of AgentTesla Malware

DuMp-GuY TrIcKsTeR

7.8K views·4 years ago

So you Really think you Know What Powershell Is

So you Really think you Know What Powershell Is

DuMp-GuY TrIcKsTeR

1.9K views·4 years ago

Powershell and DnSpy tricks in .NET reversing – AgentTesla [Part1]

Powershell and DnSpy tricks in .NET reversing – AgentTesla [Part1]

DuMp-GuY TrIcKsTeR

6.9K views·4 years ago

Powershell and DnSpy tricks in .NET reversing – AgentTesla [Part2]

Powershell and DnSpy tricks in .NET reversing – AgentTesla [Part2]

DuMp-GuY TrIcKsTeR

2.6K views·4 years ago

Introduction to Invoke-DetectItEasy PowerShell Module

Introduction to Invoke-DetectItEasy PowerShell Module

DuMp-GuY TrIcKsTeR

1.1K views·4 years ago

Reversing CryptoCrazy Ransomware - PoC Decryptor and some Tricks

Reversing CryptoCrazy Ransomware - PoC Decryptor and some Tricks

DuMp-GuY TrIcKsTeR

1.2K views·4 years ago

[2] Lokibot analyzing - spoofing GULoader and LokiBot C2 [part2] - INetSim + BurpSuite

[2] Lokibot analyzing - spoofing GULoader and LokiBot C2 [part2] - INetSim + BurpSuite

DuMp-GuY TrIcKsTeR

1.2K views·4 years ago

Finding Vulnerability in PE parsing tool - NEVER trust tool you didn´t write by your own

Finding Vulnerability in PE parsing tool - NEVER trust tool you didn´t write by your own

DuMp-GuY TrIcKsTeR

1.4K views·4 years ago

HiveNightmare - Bug in ACLs of Registry Hives [CVE-2021-36934]

HiveNightmare - Bug in ACLs of Registry Hives [CVE-2021-36934]

DuMp-GuY TrIcKsTeR

1.3K views·4 years ago

Dancing with COM - Deep dive into understanding Component Object Model

Dancing with COM - Deep dive into understanding Component Object Model

DuMp-GuY TrIcKsTeR

35.9K views·4 years ago

Fast API resolving of REvil Ransomware related to Kaseya attack

Fast API resolving of REvil Ransomware related to Kaseya attack

DuMp-GuY TrIcKsTeR

1.3K views·4 years ago

[2] Lokibot analyzing - spoofing GULoader and LokiBot C2 [part1] - Own implementation in Python

[2] Lokibot analyzing - spoofing GULoader and LokiBot C2 [part1] - Own implementation in Python

DuMp-GuY TrIcKsTeR

1.1K views·4 years ago

[1] Lokibot analyzing - defeating GuLoader with Windbg (Kernel debugging) and Live C2

[1] Lokibot analyzing - defeating GuLoader with Windbg (Kernel debugging) and Live C2

DuMp-GuY TrIcKsTeR

3.0K views·4 years ago

Advanced Memory Forensics (Windows) - Threat_Hunting and Initial Malware_Analysis [part1]

Advanced Memory Forensics (Windows) - Threat_Hunting and Initial Malware_Analysis [part1]

DuMp-GuY TrIcKsTeR

4.9K views·4 years ago

Volatility3 Output Formatting Trick in PS

Volatility3 Output Formatting Trick in PS

DuMp-GuY TrIcKsTeR

1.6K views·4 years ago

Load More Videos

DuMp-GuY TrIcKsTeR - NatokHD | NatokHD