From 0f2957242dd490b7c22ee9d7aa3107edf5c0191b Mon Sep 17 00:00:00 2001 From: i2p Date: Thu, 27 Aug 2026 18:43:40 +0000 Subject: [PATCH] initial commit --- .DS_Store | Bin 6148 -> 6148 bytes ._. | Bin 0 -> 278 bytes ._.DS_Store | Bin 0 -> 120 bytes ._01-attack-surface.md | Bin 0 -> 178 bytes ._02-exploitable-vulns-and-attack-methods.md | Bin 0 -> 178 bytes ._03-supply-chain-social-engineering.md | Bin 0 -> 178 bytes ...are-distribution-threat-intel-2025-2026.md | Bin 0 -> 178 bytes ...wallet-security-architecture-comparison.md | Bin 0 -> 178 bytes ._gaming-malware-threat-intel-report.md | Bin 0 -> 178 bytes ._ghidra-projects | Bin 0 -> 178 bytes ._infostealer-defense-guide-2025-2026.md | Bin 0 -> 178 bytes ._infostealer-threat-intel-2025-2026.md | Bin 0 -> 178 bytes ._tools | Bin 0 -> 178 bytes ghidra-projects/._my_project-pyghidra-mcp | Bin 0 -> 178 bytes ghidra-projects/._my_project.gpr | Bin 0 -> 178 bytes ghidra-projects/._my_project.lock | Bin 0 -> 178 bytes ghidra-projects/._my_project.lock~ | Bin 0 -> 178 bytes ghidra-projects/._my_project.rep | Bin 0 -> 178 bytes .../my_project-pyghidra-mcp/._chromadb | Bin 0 -> 178 bytes .../chromadb/._chroma.sqlite3 | Bin 0 -> 178 bytes ghidra-projects/my_project.rep/._idata | Bin 0 -> 178 bytes ghidra-projects/my_project.rep/._project.prp | Bin 0 -> 178 bytes ghidra-projects/my_project.rep/._user | Bin 0 -> 178 bytes ghidra-projects/my_project.rep/._versioned | Bin 0 -> 178 bytes ghidra-projects/my_project.rep/idata/._00 | Bin 0 -> 178 bytes .../my_project.rep/idata/._~index.dat | Bin 0 -> 178 bytes .../my_project.rep/idata/._~journal.dat | Bin 0 -> 178 bytes .../my_project.rep/idata/00/._00000000.prp | Bin 0 -> 178 bytes .../my_project.rep/idata/00/._~00000000.db | Bin 0 -> 178 bytes .../idata/00/~00000000.db/._db.1.gbf | Bin 0 -> 178 bytes .../~00000000.db/._tmp4276373562775725225.ps | Bin 0 -> 178 bytes .../my_project.rep/user/._~index.dat | Bin 0 -> 178 bytes .../my_project.rep/versioned/._~index.dat | Bin 0 -> 178 bytes tools/.DS_Store | Bin 0 -> 6148 bytes tools/._.DS_Store | Bin 0 -> 120 bytes tools/._01_recon.py | Bin 0 -> 178 bytes tools/._02_sniffer.py | Bin 0 -> 178 bytes tools/._03_traversal.py | Bin 0 -> 178 bytes tools/._04_fuzzer.py | Bin 0 -> 178 bytes tools/._anydesk_codec_region.bin | Bin 0 -> 178 bytes tools/._anydesk_dump_29368.bin | Bin 0 -> 178 bytes tools/._anydesk_fixed.bin | Bin 0 -> 178 bytes tools/._anydesk_itext_5mb.bin | Bin 0 -> 178 bytes tools/._backend_16900_222905.json | Bin 0 -> 178 bytes tools/._captures | Bin 0 -> 178 bytes tools/._diag.py | Bin 0 -> 178 bytes tools/._dump_unpacked.py | Bin 0 -> 178 bytes tools/._hook_backend.py | Bin 0 -> 178 bytes tools/._recon_results.json | Bin 0 -> 178 bytes tools/._requirements.txt | Bin 0 -> 178 bytes tools/._test_elevate.exe | Bin 0 -> 178 bytes tools/._xeno-og | Bin 0 -> 178 bytes tools/captures/._cap_20260317_213306 | Bin 0 -> 178 bytes tools/captures/._cap_20260317_213858 | Bin 0 -> 178 bytes tools/captures/._cap_20260317_215221 | Bin 0 -> 178 bytes tools/captures/._cap_20260317_215705 | Bin 0 -> 178 bytes tools/captures/._cap_20260317_215719 | Bin 0 -> 178 bytes tools/captures/._cap_20260317_215946 | Bin 0 -> 178 bytes tools/captures/._cap_20260317_220430 | Bin 0 -> 178 bytes tools/captures/._cap_20260317_220509 | Bin 0 -> 178 bytes tools/captures/._capture_20260317_212618 | Bin 0 -> 178 bytes .../cap_20260317_213306/._capture.json | Bin 0 -> 178 bytes .../cap_20260317_213858/._capture.json | Bin 0 -> 178 bytes .../cap_20260317_215221/._capture.json | Bin 0 -> 178 bytes .../cap_20260317_215705/._capture.json | Bin 0 -> 178 bytes .../cap_20260317_215719/._capture.json | Bin 0 -> 178 bytes .../cap_20260317_215946/._capture.json | Bin 0 -> 178 bytes .../cap_20260317_220430/._capture.json | Bin 0 -> 178 bytes .../cap_20260317_220509/._capture.json | Bin 0 -> 178 bytes .../._capture_summary.json | Bin 0 -> 178 bytes 70 files changed, 0 insertions(+), 0 deletions(-) create mode 100755 ._. create mode 100644 ._.DS_Store create mode 100644 ._01-attack-surface.md create mode 100644 ._02-exploitable-vulns-and-attack-methods.md create mode 100644 ._03-supply-chain-social-engineering.md create mode 100644 ._crypto-malware-distribution-threat-intel-2025-2026.md create mode 100644 ._crypto-wallet-security-architecture-comparison.md create mode 100644 ._gaming-malware-threat-intel-report.md create mode 100755 ._ghidra-projects create mode 100644 ._infostealer-defense-guide-2025-2026.md create mode 100644 ._infostealer-threat-intel-2025-2026.md create mode 100755 ._tools create mode 100755 ghidra-projects/._my_project-pyghidra-mcp create mode 100644 ghidra-projects/._my_project.gpr create mode 100644 ghidra-projects/._my_project.lock create mode 100644 ghidra-projects/._my_project.lock~ create mode 100755 ghidra-projects/._my_project.rep create mode 100755 ghidra-projects/my_project-pyghidra-mcp/._chromadb create mode 100644 ghidra-projects/my_project-pyghidra-mcp/chromadb/._chroma.sqlite3 create mode 100755 ghidra-projects/my_project.rep/._idata create mode 100644 ghidra-projects/my_project.rep/._project.prp create mode 100755 ghidra-projects/my_project.rep/._user create mode 100755 ghidra-projects/my_project.rep/._versioned create mode 100755 ghidra-projects/my_project.rep/idata/._00 create mode 100644 ghidra-projects/my_project.rep/idata/._~index.dat create mode 100644 ghidra-projects/my_project.rep/idata/._~journal.dat create mode 100644 ghidra-projects/my_project.rep/idata/00/._00000000.prp create mode 100755 ghidra-projects/my_project.rep/idata/00/._~00000000.db create mode 100644 ghidra-projects/my_project.rep/idata/00/~00000000.db/._db.1.gbf create mode 100644 ghidra-projects/my_project.rep/idata/00/~00000000.db/._tmp4276373562775725225.ps create mode 100644 ghidra-projects/my_project.rep/user/._~index.dat create mode 100644 ghidra-projects/my_project.rep/versioned/._~index.dat create mode 100644 tools/.DS_Store create mode 100644 tools/._.DS_Store create mode 100644 tools/._01_recon.py create mode 100644 tools/._02_sniffer.py create mode 100644 tools/._03_traversal.py create mode 100644 tools/._04_fuzzer.py create mode 100644 tools/._anydesk_codec_region.bin create mode 100644 tools/._anydesk_dump_29368.bin create mode 100644 tools/._anydesk_fixed.bin create mode 100644 tools/._anydesk_itext_5mb.bin create mode 100644 tools/._backend_16900_222905.json create mode 100755 tools/._captures create mode 100644 tools/._diag.py create mode 100644 tools/._dump_unpacked.py create mode 100644 tools/._hook_backend.py create mode 100644 tools/._recon_results.json create mode 100644 tools/._requirements.txt create mode 100644 tools/._test_elevate.exe create mode 100755 tools/._xeno-og create mode 100755 tools/captures/._cap_20260317_213306 create mode 100755 tools/captures/._cap_20260317_213858 create mode 100755 tools/captures/._cap_20260317_215221 create mode 100755 tools/captures/._cap_20260317_215705 create mode 100755 tools/captures/._cap_20260317_215719 create mode 100755 tools/captures/._cap_20260317_215946 create mode 100755 tools/captures/._cap_20260317_220430 create mode 100755 tools/captures/._cap_20260317_220509 create mode 100755 tools/captures/._capture_20260317_212618 create mode 100644 tools/captures/cap_20260317_213306/._capture.json create mode 100644 tools/captures/cap_20260317_213858/._capture.json create mode 100644 tools/captures/cap_20260317_215221/._capture.json create mode 100644 tools/captures/cap_20260317_215705/._capture.json create mode 100644 tools/captures/cap_20260317_215719/._capture.json create mode 100644 tools/captures/cap_20260317_215946/._capture.json create mode 100644 tools/captures/cap_20260317_220430/._capture.json create mode 100644 tools/captures/cap_20260317_220509/._capture.json create mode 100644 tools/captures/capture_20260317_212618/._capture_summary.json diff --git a/.DS_Store b/.DS_Store index e46f4c16d227703d367a77b1c43126b535228a06..b6ac6fe28e7dcddedfe9fc435a0059477687b083 100644 GIT binary patch delta 208 zcmZoMXfc@JFUZ5dz`)4BAi$85ZWx@LpIfjwk$E*^JxG{^L60GwA(Np5CIu8@V7l=7 z4YFKrzKcszPJR+ljAMZU|I%=U6OO3zDR|`zG9cCh^)N791(6K=4C#|ym}DmFF`Z%x k+cWtWlN9^bH(-+|OEXKu*|yBGj30omHDTGz&heKY0A|!S1^@s6 delta 155 zcmZoMXfc@JFUrBdz`)4BAi%&-#E{6K%TNHM^EW0gXJq7<{Dw(s@-n7V$#y${idY#+ z81jKIhoLw(-^C>Et#k2|8PNFku2Aj2>?IX|}msE>iQ^1|ka%xWwX M3)(ibbNuB807t$Vqox1Ojhs@R)|o50+1L3ClDI}@e?2h@)^Z|G!eitBqRu;46I`dke!64 z4P-h<+=GFEKRG{FFR`E?Csi*uF*ygK@DGrZVqg$O$Q70*7A5ADWagzZFdW=je=GNY uo9EX#Q|)%#m@4c9(L^d)sBd6kVQ6iZXlY=UVq|I^lA4p6UX++?%>V$%7ALU) literal 0 HcmV?d00001 diff --git a/._.DS_Store b/._.DS_Store new file mode 100644 index 0000000000000000000000000000000000000000..a5b28df1cbc6e15bd0d35cdadd0c2e65d5131c7d GIT binary patch literal 120 zcmZQz6=P>$Vqox1Ojhs@R)|o50+1L3ClDI}u^SMB_!U6R08`;00ODZ-jv*mIP;rnB Iur73U08|YJ=l}o! literal 0 HcmV?d00001 diff --git a/._01-attack-surface.md b/._01-attack-surface.md new file mode 100644 index 0000000000000000000000000000000000000000..e1f5367ee6cc2e0fd8e31af6f2a9d8ba8083911f GIT binary patch literal 178 zcmZQz6=P>$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^Kt1ToMNwtN5#`Gac}cBK3Ov_tC7#cE9YZk3>X8( zz_u`en#~gJ3)*N57z4&Y%>aKNVko0mtOUcS14C#5fL)k_V9vb+$Ha$Vqox1Ojhs@R)|o50+1L3ClDI}u^SMB_!U6R08`;00ODZ-jv*mIP;rnB Iur73U08|YJ=l}o! literal 0 HcmV?d00001 diff --git a/tools/._01_recon.py b/tools/._01_recon.py new file mode 100644 index 0000000000000000000000000000000000000000..e1f5367ee6cc2e0fd8e31af6f2a9d8ba8083911f GIT binary patch literal 178 zcmZQz6=P>$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K$Vqox1Ojhs@R)|o50+1L3ClDI}aRU&8_?v*32;dkJ5(HHS(lG;wrO>o7 zBE&_L^K