Diaries by Keyword - SANS Internet Storm Center

Handler on Duty: Didier Stevens

Threat Level: green

Date	Author	Title
2025-03-10	Xavier Mertens	Shellcode Encoded in UUIDs
2024-08-19	Xavier Mertens	Do you Like Donuts? Here is a Donut Shellcode Delivered Through PowerShell/Python
2023-07-28	Xavier Mertens	ShellCode Hidden with Steganography
2023-03-16	Xavier Mertens	Simple Shellcode Dissection
2022-09-14	Xavier Mertens	Easy Process Injection within Python
2022-01-22	Xavier Mertens	Mixed VBA & Excel4 Macro In a Targeted Excel Sheet
2022-01-20	Xavier Mertens	RedLine Stealer Delivered Through FTP
2022-01-06	Xavier Mertens	Malicious Python Script Targeting Chinese People
2021-12-10	Xavier Mertens	Python Shellcode Injection From JSON Data
2021-08-20	Xavier Mertens	Waiting for the C2 to Show Up
2021-01-18	Didier Stevens	Doc & RTF Malicious Document
2020-09-02	Xavier Mertens	Python and Risky Windows API Calls
2020-07-27	Didier Stevens	Analyzing Metasploit ASP .NET Payloads
2019-10-27	Didier Stevens	Using scdbg to Find Shellcode
2019-05-31	Didier Stevens	Retrieving Second Stage Payload with Ncat
2019-05-30	Didier Stevens	Analyzing First Stage Shellcode
2019-01-02	Didier Stevens	Maldoc with Nonfunctional Shellcode
2018-09-24	Didier Stevens	Analyzing Encoded Shellcode with scdbg
2018-09-08	Didier Stevens	Video: Using scdbg to analyze shellcode
2018-09-03	Didier Stevens	Another quickie: Using scdbg to analyze shellcode
2018-08-31	Jim Clausing	Quickie: Using radare2 to disassemble shellcode
2016-11-24	Didier Stevens	Extracting Shellcode From JavaScript
2016-11-18	Didier Stevens	VBA Shellcode and Windows 10
2015-03-30	Didier Stevens	YARA Rules For Shellcode
2012-04-25	Daniel Wesemann	Blacole's shell code