CyberChef Recipe to Loop Over Values to Modify and Decode скачать в хорошем качестве

CyberChef Recipe to Loop Over Values to Modify and Decode

This video explores how to operate on individual chunks of data from an operation. 🔥 FREE DOWNLOADABLE PDF - MALICIOUS DOCS QUICK REFERENCE https://quickreference.thecyberyeti.c... It's common during malware analysis to find lists, or arrays, of data that you need to decode. However, the data first needs to be manipulated before it can be decoded. In this video, we'll look at a CyberChef recipe to help you do just that. We'll use a recent HTA file used to download SnakeKeylogger that hides a Powershell script in an array of numeric values. To decode this array, an arbitrary value must first be subtracted, this is where CyberChef comes in. We'll use the FORK operation to subtract a value from each array element, convert to it's proper char code, then concatenate back to the reveal the full powershell script. Cybersecurity, reverse engineering, malware analysis and ethical hacking content! 🎓 Courses on Pluralsight 👉🏻 https://www.pluralsight.com/authors/j... 🌶️ YouTube 👉🏻 Like, Comment & Subscribe! 🙏🏻 Follow me 👉🏻   / jstrosch  ,   / joshstroschein   ⚙️ Tinker with me on Github 👉🏻 https://github.com/jstrosch 00:00 Introduction 00:48 Analyzing the HTA File 01:27 Identifying the Obfuscated Data 03:53 OSINT Shout-Out! 06:10 Exploring the CyberChef Recipe 07:13 The Next-Stage PowerShell