CIRCLE WITH A DOT

For those who know have the *pleasure* to reverse Go binaries:

Reverse Engineering Go Binaries: A Comprehensive Guide to Metadata Analysis | Azhlm

Comprehensive guide to analyzing Go binaries through pclntab, moduledata, and type information extraction across versions 1.2-1.26.

Azhlm (azhlm.netlify.app)

#golang #reverseengineering

I missed this one because of ~~beer~~ summer holidays.
Anyway, if you want to see how a shellter protected binary looks like:

Taking SHELLTER: a commercial evasion framework abused in-the-wild — Elastic Security Labs

Elastic Security Labs detected the recent emergence of infostealers using an illicitly acquired version of the commercial evasion framework, SHELLTER, to deploy post-exploitation payloads.

(www.elastic.co)

#malware #reverseengineering #shellter