Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.14K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #1041 · Back to latest

Older Posts 20 shown

Post #1040 85 Feb 4, 2021, 12:47 UTC

Facebook AI Introduces N-Bref: A Neural-Based Decompiler Framework

https://www.marktechpost.com/2021/01/28/facebook-ai-introduces-n-bref-a-neural-based-decompiler-framework/

MarkTechPost Facebook AI Introduces N-Bref: A Neural-Based Decompiler Framework Facebook AI introduces a neural-based decompiler framework called N-Bref, which improves traditional decompilation systems’ performance accuracy. The research led by Jishen Zhao is a collaboration between FAIR and UCSD STABLE Lab. This study presents a comprehensive…

Post #1039 90 Jan 26, 2021, 13:02 UTC

Post #1038 72 Jan 26, 2021, 13:02 UTC

Alaid TechThread New campaign targeting security researchers https://blog.google/threat-analysis-group/new-campaign-targeting-security-researchers/

рекомендуется провести проверку на наличие угроз

Post #1037 63 Jan 26, 2021, 09:13 UTC

New campaign targeting security researchers

https://blog.google/threat-analysis-group/new-campaign-targeting-security-researchers/

Google New campaign targeting security researchers Details on an ongoing campaign, which we attribute to a government-backed entity based in North Korea, targeting security researchers working on vulnerability research and development.

Post #1036 56 Jan 24, 2021, 06:04 UTC

Security Advisory: MSRPC Printer Spooler Relay (CVE-2021-1678)

https://www.crowdstrike.com/blog/cve-2021-1678-printer-spooler-relay-security-advisory/

CrowdStrike.com Security Advisory: MSRPC Printer Spooler Relay (CVE-2021-1678) On Patch Tuesday, January 12, 2021, Microsoft released a patch for CVE-2021-1678, an important vulnerability discovered by CrowdStrike researchers.

Post #1035 73 Jan 19, 2021, 20:17 UTC

PROCESS HERPADERPING – WINDOWS DEFENDER EVASION
https://pentestlaboratories.com/2021/01/18/process-herpaderping-windows-defender-evasion/

Pentest Laboratories Process Herpaderping – Windows Defender Evasion Windows Defender has improved significantly the security posture of Windows environments since it has better detection capabilities compare to other security products. When a process is created Win…

Post #1034 68 Jan 18, 2021, 12:49 UTC

Building an RDP Credential Catcher for Threat Intelligence
https://research.nccgroup.com/2021/01/10/building-an-rdp-credential-catcher-for-threat-intelligence/

Nccgroup Cyber Security Research Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.

Post #1033 65 Jan 13, 2021, 08:03 UTC

Operation ‘Kremlin’
The file contains an obfuscated URL to a remote template which contains malicious VBA, eventually leading to the execution of VBS on the infected machine. The attack’s purpose is to stealthily exfiltrate information without running any external executables on the system.

https://www.clearskysec.com/operation-kremlin/

Post #1032 57 Jan 11, 2021, 07:50 UTC

A 'Novel' Way to Bypass Executable Signature Checks with Electron

https://parsiya.net/blog/2021-01-08-a-novel-way-to-bypass-executable-signature-checks-with-electron/

Post #1031 53 Jan 10, 2021, 09:12 UTC

Using Windows Disposable VMs for test and research

https://rolando.anton.sh/blog/2021/01/01/using-windows-disposable-vms-for-test-and-research/

Post #1030 155 Dec 30, 2020, 10:12 UTC

10.1109@SP.2019.00003.pdf12.3 MB

Asm2Vec: Boosting Static Representation Robustness for Binary Clone Search against Code Obfuscation and Compiler Optimization

Post #1029 71 Dec 29, 2020, 10:37 UTC

Forwarded from r0 Crew (Channel)

A WIP "Vulnerable by Design" kext for iOS/macOS to play & learn *OS kernel exploitation https://github.com/ant4g0nist/Vulnerable-Kext #exploitation #ios #macos #dukeBarman

GitHub GitHub - ant4g0nist/Vulnerable-Kext: A WIP "Vulnerable by Design" kext for iOS/macOS to play & learn *OS kernel exploitation A WIP "Vulnerable by Design" kext for iOS/macOS to play & learn *OS kernel exploitation - ant4g0nist/Vulnerable-Kext

Post #1028 73 Dec 26, 2020, 11:10 UTC

Visualize the virtual address space of a Windows process on a Hilbert curve.

https://github.com/0vercl0k/clairvoyance

GitHub GitHub - 0vercl0k/clairvoyance: Visualize the virtual address space of a Windows process on a Hilbert curve. Visualize the virtual address space of a Windows process on a Hilbert curve. - 0vercl0k/clairvoyance

Post #1027 58 Dec 26, 2020, 11:07 UTC

SUNBURST Additional Technical Details

https://www.fireeye.com/blog/threat-research/2020/12/sunburst-additional-technical-details.html

Google Cloud Mandiant Cybersecurity Consulting Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.

Post #1026 53 Dec 26, 2020, 11:03 UTC

Гиперотладка. Разбираем отладку Microsoft Hyper-V с самого начала

https://xakep.ru/2020/12/25/hyperv-hyperdebug/

Post #1025 56 Dec 23, 2020, 14:45 UTC

Symbolic execution by compilation with SymCC

https://www.youtube.com/watch?v=htDrNBiL7Y8

YouTube Symbolic execution by compilation with SymCC Follow David on Twitter @Davkorcz: https://twitter.com/Davkorcz Follow us on Twitter: @ADALogics at https://twitter.com/ADALogics This video gives an introduction to SymCC SymCC paper and author presentation: https://www.usenix.org/conference/usenixsecu…

Post #1024 49 Dec 23, 2020, 14:41 UTC

CVE-2020-9967 - Apple macOS XNU 6LowPan Kernel RCE Write-up https://alexplaskett.github.io/CVE-2020-9967/

Amit Merchant - Software Engineer CVE-2020-9967 - Apple macOS 6LowPAN Vulnerability Inspired by Kevin Backhouse’s great work on finding XNU remote vulnerabilities I decided to spend some time looking at CodeQL and performing some variant analysis. This lead to the discovery of a local root to kernel (although documented by Apple as remote)…

Post #1023 50 Dec 21, 2020, 08:38 UTC

Learn how to emulate, trace, debug, and ReverseEngineering UEFI modules

https://s1.ai/uefi2

SentinelOne Moving From Manual Reverse Engineering of UEFI Modules To Dynamic Emulation of UEFI Firmware - SentinelLabs Learn how to emulate, trace, debug, and Reverse Engineer UEFI modules in part 2 of our new blog series on Firmware Security

Post #1022 61 Dec 17, 2020, 09:25 UTC

A private Lumina server that can be used with IDA Pro 7.2+.

https://github.com/naim94a/lumen

GitHub GitHub - naim94a/lumen: A private Lumina server for IDA Pro A private Lumina server for IDA Pro. Contribute to naim94a/lumen development by creating an account on GitHub.

Post #1021 53 Dec 17, 2020, 06:14 UTC

20 миллионов сэмплов от Sophos

https://github.com/sophos-ai/SOREL-20M

GitHub GitHub - sophos/SOREL-20M: Sophos-ReversingLabs 20 million sample dataset Sophos-ReversingLabs 20 million sample dataset. Contribute to sophos/SOREL-20M development by creating an account on GitHub.

Older posts →