Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.14K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #1061 · Back to latest

Older Posts 20 shown

Post #1060 80 Mar 28, 2021, 07:55 UTC

Dumping LSASS in memory undetected using MirrorDump

https://www.pentestpartners.com/security-blog/dumping-lsass-in-memory-undetected-using-mirrordump/

Pen Test Partners Dumping LSASS in memory undetected using MirrorDump | Pen Test Partners Introduction As I am sure some of you are aware from the occasional ramblings and screenshots on twitter, I am a big fan of .NET based offensive tooling. Not because it’s trendy or cool, but because of the development speed and ease of testing and debugging…

Post #1059 72 Mar 26, 2021, 13:06 UTC

Analyzing attacks taking advantage of the Exchange Server vulnerabilities

https://www.microsoft.com/security/blog/2021/03/25/analyzing-attacks-taking-advantage-of-the-exchange-server-vulnerabilities/

Microsoft Security Blog Analyzing attacks taking advantage of the Exchange Server vulnerabilities | Microsoft Security Blog Microsoft continues to monitor and investigate attacks exploiting the recent on-premises Exchange Server vulnerabilities. As organizations recover from this incident, we continue to publish guidance and share threat intelligence to help detect and evict threat…

Post #1058 60 Mar 26, 2021, 08:54 UTC

Antivirus Event Analysis Cheat Sheet v1.8

https://www.nextron-systems.com/2021/03/25/antivirus-event-analysis-cheat-sheet-v1-8/

Post #1057 66 Mar 24, 2021, 21:16 UTC

Hidden OAuth attack vectors

https://portswigger.net/research/hidden-oauth-attack-vectors

PortSwigger Research Hidden OAuth attack vectors Intro The OAuth2 authorization protocol has been under fire for the past ten years. You've probably already heard about plenty of "return_uri" tricks, token leakages, CSRF-style attacks on clients, an

Post #1056 80 Mar 16, 2021, 12:35 UTC

Extracting and Diffing Windows Patches in 2020

https://wumb0.in/extracting-and-diffing-ms-patches-in-2020.html

Post #1055 69 Mar 15, 2021, 09:58 UTC

Reproducing n-day vulnerabilities and writing N-day based fuzzer with Qiling
https://devilinside.me/blogs/reproducing-ndays-qiling

devilinside.me UNLEASH THE BEAST | THE FUTURE Expect memes, food for thoughts, tech guidelines and trash talk daily.

Post #1054 60 Mar 13, 2021, 15:19 UTC

Playing in the (Windows) Sandbox

https://research.checkpoint.com/2021/playing-in-the-windows-sandbox/

Check Point Research Playing in the (Windows) Sandbox - Check Point Research Research By: Alex Ilgayev Introduction Two years ago, Microsoft released a new feature as a part of the Insiders build 18305 – Windows Sandbox. This sandbox has some useful specifications: Integrated part of Windows 10 (Pro/Enterprise). Runs on top of Hyper…

Post #1053 78 Mar 10, 2021, 13:22 UTC

malicious repositories can execute remote code while cloning

https://www.openwall.com/lists/oss-security/2021/03/09/3

Post #1052 76 Mar 6, 2021, 16:18 UTC

Bitsquatting Windows.com
https://remyhax.xyz/posts/bitsquatting-windows/

REMY HAX Bitsquatting windows.com Earlier this month, I came back around to seriously considering an attempt at bitsquatting. While the prior link goes into great depth on the topic, I will attempt to give a very high level overview here:

Post #1051 100 Mar 3, 2021, 08:46 UTC

HAFNIUM targeting Exchange Servers with 0-day exploits

https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/

Microsoft News HAFNIUM targeting Exchange Servers with 0-day exploits Microsoft has detected multiple 0-day exploits being used to attack on-premises versions of Microsoft Exchange Server in limited and targeted attacks. In the attacks observed, threat actors used this vulnerability to access on-premises Exchange servers, which…

Post #1050 54 Mar 2, 2021, 06:58 UTC

Hunting for Bugs in Windows Mini-Filter Drivers

https://googleprojectzero.blogspot.com/2021/01/hunting-for-bugs-in-windows-mini-filter.html?m=1

Blogspot Hunting for Bugs in Windows Mini-Filter Drivers Posted by James Forshaw, Project Zero In December Microsoft fixed 4 issues in Windows in the Cloud Filter and Windows Overlay Filter (WOF) d...

Post #1049 76 Feb 28, 2021, 07:55 UTC

Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins

https://github.com/liamg/traitor

GitHub GitHub - liamg/traitor: :arrow_up: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit,… :arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock - liamg/traitor

Post #1048 66 Feb 26, 2021, 22:06 UTC

Доклады с Black Hat USA 2020

https://www.youtube.com/playlist?list=PLH15HpR5qRsXE_4kOSy_SXwFkFQre4AV_

Post #1047 64 Feb 25, 2021, 08:21 UTC

Unauthorized RCE in VMware vCenter (CVE-2021-21972)

https://swarm.ptsecurity.com/unauth-rce-vmware/

Post #1046 54 Feb 24, 2021, 07:54 UTC

Обновился WinObj

https://docs.microsoft.com/en-us/sysinternals/

Docs Sysinternals - Sysinternals Library, learning resources, downloads, support, and community. Evaluate and find out how to install, deploy, and maintain Windows with Sysinternals utilities.

Post #1045 77 Feb 19, 2021, 16:24 UTC

WINDOWS KERNEL ZERO-DAY EXPLOIT (CVE-2021-1732) IS USED BY BITTER APT IN TARGETED ATTACK

https://ti.dbappsecurity.com.cn/blog/index.php/2021/02/10/windows-kernel-zero-day-exploit-is-used-by-bitter-apt-in-targeted-attack/

Post #1044 71 Feb 15, 2021, 08:08 UTC

Apple G13 GPU architecture docs and tools

https://github.com/dougallj/applegpu

GitHub GitHub - dougallj/applegpu: Apple G13 GPU architecture docs and tools Apple G13 GPU architecture docs and tools. Contribute to dougallj/applegpu development by creating an account on GitHub.

Post #1043 81 Feb 11, 2021, 09:15 UTC

FuzzSplore: Visualizing Feedback-Driven Fuzzing Techniques.

http://arxiv.org/abs/2102.02527

Post #1042 91 Feb 10, 2021, 16:39 UTC

iOS\iPadOS 14.3 kernel LPE for all devices

https://github.com/ModernPwner/cicuta_virosa

GitHub GitHub - ModernPwner/cicuta_virosa Contribute to ModernPwner/cicuta_virosa development by creating an account on GitHub.

Post #1041 78 Feb 9, 2021, 21:29 UTC

https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610

Medium Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies The Story of a Novel Supply Chain Attack

Older posts →