Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.14K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #1101 · Back to latest

Older Posts 20 shown

Post #1100 88 Aug 8, 2021, 19:08 UTC

An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.

https://github.com/yardenshafir/PoolViewer

GitHub GitHub - yardenshafir/PoolViewer: An application to view and filter pool allocations from a dmp file on Windows 10 RS5+. An application to view and filter pool allocations from a dmp file on Windows 10 RS5+. - yardenshafir/PoolViewer

Post #1099 120 Jul 28, 2021, 14:25 UTC

PetitPotam
PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw function.

https://github.com/topotam/PetitPotam

GitHub GitHub - topotam/PetitPotam: PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw… PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions. - topotam/PetitPotam

Post #1098 83 Jul 28, 2021, 08:15 UTC

s42400-021-00088-4.pdf1.3 MB

Bin2vec: learning representations of binary executable programs for security tasks

Post #1097 79 Jul 28, 2021, 07:51 UTC

NeurIPS_2019_coda_an_end_to_end_neural_program_decompiler_Paper.pdf389.8 KB

Coda: An End-to-End Neural Program Decompiler

Post #1096 69 Jul 28, 2021, 07:48 UTC

Liang2021_Article_NeutronAnAttention-basedNeural.pdf1.6 MB

Neutron: an attention-based neural decompiler

Post #1095 68 Jul 26, 2021, 10:54 UTC

Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.

https://github.com/lyft/cartography

GitHub GitHub - cartography-cncf/cartography: Cartography is a Python tool that pulls infrastructure assets and their relationships into… Cartography is a Python tool that pulls infrastructure assets and their relationships into a Neo4j graph database. - cartography-cncf/cartography

Post #1094 110 Jul 22, 2021, 11:39 UTC

3405671.3405811.pdf818.2 KB

SAM: Self-Attention based Deep Learning Method for Online Traffic Classification

Post #1093 105 Jul 22, 2021, 11:37 UTC

1-s2.0-S0140366421000426-main.pdf1.3 MB

Deep Learning for Network Traffic Monitoring and Analysis (NTMA): A Survey

Post #1092 87 Jul 20, 2021, 12:47 UTC

OpenSecurityTraining2 public betas of refreshed classes on x86-64 assembly, x86-64 OS internals, and coreboot are now open - https://ost2.fyi

Post #1091 95 Jul 17, 2021, 21:06 UTC

CVE-2021-31956 Exploiting the Windows Kernel (NTFS with WNF) – Part 1

https://research.nccgroup.com/2021/07/15/cve-2021-31956-exploiting-the-windows-kernel-ntfs-with-wnf-part-1/amp/#click=https://t.co/zfXvokBcHW

NCC Group Research CVE-2021-31956 Exploiting the Windows Kernel (NTFS with WNF) – Part 1 NCC Group’s Exploit Development Group look at exploiting CVE-2021-31956 – the Windows Kernel (NTFS with WNF)

Post #1090 94 Jul 14, 2021, 16:32 UTC

https://youtu.be/F3id8iaGnDk

YouTube Purple Vitamins To Grow Your Skills Acquiring new skills is important for your career. Especially in security, where technology, products and threats are evolving continuously. Blue team or red team members not only benefit from learning new skills directly applicable to their daily work, but…

Post #1089 70 Jul 14, 2021, 16:28 UTC

Details about four in-the-wild 0-day campaigns targeting four separate vulnerabilities we’ve discovered so far this year:
• CVE-2021-21166 and CVE-2021-30551 in Chrome,
• CVE-2021-33742 in Internet Explorer, and
• CVE-2021-1879 in WebKit (Safari).

https://blog.google/threat-analysis-group/how-we-protect-users-0-day-attacks/

cve.mitre.org CVE - CVE-2021-21166 CVE® is a list of records — each containing an identification number, a description, and at least one public reference — for publicly known cybersecurity vulnerabilities. The mission of the CVE Program is to identify, define, and catalog publicly disclosed…

Post #1088 68 Jul 14, 2021, 05:50 UTC

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows.

https://github.com/0vercl0k/wtf

GitHub GitHub - 0vercl0k/wtf: wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed… wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-m...

Post #1087 70 Jul 12, 2021, 08:55 UTC

AutoHarness is a tool that automatically generates fuzzing harnesses for you

https://github.com/parikhakshat/autoharness

GitHub GitHub - parikhakshat/autoharness: A tool that automatically creates fuzzing harnesses based on a library A tool that automatically creates fuzzing harnesses based on a library - parikhakshat/autoharness

Post #1086 84 Jun 30, 2021, 19:58 UTC

Advanced Web Application Penetration Testing JWT Security Issues

https://youtu.be/z1FL0lG_8ds

YouTube Advanced Web Application Penetration Testing JWT Security Issues Relevant Course: https://www.sans.org/sec642 Presented by: Adrien de Beaupré Follow me here: https://twitter.com/adriendb JWTs are an important part of how modern APIs are used, they assert your identify to the application. You will see them in SOAP, REST…

Post #1085 73 Jun 29, 2021, 15:49 UTC

Inside commercial malware sandboxes

https://albocoder.github.io/malware/2021/06/01/SandboxStudy.html

Post #1084 84 Jun 22, 2021, 10:48 UTC

DarkLoadLibrary (Bypassing Image Load Kernel Callbacks)

LoadLibrary for offensive operations.

https://github.com/bats3c/DarkLoadLibrary

GitHub GitHub - bats3c/DarkLoadLibrary: LoadLibrary for offensive operations LoadLibrary for offensive operations. Contribute to bats3c/DarkLoadLibrary development by creating an account on GitHub.

Post #1083 80 Jun 22, 2021, 06:59 UTC

A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.

https://github.com/optiv/Dent

GitHub GitHub - optiv/Dent: A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors. A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors. - optiv/Dent

Post #1082 93 Jun 17, 2021, 11:18 UTC

d0zer
Elf binary infector written in Golang. It can be used for infecting executables of type ET_DYN and ET_EXEC with a payload of your creation. Utilizing the classic elf text segment padding algorithm by Silvio Cesar, your payload (parasite) will run before native functionality of the binary effectively backooring the binary.

https://github.com/sad0p/d0zer

GitHub GitHub - sad0p/d0zer: Elf binary infector written in Go. Elf binary infector written in Go. Contribute to sad0p/d0zer development by creating an account on GitHub.

Post #1081 98 Jun 12, 2021, 09:14 UTC

Privilege escalation with polkit: How to get root on Linux with a seven-year-old bug (CVE-2021-3560)

https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/

The GitHub Blog Privilege escalation with polkit: How to get root on Linux with a seven-year-old bug polkit is a system service installed by default on many Linux distributions. It’s used by systemd, so any Linux distribution that uses systemd also uses polkit.

Older posts →