Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.14K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #1182 · Back to latest

Older Posts 20 shown

Post #1181 192 Nov 3, 2022, 09:45 UTC

Fuzzing XSS Sanitizers for Fun and Profit

https://youtu.be/gJGbS8UELGw

YouTube Fuzzing XSS Sanitizers for Fun and Profit | Tom Anthony In 1998 Tom was arrested for hacking, and was told he was looking at over 270 years in prison. Time for a career change! Tom went on to a life as an academic, earning a PhD in Artificial Intelligence, before starting a career as an SEO consultant (you think…

🔥 1

Post #1180 98 Oct 27, 2022, 09:30 UTC

TCP/IP Vulnerability CVE-2022–34718 PoC Restoration and Analysis

https://medium.com/@numencyberlabs/analysis-and-summary-of-tcp-ip-protocol-remote-code-execution-vulnerability-cve-2022-34718-8fcc28538acf

Medium TCP/IP Vulnerability CVE-2022–34718 PoC Restoration and Analysis An Analysis of Remote Code Execution Vulnerability CVE-2022–34718

👍 1

Post #1179 81 Oct 26, 2022, 05:42 UTC

Concurrence: library for fuzzing multi-threaded targets

https://github.com/googleprojectzero/SockFuzzer/tree/main/third_party/concurrence

GitHub SockFuzzer/third_party/concurrence at main · googleprojectzero/SockFuzzer Contribute to googleprojectzero/SockFuzzer development by creating an account on GitHub.

Post #1178 95 Oct 20, 2022, 15:16 UTC

FixReverter: A Realistic Bug Injection Methodology for Benchmarking Fuzz Testing

https://www.usenix.org/system/files/sec22-zhang-zenong.pdf

Post #1177 87 Oct 20, 2022, 13:49 UTC

https://youtu.be/dF7TP1V6wTM

YouTube Microsoft Defender Will Be Defended MemoryRanger Prevents Blinding Windows post processed by: Igor Korkin (@IgorKorkin) and Denis Pogonin Windows OS is facing a huge rise in kernel attacks. An overview of popular techniques that result in loading kernel drivers will be presented. One of the key targets of modern threats is disabling and blinding…

Post #1176 69 Oct 20, 2022, 13:09 UTC

Microsoft fixes driver blocklist placing users at risk from BYOVD attacks

https://www.malwarebytes.com/blog/news/2022/10/microsoft-fixes-driver-blocklist-placing-users-at-risk-from-byovd-attacks

Malwarebytes Microsoft fixes driver blocklist placing users at risk from BYOVD attacks There may be an all-new acronym for you to try and remember, as a result of Microsoft fixing a lingering issue. This...

Post #1175 66 Oct 20, 2022, 06:51 UTC

Toss a Fault to Your Witcher: Applying Grey-box Coverage-Guided Mutational Fuzzing to Detect
SQL and Command Injection Vulnerabilities

https://pagabuc.me/docs/oakland23_witcher.pdf

👍 1

Post #1174 80 Oct 17, 2022, 15:00 UTC

A journey of fuzzing Nvidia graphic driver leading to LPE exploitation

https://drive.google.com/file/d/1HEaQ3o1kSnrzMCec1aiYMkWYQZg7Vjb3/view

Post #1173 82 Oct 17, 2022, 10:36 UTC

file.pdf681 KB

Hacking the Cloud With SAML

🔥 2

Post #1171 82 Oct 15, 2022, 07:28 UTC

Fuzzing RDPEGFX with "what the fuzz"

https://thalium.github.io/blog/posts/rdpegfx/

Post #1170 73 Oct 14, 2022, 20:15 UTC

RedEye is a visual analytic tool supporting Red & Blue Team operations

https://github.com/cisagov/RedEye/

GitHub GitHub - cisagov/RedEye: RedEye is a visual analytic tool supporting Red & Blue Team operations RedEye is a visual analytic tool supporting Red & Blue Team operations - cisagov/RedEye

Post #1169 76 Oct 12, 2022, 07:45 UTC

CONFETTI: Amplifying Concolic Guidance for Fuzzers

https://www.youtube.com/watch?v=4WOPUFNeZXg

https://srg.doc.ic.ac.uk/klee22/talks/Kukucka-Confetti.pdf

YouTube CONFETTI: Amplifying Concolic Guidance for Fuzzers James Kukucka from George Mason University at the 3nd International KLEE Workshop on Symbolic Execution KLEE Workshop 2022: https://srg.doc.ic.ac.uk/klee22/ Slides: https://srg.doc.ic.ac.uk/klee22/talks/Kukucka-Confetti.pdf

Post #1168 116 Oct 12, 2022, 07:29 UTC

Making Fuzzing Part of Your Software Development Lifecycle

https://www.youtube.com/watch?v=eg7SiXr31Qk

YouTube Making Fuzzing Part of Your Software Development Lifecycle - Jonathan Metzman, Google Making Fuzzing Part of Your Software Development Lifecycle - Jonathan Metzman, Google Fuzzing is a testing technique that uses randomized inputs to find bugs in software. Fuzzing is the most successful automated vulnetability/bug-finding technique and has…

Post #1167 70 Oct 12, 2022, 07:29 UTC

Fuzzing Host-to Guest Attack Surface in Android Protected KVM

https://www.youtube.com/watch?v=cJjjlSG6JEA

YouTube Fuzzing Host-to Guest Attack Surface in Android Protected KVM- Eugene Rodionov & Will Deacon, Google Fuzzing Host-to Guest Attack Surface in Android Protected KVM - Eugene Rodionov & Will Deacon, Google Android 13 introduces native support of virtualization services built on top of Protected KVM (pKVM) for arm64 devices. Unlike in traditional KVM where…

Post #1166 111 Sep 25, 2022, 20:37 UTC

Jit-Picking: Differential Fuzzing of JavaScript Engines

https://publications.cispa.saarland/3773/1/2022-CCS-JIT-Fuzzing.pdf

Post #1165 129 Sep 8, 2022, 16:38 UTC

Attacking Firecracker: AWS' microVM Monitor Written in Rust - https://www.graplsecurity.com/post/attacking-firecracker

SecOps Insights Firecracker Security: How Does microVM Isolation Really Work? Why are more security teams adopting Firecracker? How secure is it, and how suitable is it for your organization? This guide dives into this trending innovation.

Post #1164 140 Aug 31, 2022, 21:09 UTC

Fuzzing Go APIs for SQL Injection

https://blog.fuzzbuzz.io/fuzzing-go-apis-for-sql-injection/

Post #1163 148 Aug 24, 2022, 23:04 UTC

Jazzer.Js Brings Fuzzing To JavaScript
https://www.code-intelligence.com/blog/jazzer.js
https://github.com/CodeIntelligenceTesting/jazzer.js

Code-Intelligence Jazzer.js Brings Effective Fuzzing to JavaScript (Open-Source) Jazzer.js is an open-source fuzzer for the Node.js platform. It is based on libFuzzer and brings many of its features to the JavaScript ecosystem.

Post #1162 160 Aug 17, 2022, 18:57 UTC

eBPF ELFs JMPing Through the Windows - https://i.blackhat.com/USA-22/Thursday/US-22-Johnson-eBPF-ELFs-JMPing-Through-the-Windows.pdf

👎 1

Post #1161 126 Aug 17, 2022, 18:56 UTC

Another Way to Talk with Browser: Exploiting Chrome at Network Layer - https://i.blackhat.com/USA-22/Thursday/US-22-Rong-Another-Way-to-Talk-with-Browser-Exploiting-Chrome-at-Network-Layer.pdf

Older posts →