Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.15K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #166 · Back to latest

Older Posts 20 shown

Post #165 51 Apr 12, 2018, 19:14 UTC

Forwarded from Alexey Sintsov

Друзья, в эту СУББОТУ, в 11-30 по МСК будет запись подкаста @N0iSeBit! Тема: "О современных атаках на CPU и микроархитектуру". Гости подкаста: Дмитрий Олексюк aka Cr4sh (@d_olex), Никита Тараканов, Артем Шишкин (@honorary_bot), Макс Горячий (@h0t_max), Дмитрий Скляров (@_Dmit), Никита Абдуллин (@0xABD) и бессменный ведущий которому тож есть что сказать по теме - Александр Матросов (@matrosov). Запись будет "стримиться" на твич канал @defconrussia (https://www.twitch.tv/defconrussia), и именно там, можно будет проследить за дискуссией в реальном времени и позадавать вопросы гостям! (прям в чате стрима). Старые записи подкаста ищите тут: https://noisebit.podster.fm/

Twitch defconrussia - Twitch Russian hackers community - DEFCON Russia, DC#7812. http://defcon-russia.ru

Post #164 50 Apr 12, 2018, 14:02 UTC

https://embedi.com/blog/reflecting-upon-owasp-top-10-iot-vulnerabilities/

Post #163 47 Apr 12, 2018, 14:00 UTC

https://twitter.com/_samdb_/status/983637071473635329

Twitter Sam Brown Ported the windbg heap trace script to JavaScript to try it out https://t.co/nC8ZedLPhT using @0vercl0k's great blog post: https://t.co/oIZ0DjzFEX It's pretty nice ^^ https://t.co/PVtlIZ6BCC

Post #162 49 Apr 10, 2018, 18:11 UTC

https://www.youtube.com/watch?v=gvS4efEakpY

YouTube Black Hat Asia 2018 Keynote: A Short Course in Cyber Warfare by The Grugq Black Hat Asia 2018 Day 2 Keynote: A Short Course in Cyber Warfare presented by The Grugq Cyber is a new dimension in conflict which is still not fully theorized or conceptualized. Not that that is stopping anybody. Critically, cyber is the third new dimension…

Post #161 52 Apr 10, 2018, 09:42 UTC

https://twitter.com/daniel_bilar/status/983488866089922560?s=19

Twitter Daniel Bilar Using GANs to modify malware C&C traffic by @mrigaki https://t.co/gIF1vVGAds cc @drhyrum [mimic normal nw traffic to evade detectors keeping effective comms channel; RAT @fluproject https://t.co/fupYhZIcns & Stratosphere IPS https://t.co/gORtaIddl6 ; censorship…

Post #160 47 Apr 9, 2018, 08:11 UTC

https://benkowlab.blogspot.ru/2018/04/sorry-not-sorry-1ms0rry-atsamaz-gatsoev.html

Blogspot Sorry. Not sorry 1ms0rry. Atsamaz Gatsoev malware business Hey! Here we go for another write up, but this time with some friends :D This is the work of MalwareMustDie feat NibbleHunters! Greetz to...

Post #159 54 Apr 7, 2018, 18:32 UTC

https://github.com/a13xp0p0v/linux-kernel-defence-map/blob/master/README.md - Карта средств защиты в Linux

GitHub linux-kernel-defence-map/README.md at master · a13xp0p0v/linux-kernel-defence-map Linux Kernel Defence Map shows the relationships between vulnerability classes, exploitation techniques, bug detection mechanisms, and defence technologies - linux-kernel-defence-map/README.md at m...

Post #158 51 Apr 7, 2018, 16:00 UTC

На Windows реализация несколько отличается, но суть схожая

Post #157 51 Apr 7, 2018, 15:59 UTC

kaiser.pdf503 KB

Общая суть Spectre & Meltdown патча

Post #156 5 Apr 6, 2018, 20:49 UTC

Forwarded from r0 Crew (Channel) (Bear0)

A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers. https://github.com/mwrlabs/win_driver_plugin #ida #reverse #dukeBarman

GitHub GitHub - FSecureLABS/win_driver_plugin: A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers. A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers. - FSecureLABS/win_driver_plugin

Post #155 54 Mar 30, 2018, 15:51 UTC

https://twitter.com/specterdev/status/979414080472596480?s=12

Twitter Specter The PS4 4.55/FreeBSD BPF kernel exploit writeup is now up on my GitHub repo! The bug is present on any system running FreeBSD such that you have privileges (which we did on PS4). Could be used on other systems for root to ring0 code execution. https://t.co/irpUCdcfEk

Post #154 56 Mar 30, 2018, 01:37 UTC

https://github.com/m0n0ph1/Process-Hollowing

Post #153 56 Mar 29, 2018, 11:42 UTC

https://securelist.com/masha-and-these-bears/84311/