Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.15K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #228 · Back to latest

Older Posts 20 shown

Post #227 75 Jul 4, 2018, 11:37 UTC

https://github.com/quoscient/octopus

GitHub GitHub - FuzzingLabs/octopus: Security Analysis tool for WebAssembly module (wasm) and Blockchain Smart Contracts (BTC/ETH/NEO/EOS) Security Analysis tool for WebAssembly module (wasm) and Blockchain Smart Contracts (BTC/ETH/NEO/EOS) - FuzzingLabs/octopus

Post #226 64 Jul 4, 2018, 11:34 UTC

https://github.com/Patrowl/PatrowlManager

GitHub GitHub - Patrowl/PatrowlManager: PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform - Patrowl/PatrowlManager

Post #225 49 Jul 4, 2018, 11:03 UTC

https://github.com/mwrlabs/dref

GitHub GitHub - ReversecLabs/dref: DNS Rebinding Exploitation Framework DNS Rebinding Exploitation Framework . Contribute to ReversecLabs/dref development by creating an account on GitHub.

Post #224 44 Jul 4, 2018, 10:59 UTC

https://github.com/necst/crave

GitHub necst/crave Framework to automatically test and explore the capabilities of generic AV engines - necst/crave

Post #223 37 Jul 4, 2018, 10:57 UTC

https://gist.github.com/Neo23x0/fd9af35c5061578025d00838c215dfe4

Gist Typical False Positive Hashes Typical False Positive Hashes. GitHub Gist: instantly share code, notes, and snippets.

Post #222 45 Jun 24, 2018, 22:34 UTC

Data Insertion in Bitcoins Blockchain.pdf469.3 KB

Post #221 5 Jun 20, 2018, 13:45 UTC

Forwarded from r0 Crew (Channel) (Bear0)

Static instrumentation based on executable file formats http://romainthomas.fr/slides/18-06-Recon18-Formats-Instrumentation.pdf #reverse #dukeBarman

Post #220 59 Jun 20, 2018, 06:46 UTC

https://academy.yandex.ru/events/system_administration/msk-2018/

Post #219 49 Jun 20, 2018, 06:30 UTC

https://www.cyberscoop.com/olympic-destroyer-kaspersky-biochemical-research/

CyberScoop Russian-linked group tied to Winter Olympics attack is now targeting biochemical researchers The same Russian-linked hacking group responsible for a historic cyberattack on the 2018 Winter Olympics is now targeting biochemical research and domestic financial organizations.

Post #218 34 Jun 20, 2018, 06:26 UTC

https://twitter.com/marcan42/status/1008981518159511553

Twitter Hector Martin 💉💉 HP iLO4 authentication bypass: curl -H "Connection: AAAAAAAAAAAAAAAAAAAAAAAAAAAAA" No, that's not a crash PoC. That's a full blown auth bypass. sscanf into fixed buffer overwrites a flag field that bypasses auth. Yes, really. airbus-seclab.github.io/ilo/SSTIC2018…

Post #217 31 Jun 20, 2018, 06:25 UTC

https://github.com/iGio90/frick

GitHub GitHub - iGio90/frick: frick - aka the first debugger built on top of frida frick - aka the first debugger built on top of frida - iGio90/frick

Post #216 36 Jun 14, 2018, 11:43 UTC

https://github.com/redmed666/mal6raph

GitHub redmed666/mal6raph Contribute to mal6raph development by creating an account on GitHub.

Post #215 44 Jun 13, 2018, 19:11 UTC

https://www.twitch.tv/videos/271347409

Twitch Twitch is the world's leading video platform and community for gamers.

Post #214 35 Jun 13, 2018, 19:07 UTC

https://www.volexity.com/blog/2018/06/07/patchwork-apt-group-targets-us-think-tanks/

Volexity Patchwork APT Group Targets US Think Tanks In March and April 2018, Volexity identified multiple spear phishing campaigns attributed to Patchwork, an Indian APT group also known as Dropping Elephant. This increase in threat activity was consistent with other observations documented over the last few…

Post #213 42 Jun 13, 2018, 19:07 UTC

https://gizmodo.com/deepfake-videos-are-getting-impossibly-good-1826759848?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+gizmodo%2Ffull+%28Gizmodo%29

Gizmodo Deepfake Videos Are Getting Impossibly Good Fake news sucks, and as those eerily accurate videos of a lip-synced Barack Obama demonstrated last year, it’s soon going to get a hell of a lot worse. As a newly revealed video-manipulation system shows, super-realistic fake videos are improving faster than…

Post #212 5 Jun 8, 2018, 06:49 UTC

Forwarded from r0 Crew (Channel) (Bear0)

CVE-2018-5002 - Adobe Flash Zero-Day Leveraged for Targeted Attack in Middle East
https://www.icebrg.io/blog/adobe-flash-zero-day-targeted-attack

CVE-2018-5002 – Analysis of the Second Wave of Flash Zero-day Exploit in 2018
http://blogs.360.cn/blog/cve-2018-5002-en/

Sample for Flash 0 Day - CVE-2018-5002

1. XLSX file with ActiveX Control to download 1st stage SWF
2. 1st stage SWF downloads 2nd stage AES encrypted SWF
3. 1st stage SWF decrypts and loads the 2nd stage SWF (0 day)

https://www.virustotal.com/#/file/0b4f0d8d57fd1cb9b4408013aa7fe5986339ce66ad09c941e76626b5d872e0b5/details

Decrypted SWF for CVE-2018-5002, the full hash is:
f63a51e78116bebfa1780736d343c9eb

#expdev #flash #darw1n

Post #211 4 Jun 7, 2018, 14:12 UTC

Forwarded from r0 Crew (Channel) (Bear0)

VUzzer: application-aware evolutionary fuzzing strategy that does not require any prior knowledge of the application or input format.

http://sharcs-project.eu/m/filer_public/48/8c/488c5fb7-9aad-4c87-ab9c-5ff251ebc73d/vuzzer_ndss17.pdf

https://github.com/vusec/vuzzer #fuzzing #MorteNoir