TGViewer Telegram Channel Viewer

Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.15K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #372 · Back to latest

Older Posts 20 shown

Post #371 47 Dec 18, 2018, 06:01 UTC

https://github.com/fboldewin/FastCashMalwareDissected/blob/master/Operation%20Fast%20Cash%20-%20Hidden%20Cobra‘s%20AIX%20PowerPC%20malware%20dissected.pdf - разбор Lazarus

Post #370 46 Dec 17, 2018, 19:48 UTC

https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2018/december/beware-of-deserialisation-in-.net-methods-and-classes-code-execution-via-paste/

Post #369 49 Dec 17, 2018, 11:09 UTC

https://github.com/nospaceships/raw-socket-sniffer - сниффер по Windows без необходимости установки драйвера

GitHub GitHub - nospaceships/raw-socket-sniffer: Packet capture on Windows without a kernel driver Packet capture on Windows without a kernel driver. Contribute to nospaceships/raw-socket-sniffer development by creating an account on GitHub.

Post #368 44 Dec 17, 2018, 11:09 UTC

https://www.zdnet.com/article/sqlite-bug-impacts-thousands-of-apps-including-all-chromium-based-browsers/

ZDNet SQLite bug impacts thousands of apps, including all Chromium-based browsers | ZDNet New 'Magellan' vulnerability will haunt the app ecosystem for years to come.

Post #367 41 Dec 17, 2018, 11:09 UTC

https://rubygems.registry.github.com/hackersql/carbanak_source_code_leak_maybe/tree/master/group_ib_smart_boys/Pegasus исходники Pegasus

GitHub hackersql/carbanak_source_code_leak_maybe Contribute to hackersql/carbanak_source_code_leak_maybe development by creating an account on GitHub.

Post #366 46 Dec 13, 2018, 07:42 UTC

https://research.checkpoint.com/50-adobe-cves-in-50-days/

Check Point Research 50 CVEs in 50 Days: Fuzzing Adobe Reader - Check Point Research Research By: Yoav Alon, Netanel Ben-Simon Introduction The year 2017 was an inflection point in the vulnerability landscape. The number of new vulnerabilities reported that year was around 14,000, which is over twice the number from the year before (see table…

Post #365 40 Dec 13, 2018, 06:21 UTC

https://www.synacktiv.com/posts/exploit/kinibi-tee-trusted-application-exploitation.html

Post #364 38 Dec 12, 2018, 17:48 UTC

https://www.youtube.com/watch?v=egVK-S--GxU&list=PLHlFrzuFU1EVtUOZ3k7f7Nw6CoUnOm4RF&index=16

YouTube Rancho Han - From Graphic Mode To God Mode, Discovery Vulnerabilities of GPU Virtualization For most major virtualization platforms, GPU virtualization is an important component. Different vendors have different implementations. In this talk, I will...

Post #363 37 Dec 12, 2018, 16:21 UTC

https://securelist.com/zero-day-in-windows-kernel-transaction-manager-cve-2018-8611/89253/

Post #362 41 Dec 11, 2018, 14:57 UTC

Курсы MIT по ИБ
https://ocw.mit.edu/courses/electrical-engineering-and-computer-science/6-858-computer-systems-security-fall-2014/video-lectures/

Post #361 6 Dec 11, 2018, 08:08 UTC

Forwarded from Noise Security Bit

Один из докладов, который меня заинтересовал с прошедшего BH Europe, это "BLEEDINGBIT: Your APs Belong to Us", где исследователи нашли уязвимости непосредственно в Bluetooth Low Energy (BLE) микроконтроллерах и продемонстрировали удаленную эксплуатацию этого вектора.

Slides: https://i.blackhat.com/eu-18/Thu-Dec-6/eu-18-Seri-BleedingBit.pdf

Paper: https://i.blackhat.com/eu-18/Thu-Dec-6/eu-18-Seri-BleedingBit-wp.pdf

Demo: https://www.youtube.com/watch?v=D5FIIqLWtYw

Post #360 43 Dec 8, 2018, 21:38 UTC

0927_track1_am_massivescaleusbde.pdf1 MB

Post #359 45 Dec 7, 2018, 15:01 UTC

Подборка ссылок на тему эксплеатации продуктов VMware
https://github.com/xairy/vmware-exploitation

GitHub GitHub - xairy/vmware-exploitation: A collection of links related to VMware escape exploits A collection of links related to VMware escape exploits - xairy/vmware-exploitation

Post #358 42 Dec 7, 2018, 14:04 UTC

https://twitter.com/aionescu/status/1070821886312046593?s=21

Twitter Alex Ionescu The scripts and tools that @pwissenlit and I used to learn and pwn the Windows Notification Facility (WNF) at Black Hat 2018 this year are now posted on our repository: https://t.co/Vm425XNVFo. Please remember to apply November's Patch Tuesday patches!

Post #357 58 Dec 7, 2018, 06:10 UTC

https://github.com/LinusHenze/WebKit-RegEx-Exploit/blob/master/README.md

GitHub LinusHenze/WebKit-RegEx-Exploit Contribute to LinusHenze/WebKit-RegEx-Exploit development by creating an account on GitHub.

Post #356 49 Dec 6, 2018, 15:36 UTC

BadUSB кабель и другое (видео в посте)
https://twitter.com/_MG_/status/1069759065104932864

Twitter _MG_ I am officially looking for work! All things offensive/red, research, & teaching (classes, talks, media, etc). SF Bay Area or remote. Me: https://t.co/W11wOeMBso I’ve been flirting with this, but now I’m all in. Here’s a ridiculous “highlight reel” because…

Post #355 46 Dec 6, 2018, 04:57 UTC

https://twitter.com/olafhartong/status/1069664316411076610?s=21

Twitter Olaf Hartong Super excited to present my ThreatHunting app in 2 days at #BlackHatEU, I'll release it right after on @Splunkbase and https://t.co/7VD87s0px3 #dfir #splunk #sysmon

Post #354 35 Dec 6, 2018, 04:35 UTC

Исследования 0day в Adobe

Post #353 34 Dec 6, 2018, 04:34 UTC

http://blogs.360.cn/post/PoisonNeedles_CVE-2018-15982_EN

Post #352 35 Dec 6, 2018, 04:34 UTC

https://ti.360.net/blog/articles/flash-0day-hacking-team-rat-activities-of-exploiting-latest-flash-0day-vulnerability-and-correlation-analysis-en/

Older posts →

Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →