Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.14K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #392 · Back to latest

Older Posts 20 shown

Post #391 61 Jan 25, 2019, 12:50 UTC

https://www.omscs.gatech.edu/cs-6262-network-security - курс CS 6262 доступен на Udacity: https://classroom.udacity.com/courses/ud199

Post #390 56 Jan 25, 2019, 11:18 UTC

https://github.com/itm4n/VBA-RunPE

GitHub GitHub - itm4n/VBA-RunPE: A VBA implementation of the RunPE technique or how to bypass application whitelisting. A VBA implementation of the RunPE technique or how to bypass application whitelisting. - itm4n/VBA-RunPE

Post #389 46 Jan 25, 2019, 10:47 UTC

https://github.com/HarmJ0y/DAMP

GitHub GitHub - HarmJ0y/DAMP: The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification - HarmJ0y/DAMP

Post #388 50 Jan 25, 2019, 10:47 UTC

https://github.com/dirkjanm/PrivExchange

GitHub GitHub - dirkjanm/PrivExchange: Exchange your privileges for Domain Admin privs by abusing Exchange Exchange your privileges for Domain Admin privs by abusing Exchange - dirkjanm/PrivExchange

Post #387 36 Jan 25, 2019, 10:46 UTC

https://github.com/Ullaakut/camerattack

GitHub GitHub - Ullaakut/camerattack: An attack tool designed to remotely disable CCTV camera streams (like in spy movies) An attack tool designed to remotely disable CCTV camera streams (like in spy movies) - Ullaakut/camerattack

Post #386 41 Jan 20, 2019, 21:27 UTC

https://github.com/m1ghtym0/browser-pwn

GitHub GitHub - m1ghtym0/browser-pwn: An updated collection of resources targeting browser-exploitation. An updated collection of resources targeting browser-exploitation. - m1ghtym0/browser-pwn

Post #385 51 Jan 18, 2019, 08:46 UTC

Avoid AV with DLL Side-Loading for fun and advantage with Cobaltstrike
https://medium.com/@viniciuskmax/burlando-antivirus-com-dll-side-loading-por-diversão-e-vantagem-parte-2-ko-d0b40629d810

Medium Burlando antivirus com DLL Side-Loading por diversão e vantagem — parte 2: KO Alguns meses atrás, escrevi sobre o ataque de DLL Side-Loading, mostrando um exemplo real envolvendo um binário legítimo e digitalmente…

Post #384 45 Jan 15, 2019, 15:57 UTC

https://twitter.com/pythonarsenal/status/1085077789919842304?s=21

Twitter PythonArsenal Virtuailor - IDAPython tool for creating automatic C++ virtual tables in IDA Pro. https://t.co/3XgMMWRdtQ

Post #383 41 Jan 15, 2019, 13:35 UTC

https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt

Post #382 48 Jan 14, 2019, 17:52 UTC

https://0x00sec.org/t/bypassing-crowdstrike-falcon-detection-from-phishing-email-to-reverse-shell/10802

0x00sec - The Home of the Hacker Bypassing Crowdstrike Falcon detection, from phishing email to reverse shell Update 2019/01/14: Crowdstrike asked me to share an official statement: “We appreciate you reporting this detection miss to us and allowing us to rapidly address this gap on January 11th. We do have a bug bounty program www.hackerone.com/crowdstrike or via…

Post #381 50 Jan 9, 2019, 14:43 UTC

Интересная уязвимость в Microsoft Visual Studio C++ Compiler https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0546

Post #380 45 Jan 9, 2019, 12:54 UTC

https://www.politico.com/story/2019/01/09/russia-kaspersky-lab-nsa-cybersecurity-1089131

POLITICO Exclusive: How a Russian firm helped catch an alleged NSA data thief The U.S. has accused Kaspersky Lab of working with Russian spies. But sources say the company exposed a massive breach that U.S. authorities missed.

Post #379 44 Jan 7, 2019, 12:11 UTC

https://github.com/saaramar/35C3_Modern_Windows_Userspace_Exploitation

GitHub GitHub - saaramar/35C3_Modern_Windows_Userspace_Exploitation Contribute to saaramar/35C3_Modern_Windows_Userspace_Exploitation development by creating an account on GitHub.

Post #378 3 Jan 6, 2019, 14:04 UTC

Forwarded from OFFZONE

Записи выступлений #OFFZONE 2018 https://www.youtube.com/channel/UCv-eZGMbMt-L6nHabgUasHQ

Post #377 42 Jan 4, 2019, 11:16 UTC

https://artemonsecurity.blogspot.com/2016/10/remsec-driver-analysis-agnitum-driver.html

Blogspot Remsec driver analysis - Agnitum driver exploitation In previous three parts of "Remsec driver analysis" research I've tried to show, how Remsec (aka Cremes) Ring 0 code works and how it is loa...

Post #376 50 Dec 26, 2018, 09:36 UTC

https://blog.technitium.com/2018/12/configuring-dns-over-tls-and-dns-over.html?m=1

Technitium Configuring DNS-over-TLS and DNS-over-HTTPS with any DNS Server The new DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH) protocols are available for enabling end user's privacy and security given the fact t...

Post #375 52 Dec 24, 2018, 21:09 UTC

https://github.com/scanfsec/CVE-2018-15982

Post #374 53 Dec 24, 2018, 10:20 UTC

https://speakerdeck.com/ntddk/the-art-of-de-obfuscation - Доклад по обфускации и деобфускации программ

Speaker Deck The Art of De-obfuscation 第51回情報科学若手の会若手特別講演 https://wakate.org/2018/07/28/51th-general/

Post #373 45 Dec 24, 2018, 10:19 UTC

https://twitter.com/deresz666/status/1076568980712837121

Twitter deresz Using #qb_triton, #IDA Python and #Hexrays Decompiler to deobfuscate code - still lots to be done but starting getting readable results !

Post #372 41 Dec 20, 2018, 11:19 UTC

https://sandboxescaper.blogspot.com/2018/12/readfile-0day.html

Older posts →