Post #42 11 Nov 18, 2017, 09:06 UTC Forwarded from r0 Crew (Channel) (Darwin) Vault8_HiveClientServer.zip96 MB Wikileaks опубликовал исходный код системы управления зараженными компьютерамиhttps://wikileaks.org/vault8/hive.pnghttps://wikileaks.org/vault8/document/repo_hive/
Post #41 47 Nov 17, 2017, 22:14 UTC Также полезное по теме: https://www.youtube.com/watch?v=Xv9ckZ4PCmc YouTube Windows kernel: краткий курс молодого бойца (Артем Шишкин) План мастер-класса: - общая физическая подготовка (настройка ОС и инструментов отладки); - инструкция по использованию оружия (навыки работы с WinDBG); - ориентирование на местности (сбор информации в ядре); - знай врага в лицо (механизмы защиты ядра ОС);…
Post #36 46 Nov 16, 2017, 12:57 UTC #AVGater: Getting Local Admin by Abusing the Anti-Virus Quarantinehttps://bogner.sh/2017/11/avgater-getting-local-admin-by-abusing-the-anti-virus-quarantine/
Post #35 51 Nov 14, 2017, 18:32 UTC Неплохой tutorial по z3 и реверсу:https://yurichev.com/blog/CRC_find_poly/?t=1&cn=ZmxleGlibGVfcmVjc18y&refsrc=email&iid=a27eca4719334d5a92eb7091a5f7135b&uid=717932366&nid=244+293670920
Post #34 47 Nov 14, 2017, 18:31 UTC Apple iOS Host Pairing Bypasshttps://labs.mwrinfosecurity.com/advisories/apple-ios-host-pairing-bypass/?t=1&cn=ZmxleGlibGVfcmVjc18y&refsrc=email&iid=a27eca4719334d5a92eb7091a5f7135b&uid=717932366&nid=244+272699400
Post #33 42 Nov 14, 2017, 18:31 UTC https://twitter.com/fs0c131y/status/930115188988182531 Twitter Elliot Alderson Hey @OnePlus! I don't think this EngineerMode APK must be in an user build...🤦♂️ This app is a system app made by @Qualcomm and customised by @OnePlus. It's used by the operator in the factory to test the devices.
Post #32 38 Nov 7, 2017, 10:58 UTC Wiki по атакам на принтеры http://hacking-printers.net/wiki/index.php/Main_Page
Post #31 40 Nov 7, 2017, 09:38 UTC Видео с DEFCON Packet Village: https://www.youtube.com/playlist?list=PL9fPq3eQfaaAxfsGhSV51abnG1LUir72x YouTube DEF CON 25 Packet Hacking Village - YouTube
Post #30 42 Nov 7, 2017, 08:17 UTC Эксплуатация в .NET:https://googleprojectzero.blogspot.ru/2017/04/exploiting-net-managed-dcom.html Blogspot Exploiting .NET Managed DCOM Posted by James Forshaw, Project Zero One of the more interesting classes of security vulnerabilities are those affecting interoperabili...
Post #29 39 Nov 7, 2017, 08:10 UTC https://techincidents.com/penetration-testing-cheat-sheet/ Tech Penetration Testing Cheat Sheet For Windows Machine In the event that your Windows machine has been compromised or for any other reason, this cheat sheet is intended to help.Penetration Testing Cheat Sheet
Post #28 38 Nov 7, 2017, 08:00 UTC и инструмент для скана: https://github.com/haccer/subjack GitHub GitHub - haccer/subjack: DNS Takeover tool written in Go DNS Takeover tool written in Go. Contribute to haccer/subjack development by creating an account on GitHub.
Post #27 35 Nov 7, 2017, 08:00 UTC Статья про угон поддоменов https://cody.su/blog/hostile-subdomain-takeovers/ Cody Zacharias Hostile Subdomain Takeovers++ Advanced Hostile Subdomain Takeover discovery techniques and attack scenarios. This article is intended for people already familiar with subdomain takeovers.
Post #25 36 Nov 7, 2017, 07:53 UTC https://marcoramilli.blogspot.ru/2016/06/from-rop-to-lop-bypassing-control-flow.html?m=1 marcoramilli.blogspot.co.uk From ROP to LOP bypassing Control FLow Enforcement Hacking, Malware Evasions, Penetration testing, Targeted attacks, Malware analysis and everything related to Cyber Security Field.