Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.14K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #454 · Back to latest

Older Posts 20 shown

Post #453 102 Mar 15, 2019, 12:34 UTC

Hunting_Cyber_Threat_Actors_with.pdf4.7 MB

Применение информации из #SSL #TLS сертификатов

Post #452 56 Mar 15, 2019, 11:06 UTC

https://0ffset.net/reverse-engineering/malware-analysis/analysing-isfb-loader/

0ffset Training Solutions | Practical and Affordable Cyber Security Training Analysing ISFB – The First Loader | 0ffset Training Solutions I'm finally getting round to writing this post - for the past few months I have been analysing different versions of ISFB/Ursnif/Gozi to gain a deeper understanding in the functionality of this specific malware. In this post, I will be detailing how to unpack…

Post #451 6 Mar 15, 2019, 10:21 UTC

Forwarded from r0 Crew (Channel)

Windows Kernel Logic Bug Class: Access Mode Mismatch in IO Manager

Article: https://googleprojectzero.blogspot.com/2019/03/windows-kernel-logic-bug-class-access.html

Another: https://blogs.technet.microsoft.com/srd/2019/03/14/local-privilege-escalation-via-the-windows-i-o-manager-a-variant-finding-collaboration/

#re #expdev #lpe #darw1n

projectzero.google Windows Kernel Logic Bug Class: Access Mode Mismatch in IO Manager Posted by James Forshaw, Project ZeroThis blog post is an in-depth look at an interesting logic b...

Post #450 6 Mar 15, 2019, 10:21 UTC

Forwarded from r0 Crew (Channel)

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team https://github.com/knownsec/pocsuite3 #exploit #dukeBarman

GitHub GitHub - knownsec/pocsuite3: pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404… pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team. - knownsec/pocsuite3

Post #449 50 Mar 14, 2019, 11:46 UTC

https://www.exploit-db.com/exploits/46536

Exploit Database Microsoft Windows MSHTML Engine - 'Edit' Remote Code Execution Microsoft Windows MSHTML Engine - 'Edit' Remote Code Execution. CVE-2019-0541 . local exploit for Windows platform

Post #448 47 Mar 14, 2019, 09:19 UTC

Scripts for the #Ghidra software reverse engineering suite.
https://github.com/ghidraninja/ghidra_scripts#swift_demanglerpy

GitHub GitHub - ghidraninja/ghidra_scripts: Scripts for the Ghidra software reverse engineering suite. Scripts for the Ghidra software reverse engineering suite. - ghidraninja/ghidra_scripts

Post #447 51 Mar 14, 2019, 04:40 UTC

A toolset to make a system look as if it was the victim of an APT attack
https://github.com/NextronSystems/APTSimulator

GitHub GitHub - NextronSystems/APTSimulator: A toolset to make a system look as if it was the victim of an APT attack A toolset to make a system look as if it was the victim of an APT attack - NextronSystems/APTSimulator

Post #446 59 Mar 12, 2019, 08:33 UTC

#ARM Assembly Language http://bob.cs.sonoma.edu/IntroCompOrg-RPi/intro-co-rpi.html

Post #445 58 Mar 12, 2019, 08:25 UTC

https://twitter.com/PythonArsenal/status/1105188252137476097

Twitter PythonArsenal IDAnon - Auto remove license information from IDA Pro database. Based on IDAPython. https://t.co/HEvlTyWMFe

Post #444 58 Mar 12, 2019, 07:00 UTC

Список подкастов на тему cybersecurity:
https://motherboard.vice.com/en_us/article/59vpnx/introducing-cyber-a-hacking-podcast-by-motherboard
https://itunes.apple.com/us/podcast/malicious-life/id1252417787?mt=2&ign-mpt=uo%3D4
https://malicious.life/
https://www.smashingsecurity.com/
https://feeds.megaphone.fm/darknetdiaries
http://hackinghumans.libsyn.com/

Vice Introducing CYBER: A Hacking Podcast by Motherboard Hacking. Hackers. Disinformation campaigns. Encryption. The Cyber. This stuff gets complicated really fast, but Motherboard spends its time embedded in the infosec world so you don't have to.

Post #443 63 Mar 7, 2019, 19:20 UTC

https://github.com/krakow2600/atomic-threat-coverage/blob/master/README.md

GitHub atomic-threat-coverage/README.md at master · krakow2600/atomic-threat-coverage The project was moved here https://github.com/atomic-threat-coverage/atomic-threat-coverage - krakow2600/atomic-threat-coverage

Post #442 62 Mar 7, 2019, 09:44 UTC

ICC-2018-PPT-Kopacsi.pdf1.9 MB

Post #441 65 Mar 7, 2019, 09:44 UTC

What is #MITRE ATT&CK and How Is It Useful
https://www.anomali.com/resources/what-mitre-attck-is-and-how-it-is-useful

Post #440 60 Mar 6, 2019, 14:11 UTC

Automatic Techniques to Systematically Discover New Heap Exploitation Primitives
https://arxiv.org/pdf/1903.00503.pdf

Post #439 6 Mar 5, 2019, 13:15 UTC

Forwarded from r0 Crew (Channel)

This post will explain the process of finding and exploiting a previously unknown vulnerability in a real-world piece of software to achieve code execution. The vulnerability was initially found in 2016 and the vendor was contacted however no response was ever received. Now several years later (March 2019 at time of writing), the vulnerability still exists in the latest version.

https://medium.com/@DanielC7/introduction-to-file-format-fuzzing-exploitation-922143ab2ab3

#re #fuzzing #expdev

Medium Introduction to File Format Fuzzing & Exploitation This post will explain the process of finding and exploiting a previously unknown vulnerability in a real-world piece of software to…

Post #438 Mar 4, 2019, 14:16 UTC

Alaid TechThread pinned «Какие темы материалов наиболее интересны? anonymous poll Разборы бинарных уязвимостей и техник эксплуатации – 4 👍👍👍👍👍👍👍 40% Учебные материалы – 2 👍👍👍👍 20% Разборы веб уязвимостей и техник эксплуатации – 1 👍👍 10% Информация о новых видах угроз и атак –…»

Post #436 66 Mar 4, 2019, 06:47 UTC

de4dot is an open source (GPLv3) .NET #deobfuscator and #unpacker written in C#. It will try its best to restore a packed and obfuscated assembly to almost the original assembly.
https://github.com/0xd4d/de4dot

GitHub GitHub - de4dot/de4dot: .NET deobfuscator and unpacker. .NET deobfuscator and unpacker. Contribute to de4dot/de4dot development by creating an account on GitHub.

Post #435 68 Mar 4, 2019, 06:17 UTC

The Forrester MITRE ATT&CK Evaluation Guide.pdf516.4 KB

Post #434 82 Mar 3, 2019, 07:58 UTC

The Windows Sandbox Paradox (Flashback).pdf3 MB

Post #433 92 Feb 28, 2019, 10:30 UTC

Материалы по #DDoS
https://ru.coursera.org/lecture/ddos-attacks-and-defense/welcome-to-ddos-attack-and-defense-course-fPrNw - курс
https://cert.societegenerale.com/resources/files/IRM-4-DDoS.pdf - CERT Cheat Sheet
https://github.com/topics/stress-testing?o=desc&s=forks

Coursera Welcome to DDoS Attack and Defense Course - DDoS Attacks | Coursera Video created by Система университетов штата Колорадо ...

Older posts →