Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.14K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #476 · Back to latest

Older Posts 20 shown

Post #475 42 Apr 16, 2019, 19:37 UTC

StealJob: New Android Malware Used by Donot APT Group
https://ti.360.net/blog/articles/stealjob-new-android-malware-used-by-donot-apt-group-en/

Post #474 48 Apr 15, 2019, 12:17 UTC

Simple AV Evasion Symantec and P4wnP1 USB
https://medium.com/@fbotes2/advance-av-evasion-symantec-and-p4wnp1-usb-c7899bcbc6af

Post #472 115 Apr 13, 2019, 16:32 UTC

virustotal-for-investigators.pdf8.8 MB

VirusTotal for Investigators

Post #471 46 Apr 13, 2019, 11:47 UTC

Атаки на JIT в MS Edge

https://i.blackhat.com/asia-19/Fri-March-29/bh-asia-Li-Using-the-JIT-Vulnerability-to-Pwning-Microsoft-Edge.pdf

Post #470 54 Apr 11, 2019, 10:19 UTC

AV WARS: Fighting fire with fire [AV Bypass Technique]
https://www.komodosec.com/post/av-wars-fighting-fire-with-fire

Komodo Cyber AV WARS: Fighting fire with fire [AV Bypass Technique] Back when I started doing red team engagements for Komodo, bypassing AV solutions was quick and trivial, almost a ‘non-brainer.’ Just change some strings, recompile and you’re golden. However, over the last few years, things have changed. AV’s and other endpoint…

Post #469 7 Apr 11, 2019, 07:26 UTC

Forwarded from r0 Crew (Channel)

Chrome 1-day RCE PoC (Array.prototype.map)

https://blog.exodusintel.com/2019/04/03/a-window-of-opportunity/

#re #expdev #rce #1day #browser #darw1n

Exodus Intelligence A window of opportunity: exploiting a Chrome 1day vulnerability This post explores the possibility of developing a working exploit for a vulnerability already patched in the v8 source tree before the fix makes it into a stable Chrome release.

Post #468 44 Apr 11, 2019, 06:31 UTC

Dragonblood: A Security Analysis of WPA3’s SAE Handshake
https://papers.mathyvanhoef.com/dragonblood.pdf

Post #467 44 Apr 10, 2019, 20:21 UTC

DACL Permissions Overwrite Privilege Escalation (CVE-2019-0841)
https://krbtgt.pw/dacl-permissions-overwrite-privilege-escalation-cve-2019-0841/

got 0day? DACL Permissions Overwrite Privilege Escalation (CVE-2019-0841) TL;DR This vulnerability allows low privileged users to hijack file that are owned by NT AUTHORITY\SYSTEM by overwriting permissions on the targeted file. Successful exploitation results in "Full Control" permissions for the low privileged user. Intro…

Post #465 44 Apr 10, 2019, 20:20 UTC

Analysis of a targeted attack exploiting the WinRar CVE-2018-20250 vulnerability
https://www.microsoft.com/security/blog/2019/04/10/analysis-of-a-targeted-attack-exploiting-the-winrar-cve-2018-20250-vulnerability/

Microsoft Security Blog Analysis of a targeted attack exploiting the WinRAR CVE-2018-20250 vulnerability | Microsoft Security Blog A complex attack chain incorporating the CVE-2018-20250 exploit and multiple code execution techniques attempted to run a fileless PowerShell backdoor that could allow an adversary to take full control of compromised machines.

Post #464 58 Apr 10, 2019, 20:20 UTC

A Pentester's Guide - Part 3 (OSINT, Breach Dumps, & Password Spraying)
https://delta.navisec.io/osint-for-pentesters-part-3-password-spraying-methodology/

Post #463 50 Apr 9, 2019, 10:12 UTC

CVE-2019-0211 Apache Root Privilege Escalation
https://github.com/cfreal/exploits/tree/master/CVE-2019-0211-apache

GitHub exploits/CVE-2019-0211-apache at master · cfreal/exploits Some of my exploits. Contribute to cfreal/exploits development by creating an account on GitHub.

Post #462 5 Apr 7, 2019, 16:10 UTC

Forwarded from r0 Crew (Channel)

Ghidra Plugin Development for Vulnerability Research - Part-1 https://www.somersetrecon.com/blog/2019/ghidra-plugin-development-for-vulnerability-research-part-1 #ghidra #dukeBarman

Somerset Recon Ghidra Plugin Development for Vulnerability Research - Part-1 — Somerset Recon Overview On March 5th at the RSA security conference, the National Security Agency (NSA) released a reverse engineering tool called Ghidra. Similar to IDA Pro, Ghidra is a disassembler and decompiler with many powerful features (e.g., plugin support,…

Post #461 101 Apr 4, 2019, 16:28 UTC

1903.04717.pdf898.5 KB

Activation Analysis of a Byte-Based Deep #NeuralNetwork for #Malware #Classification #FireEye

Post #460 59 Mar 29, 2019, 10:31 UTC

https://twitter.com/svblxyz/status/1110829354177712128?s=19

Twitter svbl Hey Red Teams! Wanna see physical security measures? Badges? Code snippets, applications used? Passwords typed and more? Then enjoy the trend of interns filming and sharing their daily routine of working in tech companies.

Post #459 57 Mar 28, 2019, 09:47 UTC

🇰🇵 https://research.checkpoint.com/silivaccine-a-look-inside-north-koreas-anti-virus/

Post #458 71 Mar 27, 2019, 13:34 UTC

Another link between Equation Group and Stuxnet? https://www.a12d404.net/security/2018/08/10/another-link-between-eqgrp-and-stuxnet.html

www.a12d404.net Another link between Equation Group and Stuxnet? ... about security, reversing and other gimmicks.

Post #457 110 Mar 26, 2019, 09:47 UTC

2018-D-Plohmann-CodeCartographersDiary.pdf2.1 MB

Post #456 73 Mar 24, 2019, 22:40 UTC

🔥Выполнение кода при распаковке #WinRAR #RCE #1day https://github.com/WyAtu/CVE-2018-20250 🔥

GitHub GitHub - WyAtu/CVE-2018-20250: exp for https://research.checkpoint.com/extracting-code-execution-from-winrar exp for https://research.checkpoint.com/extracting-code-execution-from-winrar - WyAtu/CVE-2018-20250

Post #455 77 Mar 15, 2019, 13:46 UTC

https://www.mdsec.co.uk/2019/03/silencing-cylance-a-case-study-in-modern-edrs/

MDSec Silencing Cylance: A Case Study in Modern EDRs - MDSec As red teamers regularly operating against mature organisations, we frequently come in to contact with a variety of Endpoint Detection & Response solutions. To better our chances of success in...

Post #454 72 Mar 15, 2019, 13:15 UTC

#OSINT Email-Enum searches mainstream websites and tells you if an #email is registered! https://github.com/Frint0/email-enum

Older posts →