Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.14K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #558 · Back to latest

Older Posts 20 shown

Post #557 38 May 23, 2019, 07:08 UTC

https://www.tarlogic.com/en/blog/backdoors-modulos-apache/

Tarlogic Security Backdoors in XAMP stack (part III): Apache Modules In this article we will explain how to develop Apache modules to be used in Red Team operations. Backdoors in Apache2.

Post #556 50 May 23, 2019, 07:05 UTC

Говорят, что #0day под Windows:

https://github.com/SandboxEscaper/polarbearrepo

Post #555 33 May 23, 2019, 06:48 UTC

Инструмент сбора фидов из открытых источников

https://github.com/HurricaneLabs/machinae

GitHub GitHub - HurricaneLabs/machinae: Machinae Security Intelligence Collector Machinae Security Intelligence Collector. Contribute to HurricaneLabs/machinae development by creating an account on GitHub.

Post #554 36 May 23, 2019, 05:38 UTC

Анализ Zebrocy #APT28

https://www.welivesecurity.com/2019/05/22/journey-zebrocy-land/

Welivesecurity A journey to Zebrocy land ESET sheds light on commands used by the favorite backdoor of the Sednit group

Post #553 55 May 22, 2019, 08:29 UTC

Think Outside the Scope: Advanced CORS Exploitation Techniques | https://medium.com/@sandh0t/think-outside-the-scope-advanced-cors-exploitation-techniques-dad019c68397

Medium Think Outside the Scope: Advanced CORS Exploitation Techniques Hi everyone,

Post #552 42 May 21, 2019, 13:26 UTC

RCE VMware Fusion 11

https://theevilbit.github.io/posts/vmware_fusion_11_guest_vm_rce_cve-2019-5514/

theevilbit.github.io CVE-2019-5514 - VMware Fusion 11 - Guest VM RCE TL;DR Link to heading You can run an arbitrary command on a VMware Fusion guest VM through a website without any priory knowledge. Basically VMware Fusion is starting up a websocket listening only on the localhost. You can fully control all the VMs (also…

Post #551 35 May 21, 2019, 11:27 UTC

https://remoteawesomethoughts.blogspot.com/2019/05/windows-10-task-schedulerservice.html?m=1

Blogspot Windows 10 - Task Scheduler service - Privilege Escalation/Persistence through DLL planting Abstract I was recently busy doing some reverse on an antivirus solution. During this review, I figured out the Windows 10 Task Schedul...

Post #550 36 May 21, 2019, 10:53 UTC

https://shenaniganslabs.io/2019/05/21/LXD-LPE.html

Shenanigans Labs Linux Privilege Escalation via LXD & Hijacked UNIX Socket Credentials Linux systems running LXD are vulnerable to privilege escalation via multiple attack paths, two of which are published in my “lxd_root” GitHub repository. This blog will go into the details of what I think is a very interesting path - abusing relayed UNIX…

Post #549 37 May 21, 2019, 05:27 UTC

Материалы по безопасности 3G/4G/5G сетей

https://github.com/W00t3k/Awesome-Cellular-Hacking

GitHub GitHub - W00t3k/Awesome-Cellular-Hacking: Awesome-Cellular-Hacking Awesome-Cellular-Hacking. Contribute to W00t3k/Awesome-Cellular-Hacking development by creating an account on GitHub.

Post #548 34 May 21, 2019, 05:20 UTC

DVCW
Damn Vulnerable Crypto Wallet is an extremely insecure Ethereum cryptowallet written in JavaScript.
It has three main modules:
https://gitlab.com/badbounty/dvcw

GitLab Bad Bounty Repo / dvcw · GitLab

Post #547 38 May 20, 2019, 09:48 UTC

Среда для анализа действий атакующего

https://github.com/Cyb3rWard0g/mordor

GitHub GitHub - OTRF/Security-Datasets: Re-play Security Events Re-play Security Events. Contribute to OTRF/Security-Datasets development by creating an account on GitHub.

Post #546 85 May 20, 2019, 09:44 UTC

Приложение для Splunk, ориентированное на сопровождение Threat Hunting процессов

https://github.com/olafhartong/ThreatHunting

GitHub GitHub - olafhartong/ThreatHunting: A Splunk app mapped to MITRE ATT&CK to guide your threat hunts A Splunk app mapped to MITRE ATT&CK to guide your threat hunts - olafhartong/ThreatHunting

Post #545 38 May 19, 2019, 23:04 UTC

Reverse Shell Cheat Sheet
https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Reverse%20Shell%20Cheatsheet.md

GitHub PayloadsAllTheThings/Methodology and Resources/Reverse Shell Cheatsheet.md at master · swisskyrepo/PayloadsAllTheThings A list of useful payloads and bypass for Web Application Security and Pentest/CTF - swisskyrepo/PayloadsAllTheThings

Post #544 56 May 17, 2019, 12:54 UTC

Еще несколько PoC для macOS/iOS

https://github.com/maldiohead/CVE-2019-8540
https://github.com/maldiohead/CVE-2019-null

GitHub GitHub - maldiohead/CVE-2019-8540: Kernel Stack info leak at exportObjectToClient function Kernel Stack info leak at exportObjectToClient function - GitHub - maldiohead/CVE-2019-8540: Kernel Stack info leak at exportObjectToClient function

Post #543 49 May 17, 2019, 12:51 UTC

Обход AMSI средствами PowerShell

http://ha.cker.info/weaponizing-amsi-bypass-with-powershell/

ha.cker.info Weaponizing AMSI bypass with PowerShell IntroductionThe Windows Antimalware Scan Interface (AMSI) is a versatile interface standard that allows applications and services to integrate with any antimalware product that's present on a machin

Post #542 42 May 17, 2019, 12:49 UTC

PoC на уязвимость в ядре XNU
https://github.com/maldiohead/CVE-2019-6207

GitHub maldiohead/CVE-2019-6207 xnu kernel heap info leak. Contribute to maldiohead/CVE-2019-6207 development by creating an account on GitHub.

Post #541 40 May 17, 2019, 12:48 UTC

https://www.zdnet.com/article/microsoft-releases-new-version-of-attack-surface-analyzer-utility/

ZDNet Microsoft releases new version of Attack Surface Analyzer utility New Attack Surface Analyzer 2.0 works on Windows, but also Mac and Linux.

Post #540 7 May 14, 2019, 20:44 UTC

Forwarded from Noise Security Bit

Похоже уязвимостям в процессорах от Интел нет конца и края. Сегодня анонсированы два новых типа side-channel атак с использованием спекулятивных вычислений. Атаки #RIDL (Rogue In-Flight Data Load) и #Fallout (атака на CPU Store Buffers) основаны на Microarchitectural Data Sampling (#MDL) техниках. Обе атаки основаны на том, что могут получить доступ к памяти на центральном процессоре/кэшу (Line Fill Buffers, Load Ports, Store Buffers) и таким образом получать несанкционированный доступ к конфиденциальной информации внутри SGX доменов и обходить изоляцию виртуализации (VTx). Возможность воспроизвести эти вектора из Javascript делают эти атаки довольно опасными для облачной инфраструктуры.

Детали: https://mdsattacks.com/

Кстати исследователи приедут рассказать об этих атаках на offzone.moscow в июне.

Post #539 41 May 14, 2019, 18:36 UTC

https://cpu.fail - ресурс, посвященный уязвимостям в CPU

Post #538 7 May 14, 2019, 10:15 UTC

Forwarded from r0 Crew (Channel)

ANBU - Automatic New Binary Unpacker with PIN DBI Framework https://github.com/Fare9/ANBU #reverse #pin #dukeBarman

GitHub GitHub - Fare9/ANBU: ANBU (Automatic New Binary Unpacker) a tool for me to learn about PIN and about algorithms for generic unpacking. ANBU (Automatic New Binary Unpacker) a tool for me to learn about PIN and about algorithms for generic unpacking. - Fare9/ANBU

Older posts →