Alaid TechThread Инструмент для поиска уязвимостей с помощью символьного исполнения. Ориентирован на работу с прошивками и небольшим объемом анализируемого кода. https://github.com/ChrisTheCoolHut/Firmware_Slap

Доклад по теме с DEFCON 27

https://media.defcon.org/DEF%20CON%2027/DEF%20CON%2027%20presentations/DEFCON-27-Christopher-Roberts-Firmware-Slap.pdf

Post #634 42 Aug 13, 2019, 19:22 UTC

Инструмент для поиска уязвимостей с помощью символьного исполнения. Ориентирован на работу с прошивками и небольшим объемом анализируемого кода.

https://github.com/ChrisTheCoolHut/Firmware_Slap

GitHub GitHub - ChrisTheCoolHut/Firmware_Slap: Discovering vulnerabilities in firmware through concolic analysis and function clustering. Discovering vulnerabilities in firmware through concolic analysis and function clustering. - ChrisTheCoolHut/Firmware_Slap

Post #633 46 Aug 13, 2019, 08:43 UTC

Поиск уязвимых драйверов в Windows

https://eclypsium.com/wp-content/uploads/2019/08/EXTERNAL-Get-off-the-kernel-if-you-cant-drive-DEFCON27.pdf

Post #632 37 Aug 13, 2019, 08:37 UTC

Материалы с DEFCON 27 по использованию WinDbg

https://github.com/hugsy/defcon_27_windbg_workshop/

GitHub GitHub - hugsy/defcon_27_windbg_workshop: DEFCON 27 workshop - Modern Debugging with WinDbg Preview DEFCON 27 workshop - Modern Debugging with WinDbg Preview - hugsy/defcon_27_windbg_workshop

Post #631 44 Aug 12, 2019, 09:09 UTC

Gaining code execution using a malicious SQLite database
https://research.checkpoint.com/select-code_execution-from-using-sqlite/

Check Point Research SELECT code_execution FROM * USING SQLite; - Check Point Research Gaining code execution using a malicious SQLite database Research By: Omer Gull tl;dr SQLite is one of the most deployed software in the world. However, from a security perspective, it has only been examined through the lens of WebSQL and browser exploitation.…

Post #630 42 Aug 11, 2019, 08:02 UTC

https://pagedout.institute/download/PagedOut_001_beta1.pdf

Post #629 46 Aug 10, 2019, 18:38 UTC

https://modexp.wordpress.com/2019/08/09/windows-process-injection-breaking-badder/

modexp Windows Process Injection: Breaking BaDDEr Introduction Dynamic Data Exchange (DDE) is a data sharing protocol while the Dynamic Data Exchange Management Library (DDEML) facilitates sharing of data among applications over the DDE protocol. …

Post #628 9 Aug 9, 2019, 10:39 UTC

Forwarded from r0 Crew (Channel)

Building a custom malware sandbox with PANDA - Part 1 https://adalogics.com/blog/Building-a-custom-malware-sandbox-with-PANDA-Part-1 #reverse #malware #dukeBarman

Post #627 48 Aug 9, 2019, 06:24 UTC

Bypassing the Maginot Line:
Remotely Exploit the Hardware Decoder
on Smartphone

https://i.blackhat.com/USA-19/Wednesday/us-19-Gong-Bypassing-The-Maginot-Line-Remotely-Exploit-The-Hardware-Decoder-On-Smartphone.pdf

Post #626 44 Aug 8, 2019, 16:50 UTC

Исследование бортовой авионики Boeing

https://i.blackhat.com/USA-19/Wednesday/us-19-Santamarta-Arm-IDA-And-Cross-Check-Reversing-The-787-Core-Network.pdf

Post #625 43 Aug 8, 2019, 12:31 UTC

iMessage URL Deserializing Heap Overflow
https://blog.firosolutions.com/exploits/imessage/

Firo Solutions iMessage URL Deserializing Heap Overflow

Post #624 57 Aug 6, 2019, 12:49 UTC

https://blog.talosintelligence.com/2019/08/nvidia-vmware-gpu-rce-vulnerabilities.html

Talosintelligence Vulnerability Spotlight: Multiple vulnerabilities in NVIDIA Windows GPU Display Driver, VMware ESXi, Workstation and Fusion A blog from the world class Intelligence Group, Talos, Cisco's Intelligence Group

Post #623 56 Aug 6, 2019, 07:48 UTC

https://static1.squarespace.com/static/53a64cc2e4b0c63fc41a3320/t/5d48d619208ae80001a24efc/1565054491140/CPP+Dynamic+Type+Recovery.pdf

Post #622 124 Aug 4, 2019, 07:15 UTC

cyber-attack-trends-mid-year-report-2019.pdf3.1 MB

Post #621 57 Aug 3, 2019, 15:51 UTC

https://github.com/s0md3v/goop/blob/master/README.md

GitHub goop/README.md at master · s0md3v/goop Google Search Scraper. Contribute to s0md3v/goop development by creating an account on GitHub.

Post #620 6 Aug 2, 2019, 08:43 UTC

Forwarded from r0 Crew (Channel)

All videos from "Objective by the Sea, v2.0" were uploaded https://www.youtube.com/playlist?list=PLliknDIoYszvTDaWyTh6SYiTccmwOsws8 #conference #obts #dukeBarman

Post #619 75 Aug 2, 2019, 04:54 UTC

A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting

https://github.com/AdrianVollmer/PowerHub/

GitHub GitHub - AdrianVollmer/PowerHub: A post exploitation tool based on a web application, focusing on bypassing endpoint protection… A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting - AdrianVollmer/PowerHub

Older posts →