Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.15K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #659 · Back to latest

Older Posts 20 shown

Post #658 53 Sep 3, 2019, 05:53 UTC

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits

https://github.com/mwrlabs/c3

GitHub GitHub - WithSecureLabs/C3: Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still… Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits. - WithSecureLabs/C3

Post #657 7 Sep 2, 2019, 18:12 UTC

Forwarded from r0 Crew (Channel)

DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables https://github.com/googleprojectzero/DrSancov #fuzzing #dukeBarman

GitHub GitHub - googleprojectzero/DrSancov: DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables - googleprojectzero/DrSancov

Post #656 6 Sep 2, 2019, 09:19 UTC

Forwarded from r0 Crew (Channel)

Machine Learning to Deobfuscate Binaries https://github.com/eth-sri/debin #reverse #dukeBarman

GitHub GitHub - eth-sri/debin: Machine Learning to Deobfuscate Binaries Machine Learning to Deobfuscate Binaries. Contribute to eth-sri/debin development by creating an account on GitHub.

Post #655 39 Sep 1, 2019, 16:24 UTC

Rooting RouterOS with a USB Drive
https://medium.com/tenable-techblog/rooting-routeros-with-a-usb-drive-16d7b8665f90

Medium Rooting RouterOS with a USB Drive Putting CVE-2019–15055 to Work

Post #654 7 Sep 1, 2019, 16:23 UTC

Forwarded from r0 Crew (Channel)

lpe is a collection of verified Linux kernel exploits https://github.com/jollheef/lpe #exploit #dukeBarman

GitHub GitHub - jollheef/lpe: collection of verified Linux kernel exploits collection of verified Linux kernel exploits. Contribute to jollheef/lpe development by creating an account on GitHub.

Post #653 8 Sep 1, 2019, 16:23 UTC

Forwarded from r0 Crew (Channel)

BinDiff wrapper script for multiple binary diffing https://github.com/TakahiroHaruyama/ida_haru/tree/master/bindiff #reverse #dukeBarman

GitHub ida_haru/bindiff at master · TakahiroHaruyama/ida_haru scripts/plugins for IDA Pro. Contribute to TakahiroHaruyama/ida_haru development by creating an account on GitHub.

Post #652 45 Aug 30, 2019, 05:27 UTC

QEMU VM Escape
https://blog.bi0s.in/2019/08/24/Pwn/VM-Escape/2019-07-29-qemu-vm-escape-cve-2019-14378/

Post #651 42 Aug 29, 2019, 08:46 UTC

Откртый инструмент для отслеживания изменений и новых образцов различных угроз. Для работы требуется описать протокол сетевого взаимодействия вредоноса.

https://github.com/intezer/MoP/

GitHub GitHub - intezer/MoP: MoP - "Master of Puppets" - Advanced malware tracking framework MoP - "Master of Puppets" - Advanced malware tracking framework - GitHub - intezer/MoP: MoP - "Master of Puppets" - Advanced malware tracking framework

Post #650 60 Aug 24, 2019, 19:09 UTC

C++ библиотка с техниками внедрения кода в процессы для Windows 10 x64

https://github.com/SafeBreach-Labs/pinjectra

GitHub GitHub - SafeBreach-Labs/pinjectra: Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus… Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit) - SafeBreach-Labs/pinjectra

Post #649 7 Aug 23, 2019, 17:31 UTC

Forwarded from Noise Security Bit (dukeBarman)

Автор capstone анонсировал новый проект Qiling https://github.com/qilingframework/qiling Это фреймворк на базе Unicorn для эмуляции в изолированной среде исполняемых файлов популярных форматов: PE, MachO, ELF. Помимо этого заявлена поддержка следующих архитектур: X86, X86_64, Arm, Arm64, Mips. В комплекте к фреймворку идет утилита qltool, которую можно использовать для эмуляции тех же шеллкодов.