Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.14K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #699 · Back to latest

Older Posts 20 shown

Post #698 4 Oct 19, 2019, 05:31 UTC

Forwarded from r0 Crew (Channel)

Frida-based general purpose fuzzer https://github.com/demantz/frizzer #fuzzing #frida #dukeBarman

GitHub GitHub - demantz/frizzer: Frida-based general purpose fuzzer Frida-based general purpose fuzzer. Contribute to demantz/frizzer development by creating an account on GitHub.

Post #697 56 Oct 17, 2019, 11:32 UTC

LDAP library for auditing MS AD
https://github.com/skelsec/msldap

GitHub GitHub - skelsec/msldap: LDAP library for auditing MS AD LDAP library for auditing MS AD. Contribute to skelsec/msldap development by creating an account on GitHub.

Post #696 72 Oct 16, 2019, 12:34 UTC

Burpee
A python module that accepts an HTTP request file and returns a dictionary of headers and post data
https://github.com/xscorp/Burpee

GitHub GitHub - xscorp/Burpee: A python module that accepts an HTTP request file and returns a dictionary of headers and post data A python module that accepts an HTTP request file and returns a dictionary of headers and post data - xscorp/Burpee

Post #695 53 Oct 16, 2019, 10:00 UTC

802.11p V2X Hunting
https://harrisonsand.com/802-11p-v2x-hunting/

Harrisonsand 802.11p V2X hunting Autonomous vehicles are becoming closer to reality, and the technologies developed to support them have already started hitting the market. I set out to see if I could find any real-world deployments of these systems.

Post #694 50 Oct 15, 2019, 07:22 UTC

Про безопасность в docker

https://0x00sec.org/t/securing-docker-containers/16913

Post #693 56 Oct 13, 2019, 15:28 UTC

DrSemu
Malware Detection and Classification Tool Based on Dynamic Behavior [The tool is in the early development stage]
https://github.com/secrary/DrSemu

GitHub GitHub - secrary/DrSemu: DrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior DrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior - secrary/DrSemu

Post #692 53 Oct 13, 2019, 15:28 UTC

Vulnerability on a series of D-Link routers allows remote code execution but will not be fixed !!!!
https://www.freetechways.xyz/2019/10/dlink-router-remote-execution.html

Post #691 53 Oct 13, 2019, 15:27 UTC

Security Advisory: Active Directory Open to More NTLM Attacks
https://www.preempt.com/blog/drop-the-mic-2-active-directory-open-to-more-ntlm-attacks/

Post #690 61 Oct 11, 2019, 05:54 UTC

One XSS cheatsheet to rule them all
https://portswigger.net/research/one-xss-cheatsheet-to-rule-them-all

PortSwigger Research One XSS cheatsheet to rule them all PortSwigger are proud to launch our brand new XSS cheatsheet. Our objective was to build the most comprehensive bank of information on bypassing HTML filters and WAFs to achieve XSS, and to present th

Post #689 75 Oct 4, 2019, 06:36 UTC

Windows Notes / Cheatsheet
https://m0chan.github.io/2019/07/30/Windows-Notes-and-Cheatsheet.html

m0chan Blog - Info Sec, CTF & Hacking Windows Notes / Cheatsheet A place for me to store my notes/tricks for Windows Based Systems.

Post #688 6 Oct 2, 2019, 11:26 UTC

Forwarded from r0 Crew (Channel)

[RU] OTUS (Курс по реверсу) #LEAKED

https://cloud.mail.ru/public/4aGL/3EFRUMvq6/

#re #course #Thatskriptkid

Post #687 6 Oct 2, 2019, 11:25 UTC

Forwarded from Noise Security Bit (Aligner)

Уязвимость в Whatsapp (уязвимость в android-gif-drawable либе) c "exploit'ом" (без обхода ASLR)
https://awakened1712.github.io/hacking/hacking-whatsapp-gif-rce/

Home How a double-free bug in WhatsApp turns to RCE In this blog post, I’m going to share about a double-free vulnerability that I discovered in WhatsApp for Android, and how I turned it into an RCE. I informed this to Facebook. Facebook acknowledged and patched it officially in WhatsApp version 2.19.244.…

Post #686 48 Oct 1, 2019, 16:15 UTC

PEpper
An open source script to perform malware static analysis on Portable Executable
https://github.com/Th3Hurrican3/PEpper

GitHub GitHub - 0x0be/PEpper: An open source script to perform malware static analysis on Portable Executable An open source script to perform malware static analysis on Portable Executable - GitHub - 0x0be/PEpper: An open source script to perform malware static analysis on Portable Executable

Post #685 65 Sep 30, 2019, 06:52 UTC

Smoke and Mirrors | Red Teaming with Physical Penetration Testing and Social Engineering
https://threat.tevora.com/smoke-and-mirrors-red-teaming-with-physical-penetration-testing-and-social-engineering/

Threat Blog Smoke and Mirrors | Red Teaming with Physical Penetration Testing and Social Engineering In this post, we will illustrate the roadmap of a physical penetration test and advise how to successfully infiltrate into a corporate environment. This post should be able to clarify areas of focus for a successful physical engagement with an emphasis on…

Post #684 47 Sep 30, 2019, 06:51 UTC

Malware Analysis 101 - Sandboxing
https://medium.com/bugbountywriteup/malware-analysis-101-sandboxing-746a06432334

Medium Malware Analysis 101 - Sandboxing This article explains the pros & cons of dynamic analysis of malware and how to protect yourself best from the cons by sandboxing.

Post #683 72 Sep 28, 2019, 21:21 UTC

PHP 7.1-7.3 disable_functions bypass

https://github.com/mm0r1/exploits/tree/master/php-json-bypass

GitHub exploits/php-json-bypass at master · mm0r1/exploits Pwn stuff. Contribute to mm0r1/exploits development by creating an account on GitHub.

Post #682 56 Sep 26, 2019, 09:14 UTC

Windows‌ ‌Exploitation‌ ‌Tricks:‌ ‌Spoofing‌ ‌Named‌ ‌Pipe‌ ‌Client‌ ‌PID‌

https://googleprojectzero.blogspot.com/2019/09/windows-exploitation-tricks-spoofing.html

projectzero.google Windows‌ ‌Exploitation‌ ‌Tricks:‌ ‌Spoofing‌ ‌Named‌ ‌Pipe‌ ‌Client‌ ‌PID‌ Posted by James Forshaw, Project ZeroWhile researching the Access Mode Mismatch in IO Manager bug...

Post #681 56 Sep 26, 2019, 08:02 UTC

Skydive is an open source real-time network topology and protocols analyzer. It aims to provide a comprehensive way of understanding what is happening in the network infrastructure.

https://github.com/skydive-project/skydive

GitHub GitHub - skydive-project/skydive: An open source real-time network topology and protocols analyzer An open source real-time network topology and protocols analyzer - skydive-project/skydive

Post #680 4 Sep 25, 2019, 15:10 UTC

Forwarded from Noise Security Bit (Alex)

кстати, если кто-то хочет поковырять сэмпл этого импланта, то он уже был замечен на VirusTotal
https://www.virustotal.com/gui/file/0d2ee9ade24163613772fdda201af985d852ab506e3d3e7f07fb3fa8b0853560/detection

Post #679 7 Sep 25, 2019, 15:10 UTC

Forwarded from Noise Security Bit (Alex)

Интересный отчет от CitezenLab в котором очень подробно рассматриваются таргетированные атаки на тибетских активистов с использованием недавно обнародованного iOS импланта
https://citizenlab.ca/2019/09/poison-carp-tibetan-groups-targeted-with-1-click-mobile-exploits/

The Citizen Lab Missing Link This is the first documented case of one-click mobile exploits used to target Tibetan groups, and reflects an escalation in the sophistication of digital espionage threats targeting the community.

Older posts →