Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.14K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #779 · Back to latest

Older Posts 20 shown

Post #778 38 Feb 20, 2020, 13:13 UTC

The Missing LNK — Correlating User Search LNK files

https://www.fireeye.com/blog/threat-research/2020/02/the-missing-lnk-correlating-user-search-lnk-files.html

Google Cloud Mandiant Cybersecurity Consulting Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.

Post #777 43 Feb 20, 2020, 11:10 UTC

SQLi blinder
Framework for blind boolean-based sql injections explotation.

https://github.com/sorokinpf/sqli_blinder

GitHub GitHub - sorokinpf/sqli_blinder: Framework for blind boolean-based sql injections exploatation. Use it if sqlmap does shit. Framework for blind boolean-based sql injections exploatation. Use it if sqlmap does shit. - sorokinpf/sqli_blinder

Post #776 52 Feb 19, 2020, 16:47 UTC

Bypassing User Group Policy

https://medium.com/tenable-techblog/bypass-windows-10-user-group-policy-and-more-with-this-one-weird-trick-552d4bc5cc1b

Medium Bypass Windows 10 User Group Policy (and more) with this One Weird Trick I‘m going to share an (ab)use of a Windows feature which can result in bypassing User Group Policy (as well as a few other interesting…

Post #775 45 Feb 19, 2020, 16:03 UTC

Backdooring IIS

https://www.mdsec.co.uk/2020/02/iis-raid-backdooring-iis-using-native-modules/

MDSec IIS Raid – Backdooring IIS Using Native Modules - MDSec Introduction Back in 2018, PaloAlto Unit42 publicly documented RGDoor, an IIS backdoor used by the APT34. The article highlighted some details which sparked my interest and inspired me to write...

Post #774 58 Feb 18, 2020, 21:36 UTC

hashtopolis
A Hashcat wrapper for distributed hashcracking

https://github.com/s3inlc/hashtopolis

GitHub GitHub - hashtopolis/server: Hashtopolis - distributed password cracking with Hashcat Hashtopolis - distributed password cracking with Hashcat - hashtopolis/server

Post #773 61 Feb 15, 2020, 16:42 UTC

Detecting Memory Corruption Bugs With HWASan

https://android-developers.googleblog.com/2020/02/detecting-memory-corruption-bugs-with-hwasan.html?m=1

Android Developers Blog Detecting Memory Corruption Bugs With HWASan Posted by Evgenii Stepanov, Staff Software Engineer, Dynamic Tools Native code in memory-unsafe languages like C and C++ is often vuln...

Post #772 53 Feb 15, 2020, 13:14 UTC

CVE-2020-0668

https://itm4n.github.io/cve-2020-0668-windows-service-tracing-eop/

itm4n’s blog CVE-2020-0668 - A Trivial Privilege Escalation Bug in Windows Service Tracing In this post, I’ll discuss an arbitrary file move vulnerability I found in Windows Service Tracing. From my testing, it affected all versions of Windows from Vista to 10 but it’s probably even older because this feature was already present in XP.

Post #771 78 Feb 12, 2020, 18:56 UTC

Introducing BloodHound 3.0

https://posts.specterops.io/introducing-bloodhound-3-0-c00e77ff0aa6

Medium Introducing BloodHound 3.0

Post #770 58 Feb 11, 2020, 11:54 UTC

x0rro — A PE/ELF/MachO Crypter for x86 and x86_64 Based on Radare2


https://iwantmore.pizza/posts/x0rro.html

Post #769 60 Feb 11, 2020, 06:56 UTC

DKOM – Now with Symbolic Links!

https://windows-internals.com/dkom-now-with-symbolic-links/

Post #768 54 Feb 11, 2020, 06:47 UTC

Official VirusTotal Plugin for IDA Pro 7

https://blog.virustotal.com/2020/02/official-virustotal-plugin-for-ida-pro-7.html

Virustotal Official VirusTotal Plugin for IDA Pro 7 ATTENTION : In order to use the content search functionality you will need to have access to VT Intelligence . If you want to jump str...

Post #767 47 Feb 11, 2020, 06:47 UTC

Network data manipulation on the fly

https://blog.redteam.pl/2020/02/network-data-manipulation-on-fly.html

Post #766 48 Feb 10, 2020, 17:26 UTC

Attacking AD

https://identityaccessdotmanagement.files.wordpress.com/2020/01/attcking-ad-for-fun-and-profit-1.pdf

Post #765 78 Feb 7, 2020, 18:19 UTC

Forging SWIFT MT Payment Messages for fun and pr... research!

https://labs.f-secure.com/blog/forging-swift-mt-payment-messages

Post #764 96 Feb 7, 2020, 11:08 UTC

Critical Bluetooth Vulnerability in Android (CVE-2020-0022)
https://insinuator.net/2020/02/critical-bluetooth-vulnerability-in-android-cve-2020-0022/

Post #763 2 Feb 5, 2020, 14:47 UTC

Forwarded from r0 Crew (Channel)

Skeleton project for your own GRUB-based bootkit https://github.com/mgrube/GRUBKit #exploitation

GitHub GitHub - mgrube/GRUBKit: Skeleton project for your own GRUB-based bootkit Skeleton project for your own GRUB-based bootkit. Contribute to mgrube/GRUBKit development by creating an account on GitHub.

Post #762 65 Feb 4, 2020, 07:17 UTC

.NET Scripting languages (Boolang) in Red Teaming

https://www.blackhillsinfosec.com/red-teamers-cookbook-byoi-bring-your-own-interpreter/

Black Hills Information Security, Inc. Red Teamer's Cookbook: BYOI (Bring Your Own Interpreter) - Black Hills Information Security, Inc. Marcello Salvati // This fairly lengthy blog post aims at providing Red Team Operators ideas on how to incorporate BYOI tradecraft into their own custom tooling and get those creative […]

Post #761 48 Feb 4, 2020, 03:00 UTC

CVE-2019-18988

http://whynotsecurity.com/blog/teamviewer/

WhyNotSecurity TeamViewer Oh man where to even begin with this one. This was a crazy ride and I learned a ton along the way.

Post #760 62 Jan 28, 2020, 19:22 UTC

Automating of Azure misconfiguration attacks

https://posts.specterops.io/attacking-azure-azure-ad-and-introducing-powerzure-ca70b330511a

Medium Attacking Azure, Azure AD, and Introducing PowerZure Interacting with Azure, offensively

Post #759 63 Jan 27, 2020, 20:25 UTC

Using .NET with Aggressor scripting for automating of lateral movement & persistence

https://posts.specterops.io/move-faster-stay-longer-6b4efab9c644

Medium Move faster, Stay longer Offensive operators typically have their set of “go to” post-exploitation tools and methodologies. Among these, is Cobalt Strike — a very…

Older posts →