Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.14K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #819 · Back to latest

Older Posts 20 shown

Post #818 55 Mar 11, 2020, 13:38 UTC

This video presents two demos of LVI (Load Value Injection) proof of concept attacks.

https://www.youtube.com/watch?v=goy8XRXFlh4

YouTube LVI (Load Value Injection) Demo Video This video presents two demos of LVI (Load Value Injection) proof of concept attacks. In the first, the attacker redirects the victim code execution like in a ROP (return-oriented programming) attack. In the second, zero is injected as an AES-NI round key…

Post #817 72 Mar 10, 2020, 18:42 UTC

An Offensive Kerberos Overview

https://posts.specterops.io/kerberosity-killed-the-domain-an-offensive-kerberos-overview-eb04b1402c61

SpecterOps Blog - SpecterOps Your new best friend: Introducing BloodHound Community Edition!

Post #816 45 Mar 10, 2020, 18:16 UTC

C3 integration with Covenant and Donut

https://labs.f-secure.com/blog/making-donuts-explode-updates-to-the-c3-framework/

Post #815 50 Mar 10, 2020, 09:47 UTC

https://twitter.com/taviso/status/1237105815414124549

Twitter Tavis Ormandy I have something fun for you, I pulled the javascript interpreter out of Avast and ported it to Linux 😆 This runs unsandboxed as SYSTEM, any vulns are wormable pre-auth RCE on 400M endpoints ¯\_(ツ)_/¯ github.com/taviso/avscript 🐧

Post #814 41 Mar 10, 2020, 09:47 UTC

Avast Antivirus JavaScript Interpreter
The main Avast antivirus process is called AvastSvc.exe, which runs as SYSTEM.

https://github.com/taviso/avscript

GitHub GitHub - taviso/avscript: Avast JavaScript Interactive Shell Avast JavaScript Interactive Shell . Contribute to taviso/avscript development by creating an account on GitHub.

Post #813 44 Mar 9, 2020, 14:59 UTC

Pass-the-Hash & Administrative Tier Model

https://windowssecurity.ca/2020/03/09/pass-the-hash-is-still-a-threat/

Post #812 52 Mar 9, 2020, 14:46 UTC

NTLM Scanner

https://github.com/preempt/ntlm-scanner

GitHub GitHub - preempt/ntlm-scanner: A simple python tool based on Impacket that tests servers for various known NTLM vulnerabilities A simple python tool based on Impacket that tests servers for various known NTLM vulnerabilities - preempt/ntlm-scanner

Post #811 52 Mar 9, 2020, 07:14 UTC

List of open source C2 frameworks

https://pentestit.com/list-of-open-source-c2-post-exploitation-frameworks/

PenTestIT List of Open Source C2 Post-Exploitation Frameworks This post is an attempt at creating a list of open source C2 Post-Exploitation Frameworks targetting multiple operating systems.

Post #810 38 Mar 9, 2020, 05:52 UTC

https://bugs.chromium.org/p/project-zero/issues/detail?id=1982

Post #809 44 Mar 7, 2020, 20:26 UTC

PeaceMaker Threat Detection

https://github.com/D4stiny/PeaceMaker

GitHub GitHub - D4stiny/PeaceMaker: PeaceMaker Threat Detection is a Windows kernel-based application that detects advanced techniques… PeaceMaker Threat Detection is a Windows kernel-based application that detects advanced techniques used by malware. - D4stiny/PeaceMaker

Post #808 42 Mar 7, 2020, 19:19 UTC

Callidus. C2 tool that uses O365 services as communication channels

https://3xpl01tc0d3r.blogspot.com/2020/03/introduction-to-callidus.html

Blogspot Introduction to Callidus Blogs related to information security.

Post #807 45 Mar 7, 2020, 08:33 UTC

Exploiting an accidentally discovered V8 RCE

https://zon8.re/posts/exploiting-an-accidentally-discovered-v8-rce/

zon8.re Exploiting an Accidentally Discovered V8 RCE Please start opening your eyes, if you have something that crashes, don’t just ignore it, don’t just click away… Take the time to look at what happened, if you surf to a page with your web browser and your web browser disappears, and you surf to the page…

Post #806 51 Mar 6, 2020, 10:37 UTC

Обновился проект OffensiveCSharp

https://github.com/matterpreter/OffensiveCSharp

GitHub GitHub - matterpreter/OffensiveCSharp: Collection of Offensive C# Tooling Collection of Offensive C# Tooling. Contribute to matterpreter/OffensiveCSharp development by creating an account on GitHub.

Post #805 5 Mar 6, 2020, 06:23 UTC

Forwarded from r0 Crew (Channel)

Canadian Furious Beaver is a tool for hijacking IRPs handler in Windows drivers https://github.com/hugsy/CFB #exploitation #windows #dukeBarman

Post #804 44 Mar 5, 2020, 20:08 UTC

CVE-2020-2555: Deserialization bug in Oracle’s Weblogic server

https://www.thezdi.com/blog/2020/3/5/cve-2020-2555-rce-through-a-deserialization-bug-in-oracles-weblogic-server

Zero Day Initiative Zero Day Initiative — CVE-2020-2555: RCE Through a Deserialization Bug in Oracle’s WebLogic Server Insecure deserialization vulnerabilities have become a popular target for attackers/researchers against Java web applications. These vulnerabilities often lead to reliable remote code execution and are generally difficult to patch. In this blog post, we will…

Post #803 49 Mar 5, 2020, 09:28 UTC

Weaponizing a Lazarus Group Implant

https://objective-see.com/blog/blog_0x54.html

objective-see.org Weaponizing a Lazarus Group Implant repurposing a 1st-stage loader, to execute custom 'fileless' payloads

Post #802 50 Mar 4, 2020, 17:02 UTC

Malware Analysis and Reverse Engineering course

https://class.malware.re/

Post #801 51 Mar 4, 2020, 10:59 UTC

Extracting embedded payloads from malware

https://medium.com/@ryancor/extracting-embedded-payloads-from-malware-aaca8e9aa1a9

Medium Extracting Embedded Payloads From Malware One of my all time favorite subfields of reverse engineering is the dissection of viruses. In this article I will be exploring malware…

Post #800 43 Mar 4, 2020, 07:25 UTC

Sysmon Threat Analysis Guide

https://www.varonis.com/blog/sysmon-and-threat-detection-exploring-the-sysmon-log/

Inside Out Security Sysmon Threat Analysis Guide In my various pentesting experiments, I'll pretend to be a blue team defender and try to work out the attack. If you have good security eyes, you can search for…

Post #799 51 Mar 3, 2020, 07:55 UTC

Fuzzer benchmarking as a service

https://github.com/google/fuzzbench

GitHub GitHub - google/fuzzbench: FuzzBench - Fuzzer benchmarking as a service. FuzzBench - Fuzzer benchmarking as a service. Contribute to google/fuzzbench development by creating an account on GitHub.

Older posts →