Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.14K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #839 · Back to latest

Older Posts 20 shown

Post #838 55 Mar 31, 2020, 11:21 UTC

OWASP IoTGoat for IoT hacking training

https://github.com/OWASP/IoTGoat

GitHub GitHub - OWASP/IoTGoat: IoTGoat is a deliberately insecure firmware created to educate software developers and security professionals… IoTGoat is a deliberately insecure firmware created to educate software developers and security professionals with testing commonly found vulnerabilities in IoT devices. - OWASP/IoTGoat

Post #837 56 Mar 30, 2020, 14:57 UTC

Local Privilege Escalation exploit for CVE-2020-0796

https://github.com/danigargu/CVE-2020-0796

GitHub GitHub - danigargu/CVE-2020-0796: CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost - danigargu/CVE-2020-0796

Post #836 60 Mar 30, 2020, 09:35 UTC

Octopus C2

https://shells.systems/octopus-v1-0-stable-cobalt-strike-deployment-much-more/

Shells.Systems Octopus v1.0 stable: Cobalt Strike deployment & much more! - Shells.Systems Estimated Reading Time: 4 minutes After months of releasing the first version of Octopus, I’m more than glad to announce that the stable version of Octopus is out! During the past few months, I worked with talented people to enhance Octopus capabilities and…

Post #835 79 Mar 27, 2020, 19:57 UTC

https://twitter.com/specterops/status/1243623526046871552?s=21

Twitter SpecterOps Starting April 6th, SpecterOps will be presenting a week of webinars while we collectively work from home in response to Covid-19. Each day is a different 30 minute talk given by one of our experts from our Adversary Simulation, Detection, and Adversary Resilience…

Post #834 85 Mar 24, 2020, 18:14 UTC

Hypervisor From Scratch – Part 8: How To Do Magic With Hypervisor!

https://rayanfam.com/topics/hypervisor-from-scratch-part-8/

Rayanfam Blog Hypervisor From Scratch – Part 8: How To Do Magic With Hypervisor! We write about Windows Internals, Hypervisors, Linux, and Networks.

Post #833 66 Mar 24, 2020, 18:11 UTC

Microsoft Administrative Tier Model

https://windowssecurity.ca/2020/03/23/mitigate-credential-theft-with-administrative-tier-model/

Post #832 64 Mar 23, 2020, 18:22 UTC

Remote Image Upload Leads to RCE (Inject Malicious Code to PHP-GD Image)

https://medium.com/@asdqwedev/remote-image-upload-leads-to-rce-inject-malicious-code-to-php-gd-image-90e1e8b2aada

Medium Remote Image Upload Leads to RCE (Inject Malicious Code to PHP-GD Image) بسم الله الرحمن الرحيم

Post #831 62 Mar 23, 2020, 16:06 UTC

C2concealer: a C2 Malleable Profile Generator for Cobalt Strike

https://fortynorthsecurity.com/blog/introducing-c2concealer/

FortyNorth Security Blog Introducing C2concealer: a C2 Malleable Profile Generator for Cobalt Strike C2concealer is a python3 command-line tool that generates c2 malleable profiles for use with Cobalt Strike. Looking to get up and running quick? Code is available here. C2concealer: what's the story?Red team assessments and penetration tests involve a ton…

Post #830 68 Mar 21, 2020, 07:44 UTC

Red Team notes

https://dmcxblue.gitbook.io/red-team-notes/

dmcxblue.gitbook.io Introduction | Red Team Notes

Post #829 69 Mar 19, 2020, 17:33 UTC

LDAPFragger: Command and Control over LDAP attributes

https://blog.fox-it.com/2020/03/19/ldapfragger-command-and-control-over-ldap-attributes/

Fox-IT International blog LDAPFragger: Command and Control over LDAP attributes Written by Rindert Kramer Introduction A while back during a penetration test of an internal network, we encountered physically segmented networks. These networks contained workstations joined to t…

Post #828 63 Mar 19, 2020, 10:06 UTC

DNS for red team purposes

https://blog.redteam.pl/2020/03/dns-c2-rebinding-fast-flux.html

blog.redteam.pl DNS for red team purposes red team, blue team, penetration testing, red teaming, threat hunting, digital forensics, incident response, cyber security, IT security

Post #827 70 Mar 18, 2020, 13:19 UTC

Hiding your .NET - Event Tracing for Windows

https://www.mdsec.co.uk/2020/03/hiding-your-net-etw/

MDSec Hiding Your .NET – ETW - MDSec After the introduction of PowerShell detection capabilities, attackers did what you expect and migrated over to less scrutinised technologies, such as .NET. Fast-forward a few years and many of us...

Post #826 84 Mar 15, 2020, 20:02 UTC

Offensive Development with GitHub Actions

https://www.mdsec.co.uk/2020/03/offensive-development-with-github-actions/

MDSec Offensive Development with GitHub Actions - MDSec Introduction Actions is a CI/CD pipeline, built into GitHub, which was made generally available back in November 2019. Actions allows us to build, test and deploy our code based on triggers...

Post #825 71 Mar 15, 2020, 17:35 UTC

Icebox is a Virtual Machine Introspection solution that enable you to stealthily trace and debug any process (kernel or user). It's based on project Winbagility.

https://github.com/thalium/icebox

GitHub Winbagility/Winbagility [ARCHIVED] mov rax, ${Thalium/IceBox}; jmp rax;. Contribute to Winbagility/Winbagility development by creating an account on GitHub.

Post #824 77 Mar 15, 2020, 08:15 UTC

Modern Binary Exploitation course

https://github.com/rpisec/mbe

GitHub GitHub - RPISEC/MBE: Course materials for Modern Binary Exploitation by RPISEC Course materials for Modern Binary Exploitation by RPISEC - GitHub - RPISEC/MBE: Course materials for Modern Binary Exploitation by RPISEC

Post #823 81 Mar 13, 2020, 17:00 UTC

https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc/htmlview#gid=0

Post #822 75 Mar 13, 2020, 16:57 UTC

Info about various C2s and lab environment used to test them

https://howto.thec2matrix.com/

Thec2Matrix The C2 Matrix | C2 Matrix Welcome to the C2 Matrix!!

Post #821 71 Mar 12, 2020, 07:48 UTC

Scanner for CVE-2020-0796 - SMBv3 RCE

https://github.com/ollypwn/SMBGhost

GitHub GitHub - ly4k/SMBGhost: Scanner for CVE-2020-0796 - SMBv3 RCE Scanner for CVE-2020-0796 - SMBv3 RCE. Contribute to ly4k/SMBGhost development by creating an account on GitHub.

Post #820 58 Mar 12, 2020, 07:47 UTC

pickl3
Windows active user credential phishing tool

https://github.com/hlldz/pickl3

GitHub GitHub - hlldz/pickl3: Windows active user credential phishing tool Windows active user credential phishing tool. Contribute to hlldz/pickl3 development by creating an account on GitHub.

Post #819 54 Mar 11, 2020, 21:24 UTC

Advanced process monitoring techniques in offensive operations

https://outflank.nl/blog/2020/03/11/red-team-tactics-advanced-process-monitoring-techniques-in-offensive-operations/

Older posts →