TGViewer Telegram Channel Viewer

Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.14K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #860 · Back to latest

Older Posts 20 shown

Post #859 42 Apr 20, 2020, 08:14 UTC

Dissecting the Windows Defender Driver - WdFilter

https://www.n4r1b.com/posts/2020/04/dissecting-the-windows-defender-driver-wdfilter-part-4/

N4R1B Dissecting the Windows Defender Driver - WdFilter (Part 4) In this series of posts I'll be explaining how the Windows Defender main Driver works, in this fourth post we will be focusing on how WdFilter handles different registry operations

Post #858 41 Apr 20, 2020, 06:51 UTC

Kerberos Delegation

https://en.hackndo.com/constrained-unconstrained-delegation/

hackndo Kerberos Delegation In order to allow a service to access another service on behalf of the user, Kerberos Delegation has been implemented.

Post #857 12 Apr 19, 2020, 15:00 UTC

Forwarded from Neuron Hackspace

[Мастер-класс] Практические атаки на интерфейс USB

Сегодня 19 апреля в 19:00 по мск на Youtube пройдет онлайн трансляция мастер-класса по практическими атаками на стек USB. Все атаки будут показаны на реальном оборудовании в прямом эфире, во время трансляции можно будет задавать вопросы докладчику.

Докладчик: Андрей xairy Коновалов
Инженер-программист, работает в Google. Разрабатывает инструменты поиска багов в ядре Linux. Обнаружил множество уязвимостей в ядре Linux, в том числе CVE-2017-7308 в сетевом стеке и CVE-2016-2384 драйвере USB-MIDI. Его блог: xairy.github.io

Ссылка на трансляцию:
youtu.be/0bMxAdq1adc

Сервер Discord:
neuronspace.ru/discord

Donate:
neuronspace.ru/donate

Задавать вопросы можно в чате на Youtube или голосом через Discord.

Post #856 48 Apr 17, 2020, 18:07 UTC

Designing The Adversary Simulation Lab

https://www.mdsec.co.uk/2020/04/designing-the-adversary-simulation-lab/

MDSec Designing The Adversary Simulation Lab - MDSec As some of you will know, we have recently entered into the Red Team training space. Before deciding to create our course now known as “Adversary Simulation and Red Team...

Post #855 48 Apr 17, 2020, 05:45 UTC

fuxploider
File upload vulnerability scanner and exploitation tool

https://github.com/almandin/fuxploider

GitHub GitHub - almandin/fuxploider: File upload vulnerability scanner and exploitation tool. File upload vulnerability scanner and exploitation tool. - almandin/fuxploider

Post #854 47 Apr 17, 2020, 04:36 UTC

Android Kernel Exploitation

https://cloudfuzz.github.io/android-kernel-exploitation/

cloudfuzz.github.io Introduction · Android Kernel Exploitation

Post #853 45 Apr 17, 2020, 04:34 UTC

Deploying of infrastructure and technologies for a SOC as a Service ( SOCasS)

https://medium.com/@ibrahim.ayadhi97/deploying-of-infrastructure-and-technologies-for-a-soc-as-a-service-socass-8e1bbb885149

Medium Deploying of infrastructure and technologies for a SOC as a Service ( SOCasS) In the last couple of years, the number of cyberattacks have gone throw the roof. These attacks not only target single individuals but…

Post #852 39 Apr 16, 2020, 21:42 UTC

Introducing ROADtools - The Azure AD exploration framework

https://dirkjanm.io/introducing-roadtools-and-roadrecon-azure-ad-exploration-framework/

dirkjanm.io Introducing ROADtools - The Azure AD exploration framework Over the past 1.5 years I’ve been doing quite a lot of exploration into Azure AD and how it works under the hood. Azure AD is getting more and more common in enterprises, and thus securing it is becoming a bigger topic. Whereas the traditional Windows Server…

Post #851 38 Apr 16, 2020, 19:21 UTC

Methodology for Static Reverse Engineering of Windows Kernel Drivers

https://posts.specterops.io/methodology-for-static-reverse-engineering-of-windows-kernel-drivers-3115b2efed83

SpecterOps Blog Your new best friend: Introducing BloodHound Community Edition!

Post #850 37 Apr 16, 2020, 10:45 UTC

Self-deployable file hosting service for red teamers

https://github.com/kgretzky/pwndrop

GitHub GitHub - kgretzky/pwndrop: Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over… Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV. - kgretzky/pwndrop

Post #849 41 Apr 16, 2020, 09:44 UTC

Ordinal Numbers and VBA can be fun – who knew!
quick and easy AMSI bypass evades Defender

https://secureyourit.co.uk/wp/2020/04/15/ordinal-numbers-and-vba-can-be-fun-who-knew/
PoC: https://t.co/qerER0TSJ8?amp=1

GitHub rmdavy/AMSI_Ordinal_Bypass Bypass AMSI and Defender using Ordinal Values. Contribute to rmdavy/AMSI_Ordinal_Bypass development by creating an account on GitHub.

Post #848 46 Apr 15, 2020, 14:38 UTC

Red Team Tactics: Utilizing Syscalls in C# - Prerequisite Knowledge

https://jhalon.github.io/utilizing-syscalls-in-csharp-1/

Jack Hacks Red Team Tactics: Utilizing Syscalls in C# - Prerequisite Knowledge Over the past year, the security community - specifically Red Team Operators and Blue Team Defenders - have seen a massive rise in both public and private utilization of System Calls in windows malware for post-exploitation activities, as well as for the…

Post #847 61 Apr 11, 2020, 17:51 UTC

Windows Server 2008R2-2019 NetMan DLL Hijacking

https://itm4n.github.io/windows-server-netman-dll-hijacking/

itm4n’s blog Windows Server 2008R2-2019 NetMan DLL Hijacking What if I told you that all editions of Windows Server, from 2008R2 to 2019, are prone to a DLL Hijacking in the %PATH% directories? What if I also told you that the impacted service runs as NT AUTHORITY\SYSTEM and that the DLL loading can be triggered by…

Post #846 72 Apr 10, 2020, 06:49 UTC

Attack matrix for Kubernetes

https://www.microsoft.com/security/blog/2020/04/02/attack-matrix-kubernetes/

Microsoft News Threat matrix for Kubernetes While Kubernetes has many advantages, it also brings new security challenges.

Post #845 63 Apr 10, 2020, 06:49 UTC

Sandboxie Open Source Code is available for download

https://community.sophos.com/products/sandboxie/f/forum/119641/important-sandboxie-open-source-code-is-available-for-download

Post #844 62 Apr 8, 2020, 17:26 UTC

Universally Evading Sysmon and ETW

http://blog.dylan.codes/evading-sysmon-and-windows-event-logging/

Post #843 69 Apr 7, 2020, 07:01 UTC

VirtualBox VM automation using Python

https://github.com/Pernat1y/vm-automation

Post #841 81 Apr 1, 2020, 18:35 UTC

NTLM Relay

https://en.hackndo.com/ntlm-relay/

hackndo NTLM Relay NTLM relay is a technique of standing between a client and a server to perform actions on the server while impersonating the client. Protections such as SMB signing or MIC allow to limit the actions of an attacker. This article goes into detail about this…

Post #840 67 Apr 1, 2020, 12:55 UTC

Win32k Smash the Ref
New Bug Class and Exploitation Techniques

https://www.ragestorm.net/Win32k%20Smash%20the%20Ref.pdf

https://github.com/gdabah/win32k-bugs/tree/master/SmashTheRef

Post #839 54 Apr 1, 2020, 10:39 UTC

CVE-2020-0796 writeup

https://blog.zecops.com/vulnerabilities/exploiting-smbghost-cve-2020-0796-for-a-local-privilege-escalation-writeup-and-poc/

Jamf Jamf Threat Labs | Blog

Older posts →

Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →