Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.14K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #940 · Back to latest

Older Posts 20 shown

Post #939 66 Jul 19, 2020, 17:24 UTC

BYPASSING SYMANTEC ENDPOINT PROTECTION FOR FUN & PROFIT (DEFENSE EVASION)

https://cognosec.com/bypassing-symantec-endpoint-protection-for-fun-profit-defense-evasion/

Post #938 56 Jul 15, 2020, 13:01 UTC

Secure Code Review Best Practices

https://blog.hackedu.com/secure-code-review-best-practices

Securityjourney Security Journey Blog Latest News from Security Journey

Post #937 43 Jul 15, 2020, 08:20 UTC

SIGRed – Resolving Your Way into Domain Admin: Exploiting a 17 Year-old Bug in Windows DNS Servers

https://research.checkpoint.com/2020/resolving-your-way-into-domain-admin-exploiting-a-17-year-old-bug-in-windows-dns-servers/

Check Point Research SIGRed - Resolving Your Way into Domain Admin: Exploiting a 17 Year-old Bug in Windows DNS Servers - Check Point Research Research by: Sagi Tzadik Introduction DNS, which is often described as the “phonebook of the internet”, is a network protocol for translating human-friendly computer hostnames into IP addresses. Because it is such a core component of the internet, there are…

Post #936 42 Jul 14, 2020, 08:48 UTC

Introducing Winbindex - the Windows Binaries Index

https://m417z.com/Introducing-Winbindex-the-Windows-Binaries-Index/

M417Z Introducing Winbindex - the Windows Binaries Index I indexed all Windows files which appear in Windows update packages, and created a website which allows to quickly view information about the files and download some of them from Microsoft servers. The files that can be downloaded are executable files (currently…

Post #935 44 Jul 13, 2020, 22:00 UTC

Audio Unit Plug-ins. Legitimate Un-signed Code Execution

https://posts.specterops.io/audio-unit-plug-ins-896d3434a882

Medium Audio Unit Plug-ins Legitimate Un-signed Code Execution

Post #934 67 Jul 8, 2020, 21:21 UTC

Fuzzing the Windows API for AV Evasion

https://winternl.com/fuzzing-the-windows-api-for-av-evasion/

Post #933 67 Jul 8, 2020, 21:20 UTC

An exploitation case study of CVE-2020-1062, a use-after-free vulnerability in IE11

https://www.accenture.com/us-en/blogs/cyber-defense/exploitation-case-study-cve-2020-1062-vulnerability-in-ie11

Accenture Accenture | Security Solutions Make every part of your business more resilient.

Post #932 57 Jul 8, 2020, 21:07 UTC

CreateFile based rootkit. NtCreateFile can create and access directories using names like " ." but CreateFile can't do it.

https://github.com/dalvarezperez/CreateFile_based_rootkit

GitHub GitHub - dalvarezperez/CreateFile_based_rootkit Contribute to dalvarezperez/CreateFile_based_rootkit development by creating an account on GitHub.

Post #931 54 Jul 8, 2020, 19:10 UTC

Restricting SMB-based lateral movement in a Windows environment

https://medium.com/palantir/restricting-smb-based-lateral-movement-in-a-windows-environment-ed033b888721

Medium Restricting SMB-based lateral movement in a Windows environment Palantir’s recommendations for defending your network

Post #930 52 Jul 7, 2020, 08:17 UTC

Reflective PE Injection

https://github.com/DanusMinimus/Injections

GitHub DanusMinimus/Injections A repository where I share my injection implemintations - DanusMinimus/Injections

Post #929 62 Jul 3, 2020, 08:16 UTC

YouTube канал с DEF CON Red Team Village

https://www.youtube.com/channel/UC8nq3PX9coMiqgKH6fw-VCQ/

YouTube Red Team Village The Official DEF CON Team Village continues to have an amazing lineup of speakers and presentations! The talks range from introductory topics of Red Teaming and Ethical Hacking to very advanced techniques and tactics. Speakers go over how they try to mimic…

Post #928 66 Jul 2, 2020, 20:18 UTC

Windows Telemetry service elevation of privilege

https://secret.club/2020/07/01/diagtrack.html

secret club Windows Telemetry service elevation of privilege Today, we will be looking at the “Connected User Experiences and Telemetry service,” also known as “diagtrack.” This article is quite heavy on NTFS-related terminology, so you’ll need to have a good understanding of it.

Post #927 55 Jul 2, 2020, 17:04 UTC

Living Off Windows Land – A New Native File “downldr”

https://labs.sentinelone.com/living-off-windows-land-a-new-native-file-downldr/

SentinelOne Living Off Windows Land - A New Native File "downldr" - SentinelLabs A newly discovered LOLBin offers an alternative to certutil for helping adversaries download files from a remote server. Meet desktopimgdownldr.exe.

Post #926 45 Jul 2, 2020, 16:49 UTC

Story of stealing mail conversation, contacts in mail.ru and myMail iOS applications via XSS

https://medium.com/@kminthein/story-of-stealing-mail-conversation-contacts-in-mail-ru-and-mymail-ios-applications-via-xss-1e49c4ed560

Medium Story of stealing mail conversation, contacts in mail.ru and myMail iOS applications via XSS In June 2020, I found a stored XSS bug that could allow an attacker to steal user email conversations, contacts in mail.ru and myMail iOS…

Post #925 44 Jul 1, 2020, 19:58 UTC

GTFOBins is a curated list of Unix binaries that can be exploited by an attacker to bypass local security restrictions

https://gtfobins.github.io/

Post #924 45 Jul 1, 2020, 19:22 UTC

SMBleedingGhost Writeup Part III: From Remote Read (SMBleed) to RCE
https://blog.zecops.com/vulnerabilities/smbleedingghost-writeup-part-iii-from-remote-read-smbleed-to-rce/

Jamf Jamf Threat Labs | Blog

Post #923 43 Jul 1, 2020, 19:21 UTC

Taking over Azure DevOps Accounts with 1 Click
https://blog.assetnote.io/2020/06/28/subdomain-takeover-to-account-takeover/?v=2

Post #922 41 Jun 30, 2020, 16:04 UTC

Automating DLL Hijack Discovery

https://posts.specterops.io/automating-dll-hijack-discovery-81c4295904b0

Medium Automating DLL Hijack Discovery A dive into Windows DLLs, DLL hijacking, automation, WinAPI, and finding the root cause of shared DLL hijacks.

Post #921 44 Jun 29, 2020, 21:36 UTC

Leonidas, a tool for automating the simulation of attacks against cloud environment

https://github.com/FSecureLABS/leonidas

GitHub GitHub - WithSecureLabs/leonidas: Automated Attack Simulation in the Cloud, complete with detection use cases. Automated Attack Simulation in the Cloud, complete with detection use cases. - GitHub - WithSecureLabs/leonidas: Automated Attack Simulation in the Cloud, complete with detection use cases.

Post #920 56 Jun 27, 2020, 16:31 UTC

Notebook with BloodHound cypher queries

https://bloodhoundnotebook.com/intro.html

Bloodhoundnotebook BloodHound Notebook Project BloodHound Notebook Project Open Source Love Open_Threat_Research Community A community-driven effort to document and share cypher queries via Jupyter Noteboo

Older posts →