TGViewer
Channel Public Channel
Order of Six Angles

Order of Six Angles

@orderofsixangles

Каналу 7 лет

Youtube канал: https://youtube.com/@orderofsixangles

Github: https://github.com/thatskriptkid

Тематические подборки малвари: https://www.orderofsixangles.com/samples

Пишите в личные сообщения канала
Open in Telegram
Subscribers
5.42K
Photos
454
Videos
31
Links
2.2K

Showing posts older than #2363 · Back to latest

Older Posts 20 shown
Post #2362 928
This vulnerability exploits the nuances of the OAuth protocol and iOS’s handling of Custom URL Schemes and Safari browser sessions to steal OAuth Authentication Codes from vulnerable OAuth implementations, thereby allowing an attacker to gain access to a victim’s account.

https://evanconnelly.github.io/post/ios-oauth/
Evan Connelly Mobile OAuth Attacks - iOS URL Scheme Hijacking Revamped Summary We (Julien Ahrens @MrTuxracer and myself @Evan_Connelly) identified nearly 30 popular apps, as well as a feature within iOS itself, vulnerable to an attack in which any installed iOS app from the Apple App Store could perform an account takeover of…
Post #2359 1.02K
а через пару недель этому каналу исполнится также 5 лет 😊
Post #2352 2.9K
a write-up of analyzing a memory dump of a ViewState Deserialization attack

https://github.com/DebugPrivilege/InsightEngineering/tree/main/Debugging%20Case%20Studies/Debug%20Case%20Study%3A%20ViewState%20Deserialization%20Exploitation
GitHub InsightEngineering/Debugging Case Studies/Debug Case Study: ViewState Deserialization Exploitation at main · DebugPrivilege/In… Hardcore Debugging. Contribute to DebugPrivilege/InsightEngineering development by creating an account on GitHub.
Post #2351 899
Я изучаю фазинг и как раз вышло видео с воркшопом

https://www.youtube.com/live/gTISW-5Uy6I?si=sKLw02ws2mco7rza

чтобы паралельно проходить этот воркшоп есть соответствующие материалы на гитхабе

https://github.com/20urc3/Talks/tree/main/Off-By-One
YouTube Introduction to Fuzzing Join 2ourc3 (source) and myself for a session on fuzzing binaries in modern times!
Post #2350 1.35K
Поиск по исходникам малвари (платный, 8 долларов в месяц)

https://malsearch.com/
Post #2349 863
Order of Six Angles Fuzzing embedded systems - Part 1, Introduction As a result I developed a fuzzer to search for vulnerabilities in CGI binaries and a Binary Ninja plugin to search for ROP chains in MIPS binaries, as well as an exploit for one of the crashes triaged. htt…
охуенная статья, жаль что сам фаззинг будет только в следующих частях, но затравка интересная. Спросил у автора когда будет вторая часть, его ответ:

I think the second part will come out in around a month. I have to fix the code of the fuzzer to make it a little more pretty and write the article :D
Post #2348 926
Когда напиздил статей с твитера и несешь в телегу
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →