Channel Public Channel

Security Analysis

@securation

- Offensive Security (Red Teaming / PenTesting)
-AI Security
- BlueTeam (OperationSec, TreatHunting, DFIR)
- Reverse Engineering / Malware Analysis
- Web Security
- Cryptography
- Steganography
- Forensics
@DrPwner

Open in Telegram

Subscribers: 12.6K
Photos: 370
Videos: 54
Links: 933

Showing posts older than #1007 · Back to latest

Older Posts 20 shown

Post #1006 1.83K Mar 4, 2022, 17:21 UTC

Conti Locker Source Code Leak(No password required)

https://github.com/Hacker-Database/Conti-Ransomware-Leaks

Post #1005 1.69K Mar 4, 2022, 15:06 UTC

https://a13xp0p0v.github.io/2021/08/25/lkrg-bypass.html

Alexander Popov Improving the exploit for CVE-2021-26708 in the Linux kernel to bypass LKRG This is the follow-up to my research described in the article "Four Bytes of Power: Exploiting CVE-2021-26708 in the Linux kernel." My PoC exploit for CVE-2021-26708 had a very limited facility for privilege escalation, and I decided to continue my experiments…

Post #1004 1.77K Mar 4, 2022, 12:29 UTC

4300$ Instagram IDOR Bug (2022)

https://medium.com/@nvmeeet/4300-instagram-idor-bug-2022-5386cf492cad
#bugbounty #instagram #vuln
@securation

Medium 4300$ Instagram IDOR Bug (2022) Hello everyone! Today im going to explain how i found a 4300$ IDOR Bug on Instagram.

Post #1003 1.89K Mar 4, 2022, 12:22 UTC

1646163779667.pdf1 MB

Network Infrastructure Security Guidance
@securation

Post #997 1.77K Mar 3, 2022, 09:02 UTC

https://www.youtube.com/watch?v=J6xIohyARSU

YouTube OffensiveCon20 - Alexander Popov - Exploiting a Linux Kernel Vulnerability in the V4L2 Subsystem https://www.offensivecon.org/speakers/2020/alexander-popov.html

Post #996 1.8K Mar 3, 2022, 08:04 UTC

S2.pdf666.2 KB

⭕️ تربیت متخصص امنیت برای کدام بازار کار؟

موضوع گفتگوی انجمن رمز ایران با صحبت های دکتر مهدی خرازی، سرپرست آزمایشگاه امنیت نرم افزار S4Lab :
«نقش نیروی انسانی در امنیت زیرساخت‌های خدمات عمومی»

-امنیت یک امر اقتصادی است.

#security #note
@securation

Post #994 1.58K Mar 2, 2022, 16:35 UTC

⭕️ Spring Cloud Gateway SpEL Remote Code Execution

https://wya.pl/2022/02/26/cve-2022-22947-spel-casting-and-evil-beans/
https://github.com/wdahlenburg/spring-gateway-demo
#cve #rce
@securation

Post #993 1.71K Mar 2, 2022, 14:46 UTC

⭕️ Exploring Windows UAC Bypasses: Techniques and Detection Strategies

https://elastic.github.io/security-research/whitepapers/2022/02/03.exploring-windows-uac-bypass-techniques-detection-strategies/article/
#UAC #bypass
@securation

Post #992 1.53K Mar 2, 2022, 13:08 UTC

Smali2Frida :
generate Frida Hooks from .smali files

https://github.com/apkunpacker/Smali2Frida

GitHub GitHub - apkunpacker/Smali2Frida Contribute to apkunpacker/Smali2Frida development by creating an account on GitHub.

Post #991 1.41K Mar 2, 2022, 13:01 UTC

https://github.com/pwnsdx/Mailsploit

Post #990 1.48K Mar 2, 2022, 12:16 UTC

⭕️ CVE-2022-24112：
Apache APISIX apisix/batch-requests RCE

https://github.com/Mr-xn/CVE-2022-24112
@securation

Post #987 1.57K Mar 1, 2022, 16:47 UTC

https://portswigger.net/daily-swig/private-chat-chrome-skype-extension-with-9m-installs-found-to-be-leaking-user-info

The Daily Swig | Cybersecurity news and views Private chat? Chrome Skype extension with 9m installs found to be leaking user info Microsoft addresses issue at eleventh hour, as researcher publicly discloses ‘trivial’ privacy bug in browser plugin

Post #986 1.54K Mar 1, 2022, 12:58 UTC

https://youtu.be/JRPQM3iklMo

YouTube DFIR Windows Live Response Collection Compromised Windows SystemLive Data Gathering Checklist Run the “Windows Live Response Collection.exe” executable and choose which option you would like (Complete, Memory Dump, Triage, Secure Complete, Secure Memory Dump, or Secure Triage) from an external…

Post #981 1.58K Feb 28, 2022, 21:39 UTC

⭕️Auto-separated x86 ISA reference page

https://namazso.github.io/x86/
@securation

Post #980 1.64K Feb 28, 2022, 18:39 UTC

https://github.blog/2022-02-22-github-advisory-database-now-open-to-community-contributions/

The GitHub Blog GitHub Advisory Database now open to community contributions Anyone can now provide additional information and context to further the community’s understanding and awareness of security advisories.

Post #978 2.31K Feb 28, 2022, 05:44 UTC

⭕️ انجمن هکینگ Raidforums توسط پلیس مصادره شد :)

⭕️ مدیران انجمن هک Raidforum میگویند دامنه رسمی این سایت (Raidforums.com) توسط پلیس مصادره شده و مدیر اصلی سایت ( با نام کاربری Omnipotent ) مدت زیادی است که مفقود شده و احتمالا دستگیر شده است!

این سایت از انجمن‌ساز MyBB استفاده میکند و چند هفته پیش به علت ضعف امنیتی و عدم به‌روز‌رسانی دیتابیس این انجمن هک شد و هکرها بعد از دانلود اطلاعات جداول دیتابیس را Drop کردند که هکرهای دیگر نتوانند به دیتابیس انجمن دسترسی پیدا کنند.

- نکته قابل توجه این است که اکثر دیتاهایی که بصورت عمومی از سرویس های ایرانیان فروخته میشد در این فروم قرار میگرفت!

یکی از مدیران قدیمی این سایت به نام Jaws در تلگرام اعلام کرد که سایت جدیدی با آدرس **.to راه اندازی کرده و از کاربران قدیمی خواست در Raidforums.com لاگین نکنند!

انجمن Raidforums یکی از بزرگترین سایتهای هک تحت وب بود که بیشتر برای درز اطلاعات و خرید و فروش دیتابیس‌ مورد توجه قرار داشت.

#hack #raidforums
@securation

Post #976 1.78K Feb 27, 2022, 08:32 UTC

https://twitter.com/xxNB65/status/1497825651004485634

Twitter NB65 Looks like the Russian state had a little bit of an issue with their Gas compressor. Can someone say, leaking gas, turned off fans, deleted configurations/profiles, access to the file system & an inevitable shutdown? #Ukraine

Post #973 1.99K Feb 26, 2022, 09:28 UTC

⭕️ Http request smuggling vulnerability scanner

https://github.com/Sh1Yo/request_smuggler
#http #smuggling #tool
@securation

GitHub GitHub - Sh1Yo/request_smuggler: Http request smuggling vulnerability scanner Http request smuggling vulnerability scanner. Contribute to Sh1Yo/request_smuggler development by creating an account on GitHub.

Post #971 1.93K Feb 25, 2022, 18:29 UTC

https://kailashbohara.com.np/blog/2022/02/04/bypassing-PHP-functions-to-read-system-file/

Post #968 1.93K Feb 24, 2022, 11:07 UTC

تحلیل آسیب پذیری جدید RCE که روی PFsense کشف شده

https://www.shielder.it/advisories/pfsense-remote-command-execution/
#pfsense #rce
@securation

Shielder Shielder - Remote Code Execution in pfSense <= 2.5.2 pfSense <= 2.5.2 allows authenticated users to inject arbitrary sed-specific code, which leads to an Arbitrary File Write, resulting in a Remote Code Execution. The vulnerability is also exploitable through a Cross-Site Request Forgery.

Older posts →