konik_polanowy

Osobistość

936wpisy
104komentarzy

https://lubimyczytac.pl/profil/127443/joker

konik_polanowy

Osobistość

w Ciekawostki 2022-12-06T16:58:50+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.12.06.md
Pre-Auth RCE with CodeQL in Under 20 Minutes - https://frycos.github.io/vulns4free/2022/12/02/rce-in-20-minutes.html
Can we block the addition of local Microsoft Defender Antivirus exclusions? - https://blog.nviso.eu/2022/12/02/can-we-block-the-addition-of-local-microsoft-defender-antivirus-exclusions/
Recon Methods Part 1 – OSINT Host Discovery - https://redsiege.com/tools-techniques/2020/02/recon-methods-part-1-osint-host-discovery/
Dumping and extracting the SpaceX Starlink User Terminal firmware - https://www.esat.kuleuven.be/cosic/blog/dumping-and-extracting-the-spacex-starlink-user-terminal-firmware/
What're you telling me, Ghidra? - https://byte.how/posts/what-are-you-telling-me-ghidra/

news-and-links/2022.12.06.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-12-04T11:59:49+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.12.04.md
GCP Penetration Testing Notes - https://0xd4y.com/2022/10/01/GCP-Penetration-Testing-Notes/
Flare-On 2022: Nur geträumt - https://0xdf.gitlab.io/flare-on-2022/nur_getraumt
The Blind Spots of BloodHound - https://blog.syss.com/posts/bloodhound-blindspots/
Find way more from the Wayback Machine! - https://github.com/xnl-h4ck3r/waymore
Bypassing Mimecast URL and File Inspection - https://www.netspi.com/blog/technical/social-engineering/bypassing-mimecast-email-defenses/

news-and-links/2022.12.04.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-12-02T11:59:28+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.12.02.md
Exploiting CORS Misconfigurations - https://attackshipsonfi.re/p/exploiting-cors-misconfigurations
Exception(al) Failure - Breaking the STM32F1 Read-Out Protection - https://blog.zapb.de/stm32f1-exceptional-failure/
Hacking Smartwatches for Spear Phishing - https://cybervelia.com/?p=1380
SAI #03: Machine Learning Deployment Types, Spark - Architecture and more... - https://swirlai.substack.com/p/sai-03-machine-learning-deployment
[Linux Kernel Exploitation 0x1] Smashing Stack Overflows in the Kernel - https://blog.k3170makan.com/2020/11/linux-kernel-exploitation-0x1-smashing.html

news-and-links/2022.12.02.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

Zostań Patronem Hejto i odblokuj dodatkowe korzyści tylko dla Patronów

Włączona możliwość zarabiania na swoich treściach
Całkowity brak reklam na każdym urządzeniu
Oznaczenie w postaci rogala , który świadczy o Twoim wsparciu
Wcześniejszy dostęp, do wybranych funkcji na Hejto

konik_polanowy

Osobistość

w Ciekawostki 2022-11-30T12:28:13+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.11.30.md
Reverse engineering an EV charger - https://www.mnemonic.io/resources/blog/reverse-engineering-an-ev-charger/
Hyperpom: An Apple Silicon Fuzzer for 64-bit ARM Binaries - https://blog.impalabs.com/2211_hyperpom.html
Experimental Nintendo Switch Emulator written in C# - https://github.com/Ryujinx/Ryujinx
Exploiting Wi-Fi Stack on Tesla Model S - https://keenlab.tencent.com/en/2020/01/02/exploiting-wifi-stack-on-tesla-model-s/
Subdomain Enumeration with DNSSEC - https://www.securesystems.de/blog/subdomain-enumeration-with-DNSSEC/

news-and-links/2022.11.30.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-11-28T11:03:52+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.11.28.md
Lord Of The Ring0 - Part 1 | Introduction - https://idov31.github.io/2022/07/14/lord-of-the-ring0-p1.html
Control Flow Unflattening - https://eybisi.run/Control-Flow-Unflattening/
Diving into the art of userspace exploitation under Android - Introducing E²VA - https://lolcads.github.io/posts/2022/11/diving_into_the_art_of_userspace_exploitation_under_android/
Recognizing patterns in memory - https://www.timdbg.com/posts/recognizing-patterns/
Detect API hashing with YARA - https://0xc0decafe.com/apihash-to-yara

news-and-links/2022.11.28.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-11-26T00:35:16+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.11.26.md
A dive into Microsoft Defender for Identity - https://www.synacktiv.com/en/publications/a-dive-into-microsoft-defender-for-identity.html
CVE-2022-32898: ANE_ProgramCreate() multiple kernel memory corruption - https://0x36.github.io/CVE-2022-32898/
Avoiding direct syscall instructions by using trampolines - https://eversinc33.github.io/posts/avoiding-direct-syscall-instructions/
Breaking Firmware Trust From Pre-EFI: Exploiting Early Boot Phases - https://www.youtube.com/watch?v=Z81s7UIiwmI
Fuzzing the web for mysterious bugs - https://0xacb.com/2022/11/21/recollapse/

news-and-links/2022.11.26.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-11-24T11:35:01+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.11.24.md
Is Hagga Threat Actor (ab)using FSociety framework? - https://marcoramilli.com/2022/11/21/is-hagga-threat-actor-abusing-fsociety-framework/
Hacking a weird TV censoring device - https://www.youtube.com/watch?v=a6EWIh2D1NQ
0XDEAD ZEPPELIN - https://blog.unit221b.com/dont-read-this-blog/0xdead-zeppelin
Impacket Defense Basics With an Azure Lab - https://www.blackhillsinfosec.com/impacket-defense-basics-with-an-azure-lab/
Fantastic Rootkits: And Where to Find Them (Part 1) - https://www.cyberark.com/resources/threat-research-blog/fantastic-rootkits-and-where-to-find-them-part-1

news-and-links/2022.11.24.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-11-22T11:44:46+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.11.22.md
The Continuity of Conti https://blog.bushidotoken.net/2022/11/the-continuity-of-conti.html
The Distributed Computing Manifesto https://www.allthingsdistributed.com/2022/11/amazon-1998-distributed-computing-manifesto.html
Technical Analysis of the RedLine Stealer https://cloudsek.com/technical-analysis-of-the-redline-stealer/
Bypassing AV/EDR Hooks via Vectored Syscall - POC https://www.cyberwarfare.live/blog/vectored-syscall-poc
Breaking the Chrome Sandbox with Mojo https://www.youtube.com/watch?v=qhhJCLy0YBA

news-and-links/2022.11.22.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-11-20T11:37:46+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.11.20.md
Decentralized Identity Attack Surface – Part 1 - https://www.cyberark.com/resources/threat-research-blog/decentralized-identity-attack-surface-part-1
Hacking Salesforce-backed WebApps - https://www.hypn.za.net/blog/2022/11/12/Hacking-Salesforce-backed-WebApps/
Relaying to AD Certificate Services over RPC - https://blog.compass-security.com/2022/11/relaying-to-ad-certificate-services-over-rpc/
HTTP Header Exploitation - https://blog.yeswehack.com/yeswerhackers/http-header-exploitation/
Exploit for Improper Initialization in Linux Linux Kernel CVE-2022-0847 - https://sploitus.com/exploit?id=D2F07A56-EAB9-5BC0-915B-E0D6E88AC81C

news-and-links/2022.11.20.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-11-18T11:39:00+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.11.18.md
House of Muney - Leakless Heap Exploitation Technique - https://maxwelldulin.com/BlogPost/House-of-Muney-Heap-Exploitation
A Look at Modern Windows Kernel Exploitation - https://www.youtube.com/watch?v=nauAlHXrkIk
Leaked Intel Boot Guard keys: What happened? How does it affect the software supply chain? - https://binarly.io/posts/Leaked_Intel_Boot_Guard_keys_What_happened_How_does_it_affect_the_software_supply_chain/index.html
How to create a forensic image of a physical hard drive using FTK Imager - https://blueteamtactics.net/how-to-create-a-forensic-image-of-a-physical-hard-drive-using-ftk-imager-ef167729598f
TempleDAO Exploit Remastered - https://faraz.faith/2022-11-15-templedao-exploit-remastered/

news-and-links/2022.11.18.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-11-16T16:48:46+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.11.16.md
Phishing and Social Engineering - https://drew-sec.github.io/
Stealing passwords from infosec Mastodon - without bypassing CSP - https://portswigger.net/research/stealing-passwords-from-infosec-mastodon-without-bypassing-csp
It’s all in the details: The curious case of an lsass dumper gone undetected - https://dec0ne.github.io/research/2022-11-14-Undetected-Lsass-Dump-Workflow/
Finding malicious PyPI packages through static code analysis: Meet GuardDog - https://securitylabs.datadoghq.com/articles/guarddog-identify-malicious-pypi-packages/
Lazarus Group Uses the DLL Side-Loading Technique (mi.dll) - https://asec.ahnlab.com/en/39828/

news-and-links/2022.11.16.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-11-14T11:19:57+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.11.14.md
Client-side prototype pollution - https://portswigger.net/web-security/prototype-pollution
Reverse Engineering the Apple MultiPeer Connectivity Framework - https://www.evilsocket.net/2022/10/20/Reverse-Engineering-the-Apple-MultiPeer-Connectivity-Framework/
DEF CON 30 - Adam Zabrocki, Alex Tereshkin - Exploitation in the era of Formal Verification - https://www.youtube.com/watch?v=TcIaZ9LW1WE&t
Reverse engineering an EV charger - https://www.mnemonic.io/resources/blog/reverse-engineering-an-ev-charger/
Attacking the Android kernel using the Qualcomm TrustZone - https://tamirzb.com/attacking-android-kernel-using-qualcomm-trustzone

news-and-links/2022.11.14.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-11-12T00:42:45+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.11.12.md
Exploiting crash handlers: LPE on Ubuntu https://alephsecurity.com/2021/02/16/apport-lpe/
Hacking Zyxel IP cameras to gain a root shell http://www.hydrogen18.com/blog/hacking-zyxel-ip-cameras-pt-1.html
Lord Of The Ring0 - Part 1 | Introduction https://idov31.github.io/2022/07/14/lord-of-the-ring0-p1.html
Argo Rollouts at scale: Bringing Automated Rollbacks to 2,100+ services at Monzo https://monzo.com/blog/2022/11/02/argo-rollouts-at-scale
Fantastic Rootkits: And Where to Find Them (Part 1)https://www.cyberark.com/resources/threat-research-blog/fantastic-rootkits-and-where-to-find-them-part-1

news-and-links/2022.11.12.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-11-10T11:25:50+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.11.10.md
A Detailed Analysis of the Quantum Ransomware - https://securityscorecard.pathfactory.com/research/quantum-ransomware
Colorful Vulnerabilities - https://www.cyberark.com/resources/threat-research-blog/colorful-vulnerabilities
Urlscan.io API Inadvertently Leaked Sensitive Data and URLs - https://www.hackread.com/urlscan-io-api-leaks-data-urls/
Executable and Linkable Format 101 - Part 1 Sections and Segments - https://www.intezer.com/blog/research/executable-linkable-format-101-part1-sections-segments/
Exploring ZIP Mark-of-the-Web Bypass Vulnerability (CVE-2022-41049) - https://breakdev.org/zip-motw-bug-analysis/

news-and-links/2022.11.10.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-11-08T11:31:39+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.11.08.md
Android Hardening Guide - https://infosecwriteups.com/android-hardening-guide-2439a77f7e83
Hooking Go from Rust - Hitchhiker’s Guide to the Go-laxy - https://metalbear.co/blog/hooking-go-from-rust-hitchhikers-guide-to-the-go-laxy/
Initial Access - Attacking and Defending MDE - https://misconfig.io/initial-access-attacking-and-defending-mde/
Backporting patches using git - https://blogs.oracle.com/linux/post/backporting-patches-using-git
Automatically install some web hacking/bug bounty tools - https://github.com/supr4s/VPS-web-hacking-tools

news-and-links/2022.11.08.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-11-06T11:39:46+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.11.06.md
Greater Fool Supply-Chain Crisis - https://blog.dshr.org/2022/11/greater-fool-supply-chain-crisis.html
A tale of a simple Apple kernel bug - https://pwning.systems/posts/easy-apple-kernel-bug/
A Very Powerful Clipboard: Analysis of a Samsung in-the-wild exploit chain - https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html
Pixel 6 bootloader: Emulation, ROP - https://eshard.com/posts/pixel6bootloader-2
Skype for Business Audit Part 1 - SKYPErsistence - https://frycos.github.io/vulns4free/2022/09/22/skype-audit-part1.html

news-and-links/2022.11.06.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-11-04T11:22:45+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.11.04.md
SiriSpy - iOS bug allowed apps to eavesdrop on your conversations with Siri - https://rambo.codes/posts/2022-10-25-sirispy-ios-bug-allowed-apps-to-eavesdrop
Open-Obfuscator: A free and open-source obfuscator for mobile applications - https://www.romainthomas.fr/post/22-10-open-obfuscator/
Exploiting Static Site Generators: When Static Is Not Actually Static - https://blog.assetnote.io/2022/10/28/exploiting-static-site-generators/
Abusing Windows’ tokens to compromise Active Directory without touching LSASS - https://sensepost.com/blog/2022/abusing-windows-tokens-to-compromise-active-directory-without-touching-lsass/
Symbolic Triage: Making the Best of a Good Situation - https://www.atredis.com/blog/2022/10/29/symbolic-triage-making-the-best-of-a-good-situation

news-and-links/2022.11.04.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Nebthtet 2022-11-04T11:52:43+01:00

@konik_polanowy heh, dobrze, że do mojej siri zazywczaj tylko bluzgi lecą że jest tępa i nie kmini, że chcę, żeby wybrała ten nr na który i tak najczęściej dzwonię.

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-11-01T11:18:02+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.11.01.md
Changing memory protection using APC - https://blog.offensive.af/changing-memory-protection-using-apc
Yet Another Telerik UI Revisit - https://blog.blacklanternsecurity.com/p/yet-another-telerik-ui-revisit
Browser Exploitation Introduction - https://www.youtube.com/watch?v=bcnV1dbfKcE
Direct Memory Access (DMA) Attack Software - https://github.com/ufrisk/pcileech
Attacking the Android kernel using the Qualcomm TrustZone - https://tamirzb.com/attacking-android-kernel-using-qualcomm-trustzone

news-and-links/2022.11.01.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

ZmiksowanaFretka

★

2022-11-01T11:26:40+01:00

@konik_polanowy co to za scam?

radek-piotr-krasny 2022-11-01T11:42:19+01:00

@ZmiksowanaFretka ten człowiek tostował content na hejto na kilka dni przed jego powstaniem.

ZmiksowanaFretka

★

2022-11-01T11:45:56+01:00

@radek-piotr-krasny a co to ma wspólnego z tym postem?

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-10-30T10:54:41+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.10.30.md
One shell to HANDLE them all - https://www.tarlogic.com/blog/token-handles-abuse-one-shell-to-handle-them-all/
Ring0VBA - Getting Ring0 Using a Goddamn Word Document - https://disrel.com/posts/Ring0VBA-Getting-Ring0-Using-a-Goddamn-Word-Document/
#HITB2022SIN EDR Evasion Primer For Red Teamers - Jorge Gimenez & Karsten Nohl - https://www.youtube.com/watch?v=CKfjLnEMfvI
Stranger Strings: An exploitable flaw in SQLite - https://blog.trailofbits.com/2022/10/25/sqlite-vulnerability-july-2022-library-api/
Using Percona Kubernetes Operators With K3s Part 1: Installation - https://www.percona.com/blog/2022/10/05/using-percona-kubernetes-operators-with-k3s-part-1-installation/

news-and-links/2022.10.30.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-10-28T10:51:10+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.10.28.md
Semgrep: Writing quick rules to verify ideas - https://blog.deesee.xyz/code-review/static-analysis/2022/10/16/semgrep-quick-rule-workflow.html
Automatic unpacking with Qiling framework - https://kernemporium.github.io/posts/unpacking/
Malware Weight Loss the Fast Way with Foremost - https://forensicitguy.github.io/malware-weight-loss-fast-foremost/
Retrospective: hacks in web3 - https://graph.org/Retrospective-hacks-in-web3-10-24
Fighting Golden Ticket Attacks with Privileged Attribute Certificate (PAC) - https://www.varonis.com/blog/pac_requestor-and-golden-ticket-attacks

news-and-links/2022.10.28.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

Poprzednia strona

30 31 32

Następna strona