konik_polanowy

Osobistość

936wpisy
104komentarzy

https://lubimyczytac.pl/profil/127443/joker

konik_polanowy

Osobistość

w Ciekawostki 2022-05-25T00:39:46+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.05.25.md
SigOverinjector - https://github.com/SysSec-KAIST/sigover_injector
Linux.Nasty: Assembly x64 ELF virus - https://www.guitmz.com/linux-nasty-elf-virus/
Exploiting RBCD Using a Normal User Account* - https://www.tiraniddo.dev/2022/05/exploiting-rbcd-using-normal-user.html
Hunting evasive vulnerabilities - https://portswigger.net/research/hunting-evasive-vulnerabilities
SourcePoint is a C2 profile generator for Cobalt Strike command - https://github.com/Tylous/SourcePoint

news-and-links/2022.05.25.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-05-23T00:32:19+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.05.23.md
Hydra with Three Heads: BlackByte & The Future of Ransomware Subsidiary Groups - https://www.advintel.io/post/hydra-with-three-heads-blackbyte-the-future-of-ransomware-subsidiary-groups
Another fast subdomain enumeration tool - https://github.com/duty1g/subcat
Dorks collections list - https://github.com/cipher387/Dorks-collections-list
DNS Tunneling using powershell to download and execute a payload - https://github.com/Octoberfest7/DNS_Tunneling
Awesome RCE techniques - https://github.com/p0dalirius/Awesome-RCE-techniques

news-and-links/2022.05.23.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-05-21T00:29:11+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.05.21.md
A tool for automating interactions with Android devices - https://github.com/user1342/AutoDroid
A PoC project for embedding shellcode to Hint/Name Table - https://github.com/frkngksl/HintInject
Windows Feature Hunter (WFH) - https://github.com/ConsciousHacker/WFH
Constrained Delegation Considerations for Lateral Movement - https://sensepost.com/blog/2022/constrained-delegation-considerations-for-lateral-movement/
No-Fix Local Privilege Escalation Using KrbRelay With Shadow Credentials - https://icyguider.github.io/2022/05/19/NoFix-LPE-Using-KrbRelay-With-Shadow-Credentials.html

news-and-links/2022.05.21.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

Zostań Patronem Hejto i odblokuj dodatkowe korzyści tylko dla Patronów

Włączona możliwość zarabiania na swoich treściach
Całkowity brak reklam na każdym urządzeniu
Oznaczenie w postaci rogala , który świadczy o Twoim wsparciu
Wcześniejszy dostęp, do wybranych funkcji na Hejto

konik_polanowy

Osobistość

w Ciekawostki 2022-05-17T00:39:48+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.05.17.md
Three ways to hack an ATM - https://diablohorn.com/2022/05/14/three-ways-to-hack-an-atm/
TikTok Scraper & Downloader - https://github.com/drawrowfly/tiktok-scraper
From Project File to Code Execution - https://claroty.com/2022/05/11/blog-research-from-project-file-to-code-execution-exploiting-vulnerabilities-in-xinje-plc-program-tool/
Qiling Advanced Binary Emulation Framework - https://github.com/qilingframework/qiling
Browser In The Browser (BITB) Attack - https://mrd0x.com/browser-in-the-browser-phishing-attack/

news-and-links/2022.05.17.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-05-15T00:38:49+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.05.15.md
Awesome cloud enumerator - https://github.com/0xsha/CloudBrute
Multiple bugs chained to takeover Facebook Accounts which uses Gmail - https://ysamm.com/?p=763
iPhone Setup for Reversing and Debugging - https://naehrdine.blogspot.com/2022/05/iphone-setup-for-reversing-and-debugging.html
A machine learning malware analysis framework for Android apps - https://github.com/user1342/DroidDetective
Malicious PDF Generator - https://github.com/jonaslejon/malicious-pdf

news-and-links/2022.05.15.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-05-13T00:36:17+02:00

nk on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.05.13.md
Fuzzing ClamAV with real malware samples - https://mmmds.pl/clamav/
x86 Assembly Guide - https://www.cs.virginia.edu/~evans/cs216/guides/x86.html
Yours Truly, Signed AV Driver: Weaponizing an Antivirus Driver - https://cyber.aon.com/aon_cyber_labs/yours-truly-signed-av-driver-weaponizing-an-antivirus-driver/
(Ex)Change of Pace: UNC2596 Observed Leveraging Vulnerabilities to Deploy Cuba Ransomware - https://www.mandiant.com/resources/unc2596-cuba-ransomware
Release of Technical Report into the AMD Security Processor - https://googleprojectzero.blogspot.com/2022/05/release-of-technical-report-into-amd.html

news-and-links/2022.05.13.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-05-11T00:26:26+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.05.11.md
Introduction to VirtualBox security research - https://blog.doyensec.com/2022/04/26/vbox-fuzzing.html
Reverse Engineering Dust: Game Locations and Map Layout - https://mrxstudios.home.blog/2022/04/25/reverse-engineering-dust-game-locations-and-map-layout/
The Art of Assembly Language - https://www.plantation-productions.com/Webster/www.artofasm.com/Linux/HTML/AoATOC.html
Modern x64 Assembly - https://www.youtube.com/playlist?list=PLKK11Ligqitg9MOX3-0tFT1Rmh3uJp7kA
Learning Linux kernel exploitation - Part 2 - CVE-2022-0847 - https://0x434b.dev/learning-linux-kernel-exploitation-part-2-cve-2022-0847/

news-and-links/2022.05.11.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-05-09T00:35:31+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.05.09.md
Compromising Read-Only Containers with Fileless Malware - https://sysdig.com/blog/containers-read-only-fileless-malware/
AvosLocker Ransomware Variant Abuses Driver File to Disable Anti-Virus, Scans for Log4shell - https://www.trendmicro.com/en_us/research/22/e/avoslocker-ransomware-variant-abuses-driver-file-to-disable-anti-Virus-scans-log4shell.html
Digital Forensics Guide - https://github.com/mikeroyal/Digital-Forensics-Guide
CI/CD Detection Engineering: Dockerizing for Scale, Part 4 - https://www.splunk.com/en_us/blog/security/ci-cd-detection-engineering-dockerizing-for-scale-part-4.html
A Deep Dive into AvosLocker Ransomware - https://cdn.pathfactory.com/assets/10555/contents/400686/13f4424c-05b4-46db-bb9c-6bf9b5436ec4.pdf

news-and-links/2022.05.09.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-05-07T11:41:24+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.05.07.md
Want to learn game hacking? - https://gamehacking.academy/about
A Deep Dive into Avos Locker Ransomware - https://securityscorecard.com/resources/a-deep-dive-into-avos-locker-ransomware
Malware Analysis Series (MAS) – Article 3 - https://exploitreversing.com/2022/05/05/malware-analysis-series-mas-article-3/
The curious case of mavinject.exe - https://fourcore.io/blogs/mavinject-curious-process-injection
Attackers Use Event Logs to Hide Fileless Malware - https://threatpost.com/attackers-use-event-logs-to-hide-fileless-malware/179484/

news-and-links/2022.05.07.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-05-05T00:43:49+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.05.05.md
Defense Evasion Series Part 1 AMSI Bypass - https://dazzyddos.github.io/posts/AMSI-Bypass/
Fuzzing Like A Caveman 6: Binary Only Snapshot Fuzzing Harness - https://h0mbre.github.io/Fuzzing-Like-A-Caveman-6/
Why is memory safety still a concern? - https://docs.google.com/presentation/d/1EscMOcMNOwi-bCgOthjiwIXE30w_SeHk3ahjyY0pX10/edit#slide=i
AWS Targeted by a Package Backfill Attack - https://www.whitesourcesoftware.com/resources/blog/aws-targeted-by-a-package-backfill-attack/
Attackers Use Event Logs to Hide Fileless Malware - https://threatpost.com/attackers-use-event-logs-to-hide-fileless-malware/179484/

news-and-links/2022.05.05.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-05-03T00:37:35+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.05.03.md
Web App Pentesting - HTTP Cookies & Sessions - https://www.youtube.com/watch?v=zHBpJA5XfDk
From a Phishing Page to a Possible Threat Actor - https://marcoramilli.com/2022/04/14/from-a-phishing-page-to-a-possible-threat-actor/
Patching an Embedded OS from 1996 with Ghidra - http://blog.petersobot.com/patching-the-k2500
The Top 5 VMWare Security Features You Can't Do Without - https://www.hub.trimarcsecurity.com/post/the-top-5-vmware-security-features-you-cannot-do-without
Abusing LargePageDrivers to copy shellcode into valid kernel modules - https://vollragm.github.io/posts/abusing-large-page-drivers/

news-and-links/2022.05.03.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-05-01T16:01:06+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.05.01.md
Inside the Black Box - https://www.sentinelone.com/labs/inside-the-black-box-how-we-fuzzed-microsoft-defender-for-iot-and-found-multiple-vulnerabilities/
Making of "Reverse emulating the NES..." - https://www.youtube.com/watch?v=hTlNVUmBA28
Pwntools - Pwn Zero To Hero 0x04 - https://www.youtube.com/watch?v=9wepzpQhhio
No Hardware, No Problem: Emulation and Exploitation - https://blog.grimm-co.com/2022/04/no-hardware-no-problem-emulation-and.html
CONFidence Legends 2021 - https://www.youtube.com/playlist?list=PLnKL6-WWWE_UkE-u0E0z148a66WQIEFFo

news-and-links/2022.05.01.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-05-01T15:04:34+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.04.29.md
Analyzing a Stealer MSI using msitools - https://forensicitguy.github.io/analyzing-stealer-msi-using-msitools/
A not-so-common and stupid privilege escalation - https://decoder.cloud/2022/04/25/a-not-so-common-and-stupid-privilege-escalation/
TOP 20 Open-source tools every Blue Teamer should have - https://www.blueteamsacademy.com/top20/
SecWed 6 Apr 22 | A Case Study of an Incorrect "bitwise and" Optimization in V8 - https://www.youtube.com/watch?v=Ihc9WbtruE8
OffensiveCon22 - Samuel Gross and Amanda Burnett - Attacking JavaScript Engines in 2022 - https://www.youtube.com/watch?v=FK2-1FAbbXA

news-and-links/2022.04.29.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-04-23T11:55:33+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.04.23.md
Ippsecs First Look and Setting up CrowdSec - Stealthfully Forward Malicious Users to Honeypots - https://www.youtube.com/watch?v=2OEDFCo1VXY
RefleXXion is a utility designed to aid in bypassing - https://github.com/hlldz/RefleXXion
Writing a Linux Kernel Remote in 2022 - https://blog.immunityinc.com/p/writing-a-linux-kernel-remote-in-2022/
A Year in Review of 0-days Used In-the-Wild in 2021 - https://googleprojectzero.blogspot.com/2022/04/the-more-you-know-more-you-know-you.html
Mobile MitM: Intercepting Your Android App Traffic On the Go - https://www.eff.org/deeplinks/2022/04/mobile-mitm-intercepting-your-android-app-traffic-go

news-and-links/2022.04.23.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-04-21T18:46:58+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.04.21.md
THCon 2k22 CTF – “Local Card Maker” Writeup - https://lewin.co.il/thcon-2k22-ctf-local-card-maker-writeup/
Scanner for vulnerabilities in container images, file systems - https://github.com/aquasecurity/trivy
Multiple Vulnerabilities in Cisco Expressway - https://firefart.at/post/multiple_vulnerabilities_cisco_expressway/
Blinding Snort: Breaking the Modbus OT Preprocessor - https://claroty.com/2022/04/14/blog-research-blinding-snort-breaking-the-modbus-ot-preprocessor/
The all-in-one Red Team extension for Web Pentester - https://github.com/LasCC/Hack-Tools

news-and-links/2022.04.21.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-04-19T18:44:20+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.04.19.md
The cheat sheet about Java Deserialization vulnerabilities - https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet
Shellcode-Downloader-CreateThread-Execution - https://github.com/VirtualAlllocEx/Shellcode-Downloader-CreateThread-Execution
Burp Suite - Part 4 - Jr. Penetration Tester [Learning Path] - https://www.youtube.com/watch?v=nwfVZSZ9XHM
Shellcode: Loading .NET Assemblies From Memory - https://modexp.wordpress.com/2019/05/10/dotnet-loader-shellcode/
Documenting Sony Memory Stick - https://dmitry.gr/?r=05.Projects&proj=31.%20Memory%20Stick

news-and-links/2022.04.19.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-04-17T11:27:19+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.04.17.md
INCONTROLLER: New State-Sponsored Cyber Attack Tools Target Multiple Industrial Control Systems - https://www.mandiant.com/resources/incontroller-state-sponsored-ics-tool
Click me if you can, Office social engineering with embedded objects - https://www.securify.nl/blog/click-me-if-you-can-office-social-engineering-with-embedded-objects/
Active Directory - Lateral Movement - https://0xstarlight.github.io/posts/Active-Directory-Lateral-Movement/
Reverse engineering course (with radare2) - https://web.archive.org/web/20210217192600/https://artik.blue/reversing
Multi-Stage Offensive Operations with Mythic - https://blog.kyleavery.com/posts/multi-stage-mythic/

news-and-links/2022.04.17.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-04-15T23:13:48+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.04.15.md
In the land of PHP you will always be (use-after-)free - https://adepts.of0x.cc/challenge01-php-uaf/
Data breach statistics by country: first quarter of 2022 - https://surfshark.com/blog/data-breach-statistics-by-country
Obfuscated obfuscation - https://blog.lexfo.fr/dexguard.html
iOS Hacking - A Beginner's Guide to Hacking iOS Apps [2022 Edition] - https://martabyte.github.io/ios/hacking/2022/03/13/ios-hacking-en.html
Azure Security Resources and Notes - https://github.com/rootsecdev/Azure-Red-Team

news-and-links/2022.04.15.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-04-13T19:59:57+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.04.13.md
A list of open source web security scanners - https://github.com/psiinon/open-source-web-scanners
Exploiting CVE-2022-0778, a bug in OpenSSL vis-à-vis WebRTC platforms - https://www.rtcsec.com/article/exploiting-cve-2022-0778-in-openssl-vs-webrtc-platforms/
Malware Campaigns Targeting African Banking Sector - https://threatresearch.ext.hp.com/malware-campaigns-targeting-african-banking-sector/
NotGitBleed - TL;DR - https://www.notgitbleed.com/
What is a Breakpoint - Debugging Explained https://www.youtube.com/watch?v=PVnjYgoX_ck

news-and-links/2022.04.13.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-04-11T19:21:02+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.04.11.md
Navigating the Complexities of Spring4Shell - https://www.netspi.com/blog/executive/application-security/spring4shell/
NIST-based CVE lookup store and API powered by Rust - https://github.com/Exein-io/kepler
Unmanaged Code Execution with .NET Dynamic PInvoke - https://bohops.com/2022/04/02/unmanaged-code-execution-with-net-dynamic-pinvoke/
It’s Raining Shells - How To Find New Attack Primitives In Azure by Andy Robbins - https://www.youtube.com/watch?v=a09_5SCPBZ0
CVE-2022-27666: Exploit esp6 modules in Linux kernel - https://etenal.me/archives/1825

news-and-links/2022.04.11.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

Poprzednia strona

35 36 37

Następna strona