konik_polanowy

Osobistość

936wpisy
104komentarzy

https://lubimyczytac.pl/profil/127443/joker

konik_polanowy

Osobistość

w Ciekawostki 2022-04-09T13:49:32+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.04.09.md
Pwning Microsoft Azure Defender for IoT | Multiple Flaws Allow Remote Code Execution for All - https://www.sentinelone.com/labs/pwning-microsoft-azure-defender-for-iot-multiple-flaws-allow-remote-code-execution-for-all/
Basic Linux Memory Forensics - Dumping Memory and Files with DD - Analyzing Metttle/Meterpreter - https://www.youtube.com/watch?v=uYWTfWV3dQI
Reverse Engineering (RE) Challenge Walkthroughs - PicoCTF 2022 - https://www.youtube.com/watch?v=l6Lt1sWZOUU
Anatomy of a breach - https://cloud-platform-assets.azurewebsites.net/anatomy-of-a-breach/
ImpressCMS: from unauthenticated SQL injection to RCE - https://karmainsecurity.com/impresscms-from-unauthenticated-sqli-to-rce

news-and-links/2022.04.09.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-04-07T19:18:47+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.04.07.md
Data Exfiltration using RedDrop - https://medium.com/maverislabs/data-exfiltration-using-reddrop-13bcbad7acb0
A curated checklist of 300+ tips for protecting digital security and privacy in 2021 - https://github.com/Lissy93/personal-security-checklist
Dirty Pipe Explained - CVE-2022-0847 - https://www.hackthebox.com/blog/Dirty-Pipe-Explained-CVE-2022-0847
λ-2D: An Exploration of Drawing as Programming Language, Featuring Ideas from Lambda Calculus - https://www.media.mit.edu/projects/2d-an-exploration-of-drawing-as-programming-language-featuring-ideas-from-lambda-calculus/overview/
Nim on the Attack: Process Injection Using Nim and the Windows API - https://huskyhacks.dev/2021/07/17/nim-exploit-dev/amp/

news-and-links/2022.04.07.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-04-05T20:26:31+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.04.05.md
ImpressCMS: from unauthenticated SQL injection to RCE - https://karmainsecurity.com/impresscms-from-unauthenticated-sqli-to-rce
PHP Supply Chain Attack on PEAR - https://blog.sonarsource.com/php-supply-chain-attack-on-pear
Rule for hashcat or john - https://github.com/clem9669/hashcat-rule
Reverse-engineering a mysterious Univac computer board - https://www.righto.com/2022/04/reverse-engineering-mysterious-univac.html
How I hacked an ESA's experimental satellite - https://www.deadf00d.com/post/how-to-hack-an-esa-experimental-satellite.html

news-and-links/2022.04.05.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

Zostań Patronem Hejto i odblokuj dodatkowe korzyści tylko dla Patronów

Włączona możliwość zarabiania na swoich treściach
Całkowity brak reklam na każdym urządzeniu
Oznaczenie w postaci rogala , który świadczy o Twoim wsparciu
Wcześniejszy dostęp, do wybranych funkcji na Hejto

konik_polanowy

Osobistość

w Ciekawostki 2022-04-03T00:19:16+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.04.03.md
A step-by-step analysis of the Russian APT Turla backdoor called TinyTurla - https://cybergeeks.tech/a-step-by-step-analysis-of-the-russian-apt-turla-backdoor-called-tinyturla/
FORCEDENTRY: Sandbox Escape - https://googleprojectzero.blogspot.com/2022/03/forcedentry-sandbox-escape.html
Red Team's SIEM - https://github.com/outflanknl/RedELK
Burp Suite Extension: AWS Signer 2.0 Release - https://www.netspi.com/blog/technical/web-application-penetration-testing/burp-suite-extension-aws-signer-2/
How The Tables Have Turned: An analysis of two new Linux vulnerabilities in nf_tables - https://blog.dbouman.nl/2022/04/02/How-The-Tables-Have-Turned-CVE-2022-1015-1016/

news-and-links/2022.04.03.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-04-01T21:24:11+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.04.01.md
A proof of concept for a clickjacking attack on macOS - https://github.com/breakpointHQ/TCC-ClickJacking
Broken Access: Posting to Google private groups through any user in the group - https://elbs.medium.com/broken-access-posting-to-google-private-groups-through-any-user-in-the-group-3becfa818894
Active Directory Computer Account SMB Relaying Attack - https://www.praetorian.com/blog/active-directory-computer-account-smb-relaying-attack/
Mapping AD relationship using BloodHound - https://vk9-sec.com/mapping-ad-relationship-using-bloodhound/
reconFTW - https://github.com/six2dez/reconftw

news-and-links/2022.04.01.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-03-30T08:33:15+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.03.30.md
List of awesome reverse engineering resources - https://github.com/wtsxDev/reverse-engineering
BGInflode - https://www.youtube.com/watch?v=HeACU-lBC24
Active Directory forest trusts part 2 - Trust transitivity and finding a trust bypass - https://dirkjanm.io/active-directory-forest-trusts-part-two-trust-transitivity/
Bypassing AppLocker with C# - https://github.com/o1mate/AppLocker-Bypass
A collection of Red Team focused tools, scripts, and notes - https://github.com/threatexpress/red-team-scripts

news-and-links/2022.03.30.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-03-28T11:37:03+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.03.28.md
Memory Scanning Evasion - https://www.youtube.com/watch?v=yO77AGUjDwQ
FitM, the Fuzzer in the Middle - https://github.com/FGSect/FitM
SSD Advisory – Exchange Server GetWacInfo Information Disclosure Vulnerability - https://ssd-disclosure.com/ssd-advisory-exchange-server-getwacinfo-information-disclosure-vulnerability/
Hexway — Pentest as a Service self-hosted universal platform - https://hexway.io/
Linternals: Virtual Memory [0x02] - https://sam4k.com/linternals-virtual-memory-0x02/

news-and-links/2022.03.28.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-03-26T11:39:25+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.03.26.md
Evolved phishing: Device registration trick adds to phishers’ toolbox for victims without MFA - https://www.microsoft.com/security/blog/2022/01/26/evolved-phishing-device-registration-trick-adds-to-phishers-toolbox-for-victims-without-mfa/
x64dbg Demo | CrackMe Challenges - https://www.youtube.com/watch?v=fBPj5yEJgck
Intro to Embedded RE: UART Discovery and Firmware Extraction via UBoot - https://voidstarsec.com/blog//2022/01/27/uart-uboot-and-usb
A web front-end for password cracking and analytics - https://github.com/hashview/hashview
All About DLL Hijacking - My Favorite Persistence Method - https://www.youtube.com/watch?v=3eROsG_WNpE

news-and-links/2022.03.26.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-03-22T14:47:41+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.03.22.md
A Primer On Android Forensics - https://nex.sx/tech/2022/01/28/a-primer-on-android-forensics.html
Reversing embedded device bootloader (U-Boot) - p.2 - https://www.shielder.com/blog/2022/03/reversing-embedded-device-bootloader-u-boot-p.2/
Password spraying and MFA bypasses in the modern security landscape - https://www.sprocketsecurity.com/blog/how-to-bypass-mfa-all-day#
Active Directory Trust Considerations - https://www.skaylink.com/insights/blog/active-directory-trust-considerations/
On the Security of Smartphone Unlock PINs - https://dl.acm.org/doi/pdf/10.1145/3473040

news-and-links/2022.03.22.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-03-20T11:08:36+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.03.20.md
Program for determining types of files for Windows, Linux and MacOS - https://github.com/horsicq/Detect-It-Easy
A Fast, Extensible Progress Bar for Python and CLI - https://github.com/tqdm/tqdm
Four Bytes of Power: Exploiting CVE-2021-26708 in the Linux kernel - https://a13xp0p0v.github.io/2021/02/09/CVE-2021-26708.html
Domain Escalation – Machine Accounts - https://pentestlab.blog/2022/02/01/machine-accounts/
Comma Separated Vulnerabilities - https://www.contextis.com/en/blog/comma-separated-vulnerabilities

news-and-links/2022.03.20.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-03-18T13:32:02+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.03.18.md
Tools for gathering information and actions forensic - https://github.com/danieldurnea/FBI-tools
Telegram Trilateration - https://github.com/jkctech/Telegram-Trilateration
AWESOME-Azure-Policy - https://github.com/globalbao/awesome-azure-policy
Ansible playbook to deploy a phishing engagement in the cloud - https://github.com/ralphte/build_a_phish
Taking the pain out of C2 Infrastructure (Part 1) - https://byt3bl33d3r.substack.com/p/taking-the-pain-out-of-c2-infrastructure

news-and-links/2022.03.18.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-03-16T12:00:42+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.03.16.md
Black Hat Europe 2021 - https://www.youtube.com/playlist?app=desktop&list=PLH15HpR5qRsW62N-GLRb1q56Zr7sm10rF
Merlin is a cross-platform post-exploitation HTTP/2C2 - https://github.com/Ne0nd0g/merlin
Exploring mkfifo / nc Reverse Shell - https://www.youtube.com/watch?v=_q_ZCy-hEqg
DogWhisperer’s SharpHound Cheat Sheet - https://insinuator.net/2021/05/dogwhisperers-sharphound-cheat-sheet/
Hash identification program - https://github.com/Michaeldim02/houndsniff

news-and-links/2022.03.16.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-03-14T11:49:59+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.03.14.md
Reverse Tunneling made easy for pentesters, by pentesters - https://github.com/sysdream/ligolo
Linux containers in 500 lines of code - https://blog.lizzie.io/linux-containers-in-500-loc.html
Escaping privileged containers for fun - https://pwning.systems/posts/escaping-containers-for-fun/
Algorithms for Modern Hardware - https://en.algorithmica.org/hpc/
Forensic Analysis Of Xiaomi IoT Ecosystem - https://www.forensicfocus.com/webinars/forensic-analysis-of-xiaomi-iot-ecosystem/

news-and-links/2022.03.14.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-03-12T10:33:28+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.03.12.md
Creating Your Very Own x64 PE Packer/Protector from Scratch using C++ - https://www.codeproject.com/Articles/5317556/Creating-Your-Very-Own-x64-PE-Packer-Protector-fro
Dynamically extracting the encryption key from a simple ransomware - https://0x00sec.org/t/dynamically-extracting-the-encryption-key-from-a-simple-ransomware/28379
Reversing embedded device bootloader (U-Boot) - p.1 - https://www.shielder.it/blog/2022/03/reversing-embedded-device-bootloader-u-boot-p.1/
SSD Advisory – NETGEAR DGND3700v2 PreAuth Root Access - https://ssd-disclosure.com/ssd-advisory-netgear-dgnd3700v2-preauth-root-access/
Put an io_uring on it: Exploiting the Linux Kernel - https://www.graplsecurity.com/post/iou-ring-exploiting-the-linux-kernel

news-and-links/2022.03.12.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-03-10T11:21:55+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.03.10.md
Alan C2 Framework 6.0 - Alan + JavaScript - https://www.youtube.com/watch?v=8AvE0SpvBDY
Python Create Your Own Tool Series - https://github.com/dievus/PythonCreateYourOwnSeries
Abusing Kerberos Constrained Delegation without Protocol Transition - https://snovvcrash.rocks/2022/03/06/abusing-kcd-without-protocol-transition.html
ntroducing RunOF – Arbitrary BOF tool - https://labs.nettitude.com/blog/introducing-runof-arbitrary-bof-tool/
Demystifying Modern Windows Rootkits - https://www.youtube.com/watch?v=1H9tEfkjFXs

news-and-links/2022.03.10.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-03-08T13:23:15+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.03.08.md
Re-ReBreakCaptcha: Breaking Google’s ReCaptcha v2 using.. Google.. Again - https://east-ee.com/2022/02/28/1367/
2021 Year In Review - https://thedfirreport.com/2022/03/07/2021-year-in-review/
SharkBot: a new generation of Android Trojans is targeting banks in Europe - https://www.cleafy.com/cleafy-labs/sharkbot-a-new-generation-of-android-trojan-is-targeting-banks-in-europe
The Dirty Pipe Vulnerability - https://dirtypipe.cm4all.com/
Welcome To The Biggest Collection Of CTF Sites - https://ctfsites.github.io/

news-and-links/2022.03.08.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-03-06T11:16:57+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.03.06.md
File System Hacking: FAT32 Deep Dive - https://www.youtube.com/watch?v=giVfqICb2J4
New Linux Vulnerability CVE-2022-0492 Affecting Cgroups: Can Containers Escape? - https://unit42.paloaltonetworks.com/cve-2022-0492-cgroups/
SMS PVA Part 2: Underground Service for Cybercriminals - https://www.trendmicro.com/en_us/research/22/b/sms-pva-cybercriminals-part-2.html
TeaBot is now spreading across the globe - https://www.cleafy.com/cleafy-labs/teabot-is-now-spreading-across-the-globe
Lua Devirtualization Part 1: Introduction - https://ferib.dev/blog.php?l=post/Lua_Devirtualization_Part_1_Introduction

news-and-links/2022.03.06.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-03-04T15:27:33+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.03.04.md
Xenomorph: A newly hatched Banking Trojan - https://www.threatfabric.com/blogs/xenomorph-a-newly-hatched-banking-trojan.html
(How to Write a (Lisp) Interpreter (in Python)) - https://norvig.com/lispy.html
Reversing Games with... Hashcat???- https://wuffs.org/blog/reversing-games-with-hashcat
The Hunt for HiddenArt - https://blog.adaptivemobile.com/the-hunt-for-hiddenart
Writing Your Own Sudo - https://rtpg.co/2022/02/13/your-own-sudo.htmlhttps://rtpg.co/2022/02/13/your-own-sudo.html

news-and-links/2022.03.04.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-03-02T15:08:04+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.03.02.md
[stream] USB: Reverse Engineering and Writing Drivers - https://www.youtube.com/watch?v=is9wVOKeIjQ&t=53s
Exploitation Mitigations - https://github.com/nccgroup/exploit_mitigations
Programmatically calling into the Android runtime from ADB shell commands - https://raccoon.onyxbits.de/blog/programmatically-talking-to-the-android-system-adb-shell/
ZDI-CAN-12671: Windows Kernel DoS/Privilege Escalation via a NULL Pointer Deref - https://www.zerodayinitiative.com/blog/2021/1/27/zdi-can-12671-windows-kernel-dosprivilege-escalation-via-a-null-pointer-deref
Triaging A Malicious Docker Container - https://sysdig.com/blog/triaging-malicious-docker-container/

news-and-links/2022.03.02.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-02-28T18:25:03+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.02.28.md
Steal Credentials & Bypass 2FA Using noVNC - https://mrd0x.com/bypass-2fa-using-novnc/
GitHub Advisory Database - https://github.com/github/advisory-database
How to Decrypt the Files Encrypted by the Hive Ransomware - https://lifars.com/2022/02/how-to-decrypt-the-files-encrypted-by-the-hive-ransomware/
Insecure Direct Object Reference (IDOR): Definition, Examples & How to Find - https://highon.coffee/blog/insecure-direct-object-reference-idor/
Circumventing Deep Packet Inspection with Socat and rot13 - https://gist.github.com/gmurdocca/88857b58dc4668d88b0d0fae6ebf8b64

news-and-links/2022.02.28.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

Poprzednia strona

36 37 38

Następna strona