konik_polanowy

Osobistość

936wpisy
104komentarzy

https://lubimyczytac.pl/profil/127443/joker

konik_polanowy

Osobistość

w Ciekawostki 2022-02-26T10:53:22+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.02.26.md
Bypass Paywalls web browser extension for Chrome and Firefox - https://github.com/iamadamdev/bypass-paywalls-chrome
conn (r[everse] conn[ection]) is a multiplatform program for creating reverse connections - https://github.com/jafarlihi/rconn
Microsoft Local Administrator Password Solution (LAPS) - https://adsecurity.org/?p=1790
HyperGuard – Secure Kernel Patch Guard: Part 1 – SKPG Initialization - https://windows-internals.com/hyperguard-secure-kernel-patch-guard-part-1-skpg-initialization/
A primer on DCSync attack and detection - https://www.alteredsecurity.com/post/a-primer-on-dcsync-attack-and-detection

news-and-links/2022.02.26.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-02-24T18:17:07+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.02.24.md
Threat Hunting and Detection with Web Proxy Logs - https://posts.bluraven.io/threat-hunting-and-detection-with-web-proxy-logs-58094cae3537
OpenHaystack is a framework for tracking personal Bluetooth devices via Apple's - https://github.com/seemoo-lab/openhaystack
Realmode Assembly - Writing bootable stuff - Part 1 - https://0x00sec.org/t/realmode-assembly-writing-bootable-stuff-part-1/2901
SMTP protocol basics from scratch in Go: receiving email from Gmail - https://notes.eatonphil.com/handling-email-from-gmail-smtp-protocol-basics.html
Information gathering & OSINT framework for phone numbers - https://github.com/sundowndev/phoneinfoga

news-and-links/2022.02.24.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-02-22T10:53:59+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.02.22.md
A command-line tool to quickly analyze all IPs in a file and see which ones have open ports/ vulnerabilities - https://gitlab.com/shodan-public/nrich
Cross Site Scripting ( XSS ) Vulnerability Payload List - https://github.com/payloadbox/xss-payload-list
Detecting ATT&CK techniques & tactics for Linux - https://github.com/Kirtar22/Litmus_Test/blob/master/README.md#detecting-attck-techniques--tactics-for-linux
DNS Security, Part I: Basic DNS - https://educatedguesswork.org/posts/dns-security/
Linux kernel Use-After-Free (CVE-2021-23134) POC - https://ruia-ruia.github.io/NFC-UAF/

news-and-links/2022.02.22.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

Zostań Patronem Hejto i odblokuj dodatkowe korzyści tylko dla Patronów

Włączona możliwość zarabiania na swoich treściach
Całkowity brak reklam na każdym urządzeniu
Oznaczenie w postaci rogala , który świadczy o Twoim wsparciu
Wcześniejszy dostęp, do wybranych funkcji na Hejto

konik_polanowy

Osobistość

w Ciekawostki 2022-02-20T11:29:31+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.02.20.md
Extensis Portfolio Vulnerability Disclosure - https://www.whiteoaksecurity.com/blog/extensis-portfolio-vulnerability-disclosure/
Tutorial: Kubernetes Vulnerability Scanning & Testing With Open Source - https://www.conjur.org/blog/tutorial-kubernetes-vulnerability-scanning-testing-with-open-source/
A collection of scripts for assessing Microsoft Azure security - https://github.com/NetSPI/MicroBurst
Microsoft Brings eBPF to Windows - https://thenewstack.io/microsoft-brings-ebpf-to-windows/
Gaining the upper hand(le) - https://aptw.tf/2022/02/10/leaked-handle-hunting.html

news-and-links/2022.02.20.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-02-18T12:26:26+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.02.18.md
Malware Analysis Series (MAS): Article 1 - https://exploitreversing.files.wordpress.com/2021/12/mas_1_rev_1.pdf
Awesome Cloud Security Resources - https://github.com/4ndersonLin/awesome-cloud-security
ZDI-21-1053: Bypassing Windows Lock Screen - https://halove23.blogspot.com/2021/09/zdi-21-1053-bypassing-windows-lock.html?m=1
Linux virtual machines, typically on macOS, for running containerd - https://github.com/lima-vm/lima
SHAD0W is a modular C2 framework - https://github.com/bats3c/shad0w

news-and-links/2022.02.18.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-02-16T11:17:36+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.02.16.md
Recovering redacted information from pixelated videos - https://positive.security/blog/video-depixelation
Exploring Windows UAC Bypasses: Techniques and Detection Strategies - https://elastic.github.io/security-research/whitepapers/2022/02/03.exploring-windows-uac-bypass-techniques-detection-strategies/article/
A Course on Intermediate Level Linux Exploitation - https://github.com/nnamon/linux-exploitation-course
Reverse-Engineering & Exploitation Fundamentals - https://omu.rce.so/gcc-2022/
Linux Binary Exploitation - https://github.com/rosehgal/BinExp

news-and-links/2022.02.16.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-02-14T00:09:15+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.02.14.md
Cisco RV340 SSL VPN Unauthenticated RCE - https://github.com/pedrib/PoC/blob/master/advisories/Pwn2Own/Austin_2021/flashback_connects/flashback_connects.md
Controlling an RC car using GNU Radio and HackRF - https://www.youtube.com/watch?v=IOKOJIK2kU8
Long Live DMARC - Email Spoof issues - https://www.redteam.cafe/phishing/long-live-dmarc-email-spoof-issues
Router Analysis Part 1: UART Discovery and SPI Flash Extraction - https://wrongbaud.github.io/posts/router-teardown/
Image and Video Deblurring - https://github.com/subeeshvasu/Awesome-Deblurring

news-and-links/2022.02.14.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-02-12T12:06:38+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.02.12.md
Defeating Windows User Account Control - https://github.com/hfiref0x/UACME
How does UTF-8 turn into “F09F9882”? - https://sethmlarson.dev/blog/utf-8
Securing Network Management Systems (Part 2): Moxa MXview - https://claroty.com/2022/02/10/blog-research-securing-network-management-systems-moxa-mxview/
MindShaRE: When MySQL Cluster Encounters Taint Analysis - https://www.zerodayinitiative.com/blog/2022/2/10/mindshare-when-mysql-cluster-encounters-taint-analysis
High-performance PDF password cracking utility equipped - https://github.com/mufeedvh/pdfrip

news-and-links/2022.02.12.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-02-10T10:30:59+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.02.10.md
Free decrypter released for the TargetCompany ransomware - https://therecord.media/free-decrypter-released-for-the-targetcompany-ransomware/
An analysis of CVE-2022-21877 - https://big5-sec.github.io/posts/an-analysis-of-cve-2022-21877/
Heap tricks never get old - Insomni'hack teaser 2022 - https://www.synacktiv.com/publications/heap-tricks-never-get-old-insomnihack-teaser-2022.html
wifi temp reporter - https://github.com/skickar/WifiTemp
Autoscaling Databa ses in Kubernetes for MongoDB, MySQL, and PostgreSQL - https://www.percona.com/blog/2021/06/23/autoscaling-databases-in-kubernetes-for-mongodb-mysql-and-postgresql

news-and-links/2022.02.10.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-02-08T12:20:01+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.02.08.md
Open source pre-operation C2 server based on python and powershell - https://github.com/mhaskar/Octopus
Yamaha DX7 chip reverse-engineering, part V: the output circuitry - http://www.righto.com/2022/02/yamaha-dx7-chip-reverse-engineering.html
Obfuscating Malicious, Macro-Enabled Word Docs- https://blog.kylebot.net/2022/02/06/DiceCTF-2022-memory-hole/
[DiceCTF 2022] - memory hole - https://blog.kylebot.net/2022/02/06/DiceCTF-2022-memory-hole/
UAC bypass via dll hijacking and mock directories - https://daniels-it-blog.blogspot.com/2020/07/uac-bypass-via-dll-hijacking-and-mock.html?m=1

news-and-links/2022.02.08.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-02-06T12:02:11+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.02.06.md
BL602 EFlash Loader: Reverse Engineered with Ghidra - https://lupyuen.github.io/articles/loader
Dumping WhisperGate’s wiper from an Eazfuscator obfuscated loader - https://maxkersten.nl/binary-analysis-course/malware-analysis/dumping-whispergates-wiper-from-an-eazfuscator-obfuscated-loader/
Vulnerabilities Identified in Nooie Baby Monitor - https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-nooie-baby-monitor/
JTAG-Based Memory Acquisition Framework - https://www.forensicfocus.com/webinars/jtag-based-memory-acquisition-framework/
Assembly - Pwn Zero To Hero 0x00 - https://www.youtube.com/watch?v=WG7QtpRPArg

news-and-links/2022.02.06.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-02-04T22:45:31+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.02.04.md
Cobalt Strike, a Defender’s Guide – Part 2 - https://thedfirreport.com/2022/01/24/cobalt-strike-a-defenders-guide-part-2/
How to Analyze RTF Template Injection Attacks - https://letsdefend.io/blog/how-to-analyze-rtf-template-injection-attacks//
How Deauth Attacks Jam WiFi Devices | HakByte - https://www.youtube.com/watch?v=M54ZhpnhACc
Using Power Automate for Covert Data Exfiltration in Microsoft 365 - https://www.varonis.com/blog/power-automate-data-exfiltration
Android malware BRATA can wipe devices - https://blog.malwarebytes.com/android/2022/02/android-malware-brata-can-wipe-devices/

news-and-links/2022.02.04.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-02-02T22:46:51+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.02.02.md
Intro to Embedded RE Part 1: Tools and Series Overview - https://voidstarsec.com/blog//2022/01/17/intro-to-embedded-part-1
MoonBounce: the dark side of UEFI firmware - https://securelist.com/moonbounce-the-dark-side-of-uefi-firmware/105468/
Unauthenticated Dumping of Usernames via Cisco Unified Call Manager (CUCM) - https://www.n00py.io/2022/01/unauthenticated-dumping-of-usernames-via-cisco-unified-call-manager-cucm
Moodle: Blind SQL Injection (CVE-2021-36393) and Broken Access Control (CVE-2021-36397) - https://0xkasper.com/articles/moodle-sql-injection-broken-access-control.html
Practical HTTP Header Smuggling: Sneaking Past Reverse Proxies to Attack AWS and Beyond - https://www.youtube.com/watch?v=RAtpG6OYYNM&list=PLH15HpR5qRsW62N-GLRb1q56Zr7sm10rF&t=1s

news-and-links/2022.02.02.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-01-31T11:52:29+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.01.31.md
Labs for Practical Malware Analysis & Triage - https://github.com/HuskyHacks/PMAT-labs
Exploiting and Mitigating CVE-2021-44228: Log4j Remote Code Execution (RCE) - https://sysdig.com/blog/exploit-detect-mitigate-log4j-cve/
WordPress 5.8.2 Stored XSS Vulnerability - https://blog.sonarsource.com/wordpress-stored-xss-vulnerability
Fixing the Unfixable: Story of a Google Cloud SSRF - https://bugs.xdavidhu.me/google/2021/12/31/fixing-the-unfixable-story-of-a-google-cloud-ssrf/
Moving From Manual Reverse Engineering of UEFI Modules To Dynamic Emulation of UEFI Firmware - https://www.sentinelone.com/labs/moving-from-manual-reverse-engineering-of-uefi-modules-to-dynamic-emulation-of-uefi-firmware/

news-and-links/2022.01.31.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-01-29T10:21:05+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.01.29.md
Beyond the good ol' LaunchAgents - 22 - LoginHook and LogoutHook - https://theevilbit.github.io/beyond/beyond_0022/
CLM Bypass - https://sp00ks-git.github.io/posts/CLM-Bypass/
OctopusWAF is a WAF - https://github.com/CoolerVoid/OctopusWAF
TypeScript Scenario-Based Web Application Fuzzing Framework - https://github.com/shfz/shfz
CDK - Zero Dependency Container Penetration Toolkit - https://github.com/cdk-team/CDK

news-and-links/2022.01.29.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-01-26T13:29:35+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.01.26.md
Analyzing an IDA Pro anti-decompilation code - http://antonioparata.blogspot.com/2022/01/analyzing-ida-pro-anti-decompilation.html
NinjaC2 V2.1 : New webshell agent, more features and updated AV bypass - https://shells.systems/ninjac2-v2-1-new-webshell-agent-more-features-and-updated-av-bypass/

BSoD to Watson: The Reliability Journey - https://hardcoresoftware.learningbyshipping.com/p/061-bsod-to-watson-the-reliability

Microsoft Sentinel To-Go! - https://github.com/OTRF/Microsoft-Sentinel2Go
Critical SonicWall NAC Vulnerability Stems from Apache Mods - https://threatpost.com/sonicwall-nac-vulnerability-apache-mods/177529/

news-and-links/2022.01.26.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-01-24T12:52:39+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.01.24.md
Red Teaming Toolkit - https://github.com/infosecn1nja/Red-Teaming-Toolkit
Red Team's SIEM - tool for Red Teams - https://github.com/outflanknl/RedELK
Adding DCSync Permissions from Linux - https://www.n00py.io/2022/01/adding-dcsync-permissions-from-linux/
Microsoft » Windows 10 : Security Vulnerabilities - https://github.com/nu11secur1ty/Windows10Exploits
Mac users, update now! “Powerdir” flaw could allow attackers to spy on you - https://blog.malwarebytes.com/mac/2022/01/mac-users-update-now-powerdir-flaw-could-allow-attackers-to-spy-on-you/

news-and-links/2022.01.24.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-01-22T14:10:08+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.01.20.md
Default Credentials Cheat Sheet - https://github.com/ihebski/DefaultCreds-cheat-sheet
How to exploit Log4j vulnerabilities in VMWare vCenter - https://www.sprocketsecurity.com/blog/how-to-exploit-log4j-vulnerabilities-in-vmware-vcenter
Windows Drivers Reverse Engineering Methodology - https://voidsec.com/windows-drivers-reverse-engineering-methodology/
Home Assistant Yellow - Pi-powered local automation - https://www.jeffgeerling.com/blog/2022/home-assistant-yellow-pi-powered-local-automation
Awesome CTF Challenge Design - https://github.com/kareniel/awesome-ctf-challenge-design

news-and-links/2022.01.20.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-01-20T13:10:57+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.01.20.md
Awesome-Android-Security - https://github.com/saeidshirazi/awesome-android-security
Privilege Escalation vulnerability in Acer Care Center (CVE-2021-45975) - https://aptw.tf/2022/01/20/acer-care-center-privesc.html
Introducing TREVORproxy and TREVORspray 2.0 - https://blog.blacklanternsecurity.com/p/introducing-trevorproxy-and-trevorspray
Bypassing early 2000s copy protection for software preservation - https://blog.paavo.me/masa-copy-protection/
Extract credentials from lsass remotely - https://github.com/Hackndo/lsassy

news-and-links/2022.01.20.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-01-18T14:09:56+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.01.18.md
A collection of awesome API Security tools and resources - https://github.com/arainho/awesome-api-security
Cache Poisoning at Scale - https://youst.in/posts/cache-poisoning-at-scale/
Fantastic Symbols and Where to Find Them - Part 1 - https://www.polarsignals.com/blog/posts/2022/01/13/fantastic-symbols-and-where-to-find-them/
Sansomware - https://github.com/sannemaasakkers/Sansomware
Multi-thread AzureAD Autologon SSO Password Sprayer - https://github.com/b1naryxx/AzureAD-Autologon-Password-Sprayer

news-and-links/2022.01.18.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

Poprzednia strona

37 38 39

Następna strona