konik_polanowy

Osobistość

937wpisy
104komentarzy

https://lubimyczytac.pl/profil/127443/joker

konik_polanowy

Osobistość

w Ciekawostki 2022-01-18T14:09:56+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.01.18.md
A collection of awesome API Security tools and resources - https://github.com/arainho/awesome-api-security
Cache Poisoning at Scale - https://youst.in/posts/cache-poisoning-at-scale/
Fantastic Symbols and Where to Find Them - Part 1 - https://www.polarsignals.com/blog/posts/2022/01/13/fantastic-symbols-and-where-to-find-them/
Sansomware - https://github.com/sannemaasakkers/Sansomware
Multi-thread AzureAD Autologon SSO Password Sprayer - https://github.com/b1naryxx/AzureAD-Autologon-Password-Sprayer

news-and-links/2022.01.18.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-01-16T11:57:38+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.01.16.md
Blind SSRF vulnerability - https://github.com/assetnote/blind-ssrf-chains
LoRaWAN's Protocol Stacks: The Forgotten Targets at Risk - https://www.trendmicro.com/en_us/research/22/a/lorawans-protocol-stacks-the-forgotten-targets-at-risk.html
Github Copilot Wants to Play Chess Instead of Code - https://dagshub.com/blog/github-copilot-not-code/
Obfuscating Malicious, Macro-Enabled Word Docs - https://depthsecurity.com/blog/obfuscating-malicious-macro-enabled-word-docs
Harvis is designed to automate your C2 Infrastructure - https://github.com/thiagomayllart/Harvis

news-and-links/2022.01.16.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-01-14T10:32:00+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.01.14.md
The Story of How I Hacked my ISP’s Cheapo Standard Issue Router - https://secnigma.wordpress.com/2022/01/02/the-story-of-how-i-hacked-my-isps-cheapo-standard-issue-router/
EMBArk - The firmware security scanning environment - https://github.com/e-m-b-a/embark
Powershell and DnSpy tricks in .NET reversing – AgentTesla - https://github.com/Dump-GUY/Malware-analysis-and-Reverse-engineering/blob/main/Reversing%20.NET%20-%20AgentTesla/Reversing_AgentTesla.md
Undetected Azure Active Directory Brute-Force Attacks - https://www.secureworks.com/research/undetected-azure-active-directory-brute-force-attacks
Intelligence Writing - https://github.com/mxm0z/awesome-intelligence-writing

news-and-links/2022.01.14.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

Zostań Patronem Hejto i odblokuj dodatkowe korzyści tylko dla Patronów

Włączona możliwość zarabiania na swoich treściach
Całkowity brak reklam na każdym urządzeniu
Oznaczenie w postaci rogala , który świadczy o Twoim wsparciu
Wcześniejszy dostęp, do wybranych funkcji na Hejto

konik_polanowy

Osobistość

w Ciekawostki 2022-01-12T19:51:17+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.01.12.md
Periscope: A Keystroke Inference Attack Using Human Coupled Electromagnetic Emanations - https://dl.acm.org/doi/pdf/10.1145/3460120.3484549
Finding unhandled errors using CodeQL - https://blog.trailofbits.com/2022/01/11/finding-unhandled-errors-using-codeql/
Fast subdomains enumeration tool for penetration testers - https://github.com/aboul3la/Sublist3r
Direct Memory Access (DMA) Attack Software - https://github.com/ufrisk/pcileech
Private and self-hosted file sharing over the Tor network written in golang - https://github.com/R4yGM/garlicshare

news-and-links/2022.01.12.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-01-10T19:17:10+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.01.10.md
Scanning millions of domains and compromising the email supply chain of Australia's most respected institutions - https://caniphish.com/phishing-resources/blog/compromising-australian-supply-chains-at-scale
Abusing Windows’ Implementation of Fork() for Stealthy Memory Operations - https://billdemirkapi.me/abusing-windows-implementation-of-fork-for-stealthy-memory-operations/
The Top 5 Bugs Submitted in 2021 - https://www.zerodayinitiative.com/blog/2022/1/5/the-top-5-bugs-submitted-in-2021
BloodyAD is an Active Directory Privilege Escalation Framework - https://github.com/CravateRouge/bloodyAD
Offensive WMI - Active Directory Enumeration (Part 5) - https://0xinfection.github.io/posts/wmi-ad-enum/

news-and-links/2022.01.10.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-01-08T13:33:11+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.01.08.md
Implant.ARM.iLOBleed.a - https://threats.amnpardaz.com/en/2021/12/28/implant-arm-ilobleed-a/
Azure Privilege Escalation via Azure API Permissions Abuse - https://posts.specterops.io/azure-privilege-escalation-via-azure-api-permissions-abuse-74aee1006f48
Undetected Azure Active Directory Brute-Force Attacks - https://www.secureworks.com/research/undetected-azure-active-directory-brute-force-attacks
Click me if you can, Office social engineering with embedded objects - https://www.securify.nl/en/blog/click-me-if-you-can-office-social-engineering-with-embedded-objects/
Remote Desktop entirely coded in PowerShell - https://github.com/DarkCoderSc/PowerRemoteDesktop

news-and-links/2022.01.08.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-01-06T12:34:45+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.01.06.md
Bypassing OTP Verification for Changing PIN in Registered Mobile Banking Account - https://infosecwriteups.com/bypassing-otp-verification-for-changing-pin-in-registered-mobile-banking-account-ed92dbcaa5c7
A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan - https://github.com/fierceoj/ShonyDanza
$10m of funds goes missing in what appears to be a cryptocurrency rug-pull - https://blog.malwarebytes.com/scams/2022/01/10m-of-funds-goes-missing-in-what-appears-to-be-a-cryptocurrency-rug-pull/
A phishing document signed by Microsoft – part 1 - https://outflank.nl/blog/2021/12/09/a-phishing-document-signed-by-microsoft/
Wipeout! Detecting Android Factory Resets - https://thebinaryhick.blog/2021/08/19/wipeout-detecting-android-factory-resets/

news-and-links/2022.01.06.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-01-06T12:25:51+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.01.04.md
Taking the pain out of C2 Infrastructure (Part 1) - https://byt3bl33d3r.substack.com/p/taking-the-pain-out-of-c2-infrastructure
Malicious Telegram Installer Drops Purple Fox Rootkit - https://blog.minerva-labs.com/malicious-telegram-installer-drops-purple-fox-rootkit
Password Cracking Rig - https://www.whiteoaksecurity.com/blog/password-cracking-rig/
Release of PTE Analysis plugins for Volatility 3 - https://insinuator.net/2021/12/release-of-pte-analysis-plugins-for-volatility-3/
C++/Win32/Boost Windows RAT (Remote Administration Tool) - https://github.com/jafarlihi/serpentine

news-and-links/2022.01.04.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2022-01-02T12:23:44+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.01.02.md
Azure Red Team tool for graphing Azure and Azure Active Directory objects https://github.com/Azure/Stormspotter
Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation https://github.com/Skiller9090/Lucifer
DogWhisperer’s SharpHound Cheat Sheet https://insinuator.net/2021/05/dogwhisperers-sharphound-cheat-sheet/
Reverse Engineering Yaesu FT-70D Firmware Encryption https://landaire.net/reversing-yaesu-firmware-encryption/
Extreme HTTP Performance Tuning: 1.2M API req/s on a 4 vCPU EC2 Instance https://talawah.io/blog/extreme-http-performance-tuning-one-point-two-million/

news-and-links/2022.01.02.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-12-31T11:42:39+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.12.31.md
Play the music and bypass TCC aka CVE-2020-29621- https://wojciechregula.blog/post/play-the-music-and-bypass-tcc-aka-cve-2020-29621/
Another Log4j on the fire: Unifi - https://www.sprocketsecurity.com/blog/another-log4j-on-the-fire-unifi
Alcatraz project for Black Hat USA 2021 - https://github.com/kkamagui/alcatraz
Does PHP Have A Future, Or Are Twenty Five Years Enough? - https://hackaday.com/2020/06/29/does-php-have-a-future-or-are-twenty-five-years-enough/#more-417501
Red Team Tactics: Utilizing Syscalls in C# - Prerequisite Knowledge - https://jhalon.github.io/utilizing-syscalls-in-csharp-1/

news-and-links/2021.12.31.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-12-29T11:46:47+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.12.29.md
Exploitation of CVE-2021-21220 – From Incorrect JIT Behavior to RCE - https://www.zerodayinitiative.com/blog/2021/12/15/exploitation-of-cve-2021-21220-from-incorrect-jit-behavior-to-rce
Introduction to Malware Analysis and Reverse Engineering - https://class.malware.re/
SSD Advisory – Rocket.Chat Client-side Remote Code Execution - https://ssd-disclosure.com/ssd-advisory-rocket-chat-client-side-remote-code-execution/
Hacking the dlink DIR-615 for fun and no profit Part 5: Multiple RCE’s - https://noob3xploiter.medium.com/hacking-the-dlink-dir-615-for-fun-and-no-profit-part-5-multiple-rces-d508f58e2471
Mark-of-the-Web from a red team’s perspective - https://outflank.nl/blog/2020/03/30/mark-of-the-web-from-a-red-teams-perspective

news-and-links/2021.12.29.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-12-27T18:29:44+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.12.27.md
List of open source tools for AWS security: defensive, offensive, auditing, DFIR - https://github.com/toniblyx/my-arsenal-of-aws-security-tools/
ZDI-21-1053: Bypassing Windows Lock Screen - https://halove23.blogspot.com/2021/09/zdi-21-1053-bypassing-windows-lock.html?m=1
Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems - https://github.com/ChrisTheCoolHut/Zeratool
Adversary Village at DEF CON 29 - https://www.youtube.com/playlist?app=desktop&list=PLzf478ylMToxAfOJGEYnpxABTg50_ZBQd
Where's the Interpreter!? (CVE-2021-30853) - https://objective-see.com/blog/blog_0x6A.html

news-and-links/2021.12.27.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-12-25T13:05:25+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.12.25.md
Getting root on Ubuntu through wishful thinking - https://securitylab.github.com/research/ubuntu-accountsservice-CVE-2021-3939/
Web Attack Cheat Sheet- https://github.com/riramar/Web-Attack-Cheat-Sheet
letme.go – A minimalistic Meterpreter stager written in Go - https://security.humanativaspa.it/letme-go-a-minimalistic-meterpreter-stager-written-in-go/
Farming for Red Teams: Harvesting NetNTLM - https://www.mdsec.co.uk/2021/02/farming-for-red-teams-harvesting-netntlm/
Two Birds with One Stone: An Introduction to V8 and JIT Exploitation - https://www.zerodayinitiative.com/blog/2021/12/6/two-birds-with-one-stone-an-introduction-to-v8-and-jit-exploitation

news-and-links/2021.12.25.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-12-23T14:25:31+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.12.23.md
Backdoor Office 365 and Active Directory - Golden SAML - https://www.inversecos.com/2021/09/backdooring-office-365-and-active.html?m=1
Gaming on Wayland - https://zamundaaa.github.io/wayland/2021/12/14/about-gaming-on-wayland.html
Use Terraform to create your own vulnerable - https://github.com/BishopFox/iam-vulnerable
Alan c2 Framework v5.0 - All you can in-memory edition - https://antonioparata.blogspot.com/2021/12/alan-c2-framework-v50-all-you-can-in.html
Exchange Exploit Leads to Domain Wide Ransomware - https://thedfirreport.com/2021/11/15/exchange-exploit-leads-to-domain-wide-ransomware/

news-and-links/2021.12.23.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-12-21T12:39:25+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.12.21.md
A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution - https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html
Android Application Testing Using Windows 11 and Windows Subsystem for Android - https://sensepost.com/blog/2021/android-application-testing-using-windows-11-and-windows-subsystem-for-android/
Blinding EDR On Windows - https://synzack.github.io/Blinding-EDR-On-Windows/
The Web3 Fraud - https://www.usenix.org/publications/loginonline/web3-fraud
0xffsec Handbook The Pentester's Guide - https://0xffsec.com/handbook/

news-and-links/2021.12.21.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-12-19T12:18:35+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.12.19.md
Cracken is a fast password wordlist generator - https://github.com/shmuelamar/cracken
The Hacker Tools - https://tools.thehacker.recipes/
Nighthawk 0.1 – New Beginnings - https://www.mdsec.co.uk/2021/12/nighthawk-0-1-new-beginnings/
Reverse Engineering Crypto Functions: AES - https://www.goggleheadedhacker.com/blog/post/reversing-crypto-functions-aes
How to Set up a Raspberry Pi ADS-B Flight Tracker for OSINT Investigation - https://wondersmithrae.medium.com/how-to-set-up-a-raspberry-pi-ads-b-flight-tracker-for-osint-investigation-927f9ad857f9

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-12-17T22:48:49+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.12.17.md
Remote Deserialization Bug in Microsoft's RDP Client through Smart Card Extension - https://thalium.github.io/blog/posts/deserialization-bug-through-rdp-smart-card-extension/
Quick & Lazy Malware Development - https://captmeelo.com/redteam/maldev/2021/12/15/lazy-maldev.html
A Hex Editor for Reverse Engineers - https://github.com/WerWolv/ImHex
A deeper look into the Max Retry Strategy option - https://www.cobaltstrike.com/blog/a-deeper-look-into-the-max-retry-strategy-option/
Practical Introduction to CodeQL - https://jorgectf.gitlab.io/blog/post/practical-codeql-introduction/

news-and-links/2021.12.17.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-12-15T19:22:01+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.12.15.md
Escalating XSS to Sainthood with Nagios - https://blog.grimm-co.com/2021/11/escalating-xss-to-sainthood-with-nagios.html
Phishing Playbook - https://gitlab.com/syntax-ir/playbooks/-/tree/main/IRP-Phishing
Hot Vulnerabilities - https://cvestalker.com/weekly.php
Cyber Deception Symposium Keynote 2021 - https://www.youtube.com/watch?v=zrCcTjUJ3eM
Yamaha DX7 chip reverse-engineering, part 4: how algorithms are implemented - http://www.righto.com/2021/12/yamaha-dx7-chip-reverse-engineering.html?m=1

news-and-links/2021.12.15.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-12-15T19:18:59+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.12.13.md
Abusing Firefox in Enterprise Environments - https://www.mdsec.co.uk/2020/04/abusing-firefox-in-enterprise-environments/
300,000 MikroTik routers are ticking security time bombs, researchers say - https://arstechnica.com/information-technology/2021/12/300000-mikrotik-routers-are-ticking-security-time-bombs-researchers-say/
Linux Kernel Defence Map - https://github.com/a13xp0p0v/linux-kernel-defence-map
AV Evasion Part 1 - https://0xhop.github.io/evasion/2021/04/19/evasion-pt1/
Awesome Executable Packing Awesome - https://github.com/dhondta/awesome-executable-packing

news-and-links/2021.12.13.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-12-11T12:37:59+01:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.12.11.md
Zero-Day Protection by Catching Shellcode Encoders - https://www.forcepoint.com/blog/x-labs/zero-day-protection-via-shellcode-encoders
A simple x86_64 stack based buffer overflow exploitation with gdb - https://oxagast.org/posts/simple-buffer-overflow-exploitation-walkthrough-gdb/
Why IoT Security Matters - https://research.nccgroup.com/2021/12/09/why-iot-security-matters/
Is your web browser vulnerable to data theft? XS-Leak explained - https://blog.malwarebytes.com/explained/2021/12/is-your-web-browser-vulnerable-to-data-theft-xs-leak-explained/
Real-time HTTP Intrusion Detection - https://github.com/kitabisa/teler

news-and-links/2021.12.11.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

Poprzednia strona

38 39 40

Następna strona