konik_polanowy

Osobistość

937wpisy
104komentarzy

https://lubimyczytac.pl/profil/127443/joker

konik_polanowy

Osobistość

w Ciekawostki 2021-08-10T14:37:02+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.08.10.md
The Ultimate Guide to Phishing - https://sidb.in/2021/08/03/Phishing-0-to-100.html
Identity and Access Management Knowledge for Cloud Platforms - https://github.com/kdeldycke/awesome-iam
Practical Guide to SRE: Using SLOs to Increase Reliability - https://rootly.io/blog/practical-guide-to-sre-using-slos-to-increase-reliability
Reprogramming "old" Sennheiser Microphone - Part 3 - EEPROM - https://vgnotepad.blogspot.com/2021/06/reprogramming-old-sennheiser-microphone.html
SAML is insecure by design - https://joonas.fi/2021/08/saml-is-insecure-by-design/
Exploring the SameSite cookie attribute for preventing CSRF - https://simonwillison.net/2021/Aug/3/samesite/
ForgeCert - https://github.com/GhostPack/ForgeCert

news-and-links/2021.08.10.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-08-08T12:04:03+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.08.08.md
Clone a voice in 5 seconds to generate arbitrary speech in real-time - https://github.com/CorentinJ/Real-Time-Voice-Cloning
Potatoes - Windows Privilege Escalation - https://jlajara.gitlab.io/others/2020/11/22/Potatoes_Windows_Privesc.html
Mimikatz and DCSync and ExtraSids, Oh My - https://www.harmj0y.net/blog/redteaming/mimikatz-and-dcsync-and-extrasids-oh-my/
niversal Privilege Escalation and Persistence – Printer - https://pentestlab.blog/2021/08/02/universal-privilege-escalation-and-persistence-printer/
F5 fixes critical vulnerability discovered by Positive Technologies in BIG-IP application delivery controller - https://www.ptsecurity.com/ww-en/about/news/f5-fixes-critical-vulnerability-discovered-by-positive-technologies-in-big-ip-application-delivery-controller/

news-and-links/2021.08.08.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-08-06T09:32:19+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.08.06.md
Table of Contents https://craftinginterpreters.com/contents.html
Reprogramming "old" Sennheiser SKM 3072-U - Part 1 - Intro - https://vgnotepad.blogspot.com/2021/04/reprogramming-old-sennheiser-skm-3072-u.html
Tracking interesting Linux (and UNIX) malware - https://github.com/timb-machine/linux-malware
[BugTales] Da Vinci Hits a Nerve: Exploiting Huawei’s NPU Driver - https://labs.taszk.io/articles/post/exploiting_huaweis_npu_driver/
Python3 Tips For Reverse Engineers - https://www.youtube.com/watch?v=TrAwfQlfDd8&t=1s

news-and-links/2021.08.06.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

Zostań Patronem Hejto i odblokuj dodatkowe korzyści tylko dla Patronów

Włączona możliwość zarabiania na swoich treściach
Całkowity brak reklam na każdym urządzeniu
Oznaczenie w postaci rogala , który świadczy o Twoim wsparciu
Wcześniejszy dostęp, do wybranych funkcji na Hejto

konik_polanowy

Osobistość

w Ciekawostki 2021-08-04T16:52:40+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.08.04.md
Spoofing Google Search results - https://www.wietzebeukema.nl/blog/spoofing-google-search-results
Pre-Auth RCE in Moodle Part I - PHP Object Injection in Shibboleth - https://haxolot.com/posts/2021/moodle_pre_auth_shibboleth_rce_part1/
Ghidra script to decrypt a string array in XOR DDoS - https://maxkersten.nl/binary-analysis-course/analysis-scripts/ghidra-script-to-decrypt-a-string-array-in-xor-ddos/
Linux X86 Assembly – How To Make Payload Extraction Easier - https://secureideas.com/blog/2021/07/linux-x86-assembly-how-to-make-payload-extraction-easier.html
NTLM Relay - https://en.hackndo.com/ntlm-relay/
From Stolen Laptop to Inside the Company Network - https://dolosgroup.io/blog/2021/7/9/from-stolen-laptop-to-inside-the-company-network

news-and-links/2021.08.04.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-08-02T20:56:02+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.08.02.md
Critical Jira Flaw in Atlassian Could Lead to RCE - https://threatpost.com/atlassian-critical-jira-flaw/168053/
A collection of scripts for assessing Microsoft Azure security - https://cryptohack.org/
Fantastic Windows Logon types and Where to Find Credentials in Them - https://www.alteredsecurity.com/post/fantastic-windows-logon-types-and-where-to-find-credentials-in-them
A Python Regular Expression Bypass Technique - https://www.secjuice.com/python-re-match-bypass-technique/
Analysis of Malware from Kaseya/Revil Supply Chain attack - https://www.youtube.com/watch?v=P8o6GItci5w

news-and-links/2021.08.02.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-07-31T11:53:56+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.07.31.md
HTA Files Distributed as Fake Chrome Patches for CVE-2021-30554 - https://cofense.com/blog/hta-fake-chrome-patches/
DNS Reset Checker - https://github.com/The-Login/DNS-Reset-Checker
Recon in VB - https://chaah.awankloud.my/recon-in-vb/
Windows Command-Line Obfuscation - https://www.wietzebeukema.nl/blog/windows-command-line-obfuscation
Privilege Escalation Enumeration Script for Windows - https://github.com/itm4n/PrivescCheck
JMX enumeration and attacking tool - https://github.com/qtc-de/beanshooter

news-and-links/2021.07.31.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-07-29T14:23:27+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.07.29.md
Fighting new Ransomware Techniques with McAfee’s Latest Innovations - https://www.mcafee.com/blogs/other-blogs/mcafee-labs/fighting-new-ransomware-techniques-with-mcafees-latest-innovations/
Kernel exploitation: weaponizing CVE-2020-17382 MSI Ambient Link driver - https://www.matteomalvica.com/blog/2020/09/24/weaponizing-cve-2020-17382/
Some URL shortener services distribute Android malware, including banking or SMS trojans - https://www.welivesecurity.com/2021/07/20/url-shortener-services-android-malware-banking-sms-trojans/
Guest Blog Post - Attacking the DevTools - https://microsoftedge.github.io/edgevr/posts/attacking-the-devtools/
Interactive Shell via Bluetooth - https://www.tarlogic.com/blog/interactive-shell-via-bluetooth/

news-and-links/2021.07.29.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-07-27T16:02:56+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.07.27.md
Mini Raspberry Pi Server With Built In UPS - https://www.the-diy-life.com/mini-raspberry-pi-server-with-built-in-ups/
Lock screen/Bitlocker bypass/elevation of privilege in Bitlocker - https://docs.google.com/document/d/1S4jU7knBG_Km_AdHXf8JyE8zl0SOxQ9VvYFPanQy1g8/edit
Rooting an Arlo Q Plus Camera - https://www.youtube.com/watch?v=qhwMsDCw5sE
WSUS Attacks Part 1: Introducing PyWSUS - https://www.gosecure.net/blog/2020/09/03/wsus-attacks-part-1-introducing-pywsus/
New Attacks on Kubernetes via Misconfigured Argo Workflows - https://www.intezer.com/blog/container-security/new-attacks-on-kubernetes-via-misconfigured-argo-workflows/
Reversing for dummies - x86 assembly and C code (Beginner/ADHD friendly) - https://0x41.cf/reversing/2021/07/21/reversing-x86-and-c-code-for-beginners.html

news-and-links/2021.07.27.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-07-25T13:15:40+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.07.25.md
Meet WiFiDemon – iOS WiFi RCE 0-Day Vulnerability, and a Zero-Click Vulnerability That Was Silently Patched - https://blog.zecops.com/research/meet-wifidemon-ios-wifi-rce-0-day-vulnerability-and-a-zero-click-vulnerability-that-was-silently-patched/
CLI tool for open source and threat intelligence - https://github.com/Te-k/harpoon
Notes about attacking Jenkins servers - https://github.com/gquere/pwn_jenkins
Gotta Catch 'Em All: Frida & jailbreak detection - https://www.romainthomas.fr/post/21-07-pokemongo-anti-frida-jailbreak-bypass/
What did we use before USB? | Nostalgia Nerd - https://www.youtube.com/watch?v=4mi0kLLLAOs

news-and-links/2021.07.25.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-07-23T20:34:53+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.07.23.md
Remote code execution in cdnjs of Cloudflare - https://blog.ryotak.me/post/cdnjs-remote-code-execution-en/
Self-developed tools for Lateral Movement/Code Execution - https://github.com/klezVirus/CheeseTools
Virtual Security Operations Center - https://github.com/nicolasriverocorvalan/cloud-sniper
You should turn off autofill in your password manager - https://marektoth.com/blog/password-managers-autofill/
MVT is a forensic tool to look for signs of infection in smartphone devices - https://github.com/mvt-project/mvt
A Journey to understand LLVM-IR - https://un-devs.github.io/low-level-exploration/journey-to-understanding-llvm-ir/

news-and-links/2021.07.23.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-07-21T20:01:39+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.07.21.md
CVE-2021-22555: Turning \x00\x00 into 10000$ - https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html
RDP hijacking attacks explained, and how to mitigate them - https://www.csoonline.com/article/3566917/rdp-hijacking-attacks-explained-and-how-to-mitigate-them.html
How do Mesh VPNs work? Writing my own VPN tool in Golang to find out - https://www.samlewis.me/2021/07/creating-mesh-vpn-tool-for-fun/
How the Kaseya VSA Zero Day Exploit Worked - https://blog.truesec.com/2021/07/06/kaseya-vsa-zero-day-exploit/
How to Make a Game Engine | Game Engine Development Series - https://www.youtube.com/watch?v=EUFUQkbC4Gk
CVE-2021-31956 Exploiting the Windows Kernel (NTFS with WNF) – Part 1 - https://research.nccgroup.com/2021/07/15/cve-2021-31956-exploiting-the-windows-kernel-ntfs-with-wnf-part-1/

news-and-links/2021.07.21.md at gh-pages · Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-07-17T11:23:21+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.07.17.md
Abusing Kerberos Resource-Based Constrained Delegation - https://github.com/tothi/rbcd-attack
Starlink Dish TEARDOWN! - Part 1 - SpaceX BugBounty is open during the Starlink Public Beta - https://www.youtube.com/watch?v=QudtSo5tpLk
Reverse Engineering the M6 Smart Fitness Bracelet - https://rbaron.net/blog/2021/07/06/Reverse-engineering-the-M6-smart-fitness-band.html
Analyzing the USB Controller's Firmware - https://8051enthusiast.github.io/2020/04/14/001-USB_Firmware.html
REvil Ransomware - https://chuongdong.com/reverse%20engineering/2021/07/11/REvilRansomware/
Burpsuite-Plugins-Extensions-Arsenal - https://github.com/emadshanab/Burpsuite-Plugins-Extensions-Arsenal

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-07-15T11:40:50+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.07.15.md
Configurations for DFIR ORC - https://github.com/DFIR-ORC/dfir-orc-config
Playing with PrintNightmare - https://0xdf.gitlab.io/2021/07/08/playing-with-printnightmare.html
What is a Browser Security Sandbox?! (Learn to Hack Firefox) - https://www.youtube.com/watch?v=StQ_6juJlZY
Network brute force tool, written in Python - https://github.com/Cerbrutus-BruteForcer/cerbrutus
Threat Roundup for July 2 to July 9 - https://blog.talosintelligence.com/2021/07/threat-roundup-0702-0709.html
Apache Tomcat RCE by deserialization (CVE-2020-9484) – write-up and exploit - https://www.redtimmy.com/apache-tomcat-rce-by-deserialization-cve-2020-9484-write-up-and-exploit/

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-07-13T13:07:57+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.07.13.md
Exploitation Mitigations - https://github.com/nccgroup/exploit_mitigations
Not-quite-so-broken TLS : lessons in re-engineering a security protocol specification and implementation - usenix15.nqsb.io
Undocumented x86 Instructions to control the CPU at the microarchitecture level in modern Intel processors - https://raw.githubusercontent.com/chip-red-pill/udbgInstr/main/paper/undocumented_x86_insts_for_uarch_control.pdf
How SHA-256 Works Step-By-Step - https://qvault.io/cryptography/how-sha-2-works-step-by-step-sha-256/
Ransomwhere - https://ransomwhe.re/
Aclpwn.Py – Exploit ACL Based Privilege Escalation Paths in Active Directory - https://www.darknet.org.uk/2021/07/aclpwn-py-exploit-acl-based-privilege-escalation-paths-in-active-directory/

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-07-11T12:18:29+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.07.11.md
How does USB device discovery work? - https://www.youtube.com/watch?v=N0O5Uwc3C0o
Unreliability At Scale - https://blog.dshr.org/2021/06/unreliability-at-scale.html?m=1
Reverse engineering of BL602 blobs - https://github.com/pine64/bl602-re
Damn Vulnerable Bank - https://rewanthtammana.com/damn-vulnerable-bank/index.html
Using search engines for fun and bounties - https://0x00sec.org/t/using-search-engines-for-fun-and-bounties/23832
Multi-Cloud Security Auditing Tool - https://github.com/nccgroup/ScoutSuite

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Havelock_Vetinari 2021-07-11T19:06:08+02:00

Jak zwykle, bardzo przyzwoita i sowita lista linków!

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-07-09T17:58:17+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.07.09.md
CVE-2021-1905: Qualcomm Adreno GPU memory mapping use-after-free - https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1905.html
HackSys Extreme Vulnerable Windows Driver - https://github.com/hacksysteam/HackSysExtremeVulnerableDriver
Kerberoasting without SPNs - https://swarm.ptsecurity.com/kerberoasting-without-spns/
TrickBot Botnet Found Deploying A New Ransomware Called Diavol - https://thehackernews.com/2021/07/trickbot-botnet-found-deploying-new.html
XRCross is a Reconstruction, Scanner, and a tool for penetration - https://github.com/pikpikcu/XRCross

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-07-07T14:18:26+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.07.07.md
Thousands of Unauthenticated Databases Exposed on the Internet - https://redhuntlabs.com/blog/thousands-of-unauthenticated-databases-exposed-on-the-internet.html
Babuk Ransomware: The Builder - https://marcoramilli.com/2021/07/05/babuk-ransomware-the-builder/
Fully automated offensive security framework for reconnaissance and vulnerability scanning - https://github.com/j3ssie/Osmedeus
Everything Useful I Know About kubectl - https://www.atomiccommits.io/everything-useful-i-know-about-kubectl/
UWAGA RANSOMWARE! Jak ransomware dostaje się do firm i jak temu zapobiec? - https://www.youtube.com/watch?v=jF7x9BXZbBE

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-07-05T12:35:24+02:00

ink on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.07.05.md
Tool Release – Reliably-checked String Library Binding - https://research.nccgroup.com/2021/07/02/tool-release-reliably-checked-string-library-binding/
Collection of my slide decks & conference videos - https://github.com/eyalitki/presentations
Restricting SMB-based lateral movement in a Windows environment - https://blog.palantir.com/restricting-smb-based-lateral-movement-in-a-windows-environment-ed033b888721
Practical DMA attack on Windows 10 - https://www.synacktiv.com/en/publications/practical-dma-attack-on-windows-10.html
REvil ransomware actors attack Kaseya in supply chain attack - https://blog.talosintelligence.com/2021/07/revil-ransomware-actors-attack-kaseya.html

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-06-30T21:53:16+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.06.30.md
Unlocking BitLocker: Can You Break That Password? - https://blog.elcomsoft.com/2020/05/unlocking-bitlocker-can-you-break-that-password/
kCTF is a Kubernetes-based infrastructure for CTF competitions - https://google.github.io/kctf/
Windows 11 won't work without a TPM - What you need to know - https://www.bleepingcomputer.com/news/microsoft/windows-11-wont-work-without-a-tpm-what-you-need-to-know/
Thycotic Secret Server: Offline Decryption Methodology - https://www.trustedsec.com/blog/thycotic-secret-server-offline-decryption-methodology/
Beej's Guide to Network Programming - https://beej.us/guide/bgnet/html//index.html
Introduction to Windows tokens for security practitioners - https://www.elastic.co/de/blog/introduction-to-windows-tokens-for-security-practitioners

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-06-28T12:11:46+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.06.28.md
This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers - https://github.com/dafthack/CloudPentestCheatsheets
Rust Fuzzing #3: How to write (better) Rust fuzz targets? - https://www.youtube.com/watch?v=MiDFvrqjM2E
AD CS relay attack - practical guide - https://www.exandroid.dev/2021/06/23/ad-cs-relay-attack-practical-guide/
Pentest-Cheat-Sheets - https://github.com/Kitsun3Sec/Pentest-Cheat-Sheets
Goal: Playbooks to be Mapped to MITRE Attack Techniques - https://github.com/austinsonger/Incident-Playbook

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

Poprzednia strona

42 43 44

Następna strona