konik_polanowy

Osobistość

937wpisy
104komentarzy

https://lubimyczytac.pl/profil/127443/joker

konik_polanowy

Osobistość

w Ciekawostki 2021-05-16T12:25:20+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.05.16.md
Tools and utilities mentioned in The Art of Mac Malware by Patrick Wardle - https://docs.google.com/document/d/1xOWmMueHHRke9aj3oRqNBgK69Y19hgZ7ehM4H9_Me-Y/
Popular hacking forum bans ransomware ads - https://therecord.media/popular-hacking-forum-bans-ransomware-ads/
How China turned a prize-winning iPhone hack against the Uyghurs - https://www.technologyreview.com/2021/05/06/1024621/china-apple-spy-uyghur-hacker-tianfu/
Upload arbitrary data via Apple's Find My network - https://github.com/positive-security/send-my
Similarities and differences between MuddyWater and APT34 - https://marcoramilli.com/2019/06/27/similarities-and-differences-between-muddywater-and-apt34/
Getting Started | How to Make an OS: 1 - https://www.youtube.com/watch?v=mpPbKEeWIHU

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-05-14T15:56:54+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.05.14.md
Guide to securing and improving privacy on macOS - https://github.com/drduh/macOS-Security-and-Privacy-Guide
Anatomy of a PostgreSQL Query Plan - https://arctype.com/blog/postgresql-query-plan-anatomy/
Iranian Threat Actors: Preliminary Analysis - https://marcoramilli.com/2020/01/15/iranian-threat-actors-preliminary-analysis/
Bypassing LSA Protection in Userland - https://blog.scrt.ch/2021/04/22/bypassing-lsa-protection-in-userland/
Bypassing EDR real-time injection detection logic - https://blog.redbluepurple.io/offensive-research/bypassing-injection-detection
Engineering antivirus evasion - https://blog.scrt.ch/2020/06/19/engineering-antivirus-evasion/
C/C++ source obfuscator for antivirus bypass - https://github.com/scrt/avcleaner

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-05-12T23:52:12+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.05.12.md
ClearURLs is an add-on based on the new WebExtensions technology and will automatically remove tracking elements from URLs to help protect your privacy -https://github.com/ClearURLs/Addon/
Applied Cryptology - 1.1: Historical Ciphers - https://www.youtube.com/watch?v=YhW5obgPCM4
Analiza propozycji Regulacji Sztucznej Inteligencji - zarządzanie AI, szacowanie ryzyka - https://prywatnik.pl/2021/04/26/analiza-propozycji-regulacji-sztucznej-inteligencji/
Q1 2021 DDoS attacks and BGP incidents - https://blog.qrator.net/en/q1-2021-report_129/
Persistence - COM Hijacking - https://www.youtube.com/watch?v=8NPdW8wBO_A
MuddyWater: Binder Project (Part 2) - https://marcoramilli.com/2021/05/07/muddywater-binder-project-part-2/

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

Zostań Patronem Hejto i odblokuj dodatkowe korzyści tylko dla Patronów

Włączona możliwość zarabiania na swoich treściach
Całkowity brak reklam na każdym urządzeniu
Oznaczenie w postaci rogala , który świadczy o Twoim wsparciu
Wcześniejszy dostęp, do wybranych funkcji na Hejto

konik_polanowy

Osobistość

w Ciekawostki 2021-05-10T15:43:24+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.05.10.md
Library for streaming Java Flight Recording (JFR) files from local or remote JVMs - https://github.com/microsoft/jfr-streaming
coin_artist 50k Follower Puzzle – Write-up - https://buer.haus/2021/05/05/coin_artist-50k-follower-puzzle-write-up/
Darkside Ransomware - http://chuongdong.com/reverse%20engineering/2021/05/06/DarksideRansomware/
vulnerable OAuth 2.0 applications - https://github.com/koenbuyens/Vulnerable-OAuth-2.0-Applications
Apple AirTag Teardown & Test Point Mapping - https://colinoflynn.com/2021/05/apple-airtag-teardown-test-point-mapping/
Mobile Apps Exposing AWS Keys Affect 100M+ Users’ Data - https://bevigil.com/blog/mobile-apps-exposing-aws-keys-affect-100m-users-data/
Direct Memory Access (DMA) Attack Software - https://github.com/ufrisk/pcileech
Introduction to SpiderMonkey exploitation - https://doar-e.github.io/blog/2018/11/19/introduction-to-spidermonkey-exploitation/

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-05-10T15:14:41+02:00

UDEMY
SQL Injections Unlocked - SQLi Web Attacks
https://www.udemy.com/course/sql-injections-unlocked-sqli-web-attacks/?couponCode=8MAY-SQLI

SQL Injections Unlocked - SQLi Web Attacks

Whether Inband or Inferential / Manual or Automated , Be able to perform all types of SQL Injection Attacks Successfully

Udemy

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-05-08T21:39:14+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.05.08.md
MuddyWater: Binder Project (Part 2) - https://marcoramilli.com/2021/05/07/muddywater-binder-project-part-2/
Find the remote website version based on a git repository - https://github.com/Orange-Cyberdefense/versionshaker
Exporting AD FS certificates revisited: Tactics, Techniques and Procedures - https://o365blog.com/post/adfs/
Android Malware Behavior Editor - https://github.com/UDcide/udcide
List of Metasploit Payloads (Detailed Spreadsheet - https://www.infosecmatter.com/list-of-metasploit-payloads-detailed-spreadsheet/
Attack llvmpipe Graphics Driver from Chromium - https://insinuator.net/2021/05/attack-llvmpipe-graphics-driver-from-chromium/

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-05-06T22:49:34+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2021.05.06.md
Adversary simulation attacks - https://exploitpack.gitbook.io/exploit-pack-manual-pages/red-team-utilities
Python interpreter for Cobalt Strike Malleable C2 Profiles - https://github.com/Porchetta-Industries/pyMalleableC2
Abusing Replication: Stealing AD FS Secrets Over the Network - https://www.fireeye.com/blog/threat-research/2021/04/abusing-replication-stealing-adfs-secrets-over-the-network.html
Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Contro - https://github.com/cyberark/kubesploit
Renew and Refill Bob Cassettes for 98% Cost Saving! - https://github.com/dekuNukem/bob_cassette_rewinder
IPv6 Security Best Practices - https://theinternetprotocolblog.wordpress.com/2020/11/28/ipv6-security-best-practices/

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-05-04T22:25:41+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/04.05.2021.md
Reverse Engineering, Debugging and Malware Analysis – 2021 https://www.myfreeonlinecourses.com/2021/04/100-off-reverse-engineering-debugging.html
Bypassing LSA Protection in Userland - https://blog.scrt.ch/2021/04/22/bypassing-lsa-protection-in-userland/
Small and convenient C2 tool for Windows targets - https://github.com/Cr4sh/MicroBackdoor
C# Implementation of Jared Atkinson's Get-InjectedThread.ps1 - https://github.com/Apr4h/GetInjectedThreads
Boot Backdoor for Windows - https://github.com/Cr4sh/s6_pcie_microblaze/tree/master/python/payloads/DmaBackdoorBoot
Hermes Malware Deep Dive Pt 1 - Unpacking - https://www.youtube.com/watch?v=kkQAJFyoCVU

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

Nauka

Internal Combustion Engine

Przyznaję, że jakbym miał taką wizualizację jakieś 10 lat temu to bym robił co innego

Znalezisko ciechanow.ski

#inzynieria

Znalezisko 2021-05-01T13:50:47+02:00 0

konik_polanowy

ciechanow.ski

konik_polanowy

Osobistość

w Ciekawostki 2021-05-01T13:44:11+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/01.05.2021.md
XXE : From Zero to Hero - https://infosecwriteups.com/xxe-from-zero-to-hero-b38118750556
Infographics: Operation Costs in CPU Clock Cycles - http://ithare.com/infographics-operation-costs-in-cpu-clock-cycles/
Reverse shells via Dart: AV bypass with zero effort - https://www.sw1tch.net/2021/03/10/dart-reverse-shell/
Hacking Reolink cameras for fun and profit - https://www.thirtythreeforty.net/posts/2020/05/hacking-reolink-cameras-for-fun-and-profit/
30 Years Of Linux An Interview With Linus Torvalds: Linux and Git https://www.tag1consulting.com/blog/interview-linus-torvalds-linux-and-git
Rocky Linux 8.3 RC1 Available Now https://forums.rockylinux.org/t/rocky-linux-8-3-rc1-available-now/2393

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

konik_polanowy 2021-05-04T22:23:43+02:00

@Unknow mogę, jak znajdę więcej czasu aby w pozostałych plikach zmienić format

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-05-01T13:41:54+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/30.04.2021.md
NANDcromancy: Live Swapping NAND Flash - https://www.atredis.com/blog/2021/4/23/live-nand-swap
Pulse Secure VPN zero-day used to hack defense firms, govt orgs - https://www.bleepingcomputer.com/news/security/pulse-secure-vpn-zero-day-used-to-hack-defense-firms-govt-orgs/
ZGC | What's new in JDK 16 - https://malloc.se/blog/zgc-jdk16
Hacking GraphQL for Fun and Profit — Part 2— Methodology and Examples - https://busk3r.medium.com/hacking-graphql-for-fun-and-profit-part-2-methodology-and-examples-5992093bcc24
C++/Win32/Boost Windows RAT - https://github.com/jafarlihi/serpentine
Intel Control-flow Enforcement Technology - https://www.offensive-security.com/offsec/intel-cet-in-action/
Automated malware unpacking with binary emulation - https://lopqto.me/posts/automated-malware-unpacking

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-05-01T13:41:20+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/28.04.2021.md
GOOGLE HACKING / DORKING - https://infosecwriteups.com/google-hacking-dorking-3a58757a9ae7
My OSCP experience - https://blog.mzfr.me/posts/2021-04-24-oscp-experience/
Fast init for Linux systems. Cookies included - https://github.com/troglobit/finit/
Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark - https://github.com/aquasecurity/kube-bench
Volatile Memory Analysis With Volatility : Coreflood Trojan part 2 - https://digitalitskills.com/volatile-memory-analysis-with-volatility-coreflood-trojan-part-2/
Abusing Replication: Stealing AD FS Secrets Over the Network - https://www.fireeye.com/blog/threat-research/2021/04/abusing-replication-stealing-adfs-secrets-over-the-network.html
Living off the land https://posts.slayerlabs.com/living-off-the-land/

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-04-23T12:46:55+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/23.04.2021.md
Massive Qlocker ransomware attack uses 7zip to encrypt QNAP devices - https://www.bleepingcomputer.com/news/security/massive-qlocker-ransomware-attack-uses-7zip-to-encrypt-qnap-devices/
Smart Meter Hacking - Episode 1 - https://www.youtube.com/watch?v=gYowTR3Dfdk
How to analyze mobile malware: a Cabassous/FluBot Case study - https://blog.nviso.eu/2021/04/19/how-to-analyze-mobile-malware-a-cabassous-flubot-case-study/
Analysis of a use-after-free Vulnerability in Adobe Acrobat Reader DC - https://blog.exodusintel.com/2021/04/20/analysis-of-a-use-after-free-vulnerability-in-adobe-acrobat-reader-dc/
FBI face recognition trawl finds Capitol rioter via his girlfriend’s Instagram - https://blog.malwarebytes.com/privacy-2/2021/04/fbi-face-recognition-trawl-finds-capitol-rioter-via-his-girlfriends-instagram/
MITRE Engenuity ATT&CK® Evaluation proves Microsoft Defender for Endpoint stops advanced attacks across platforms - https://www.microsoft.com/security/blog/2021/04/21/mitre-engenuity-attck-evaluation-proves-microsoft-defender-for-endpoint-stops-advanced-attacks-across-platforms/

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-04-21T22:30:11+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/21.04.2021.md
No Sandbox - Applications That Run Chromium and Chrome Without The Sandbox - https://github.com/sickcodes/no-sandbox
Awesome-Selfhosted - https://github.com/awesome-selfhosted/awesome-selfhosted
YouTube/Livestream project for obfuscating C# source code using Roslyn - https://github.com/Flangvik/RosFuscator
Reverse-engineering a vintage comparator chip - https://www.righto.com/2021/04/reverse-engineering-vintage-comparator.html
SQL Injection - Lab #7 SQL injection attack, querying the database type and version on Oracle - https://www.youtube.com/watch?v=neeY0iVa_0A
Electrical power consumption metrology agent - https://github.com/hubblo-org/scaphandre/
Inject After Login - https://i.haxx.cc/2021/04/20/inject-after-login/

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-04-19T12:12:33+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/19.04.2021.md
Breaking TEE Security Part 3: Escalating Privileges - https://www.riscure.com/blog/samsung-investigation-part3
Terrible terrible exception with .NET - https://blog.scooletz.com/2021/04/16/terrible-terrible-exceptions-with-dotnet
Introduction to Machine Learning Reliability Engineering - https://testdriven.io/blog/machine-learning-reliability-engineering/
How to automate Junos with Ansible - https://github.com/ksator/junos-automation-with-ansible
Fun sql injection — mod_security bypass https://y000o.medium.com/fun-sql-injection-mod-security-bypass-644b54b0c445
Exploiting System Mechanic Driver - https://voidsec.com/exploiting-system-mechanic-driver/
Reverse Shell Generator - https://www.revshells.com/

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-04-17T14:53:50+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/17.04.2021.md
A Casino Gets Hacked Through a Fish-Tank Thermometer - https://www.entrepreneur.com/article/368943
honey_pot T-Pot - The All In One Honeypot Platform bee - https://github.com/telekom-security/tpotce
The great SameSite confusion - https://jub0bs.com/posts/2021-01-29-great-samesite-confusion/
Creating A Custom View for WebSocket in ZAP - https://www.gosecure.net/blog/2021/04/13/creating-a-custom-view-for-websocket-in-zap/
Allow arbitrary URLs, expect arbitrary code execution - https://positive.security/blog/url-open-rce
dnsx is a fast and multi-purpose DNS toolkit - https://github.com/projectdiscovery/dnsx
Bypassing AMSI for VBA - https://outflank.nl/blog/2019/04/17/bypassing-amsi-for-vba

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-04-15T23:34:04+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/15.04.2021.md
Unofficial Guide to Mimikatz & Command Reference - https://adsecurity.org/?page_id=1821
httpx is a fast and multi-purpose HTTP toolkit - https://github.com/projectdiscovery/httpx
Launcher Abuser - Hijack Handles from Steam & Battle.net Launchers - https://guidedhacking.com/threads/launcher-abuser-hijack-handles-from-steam-battle-net-launchers.17139/
From 0 to RCE: Cockpit CMS - https://swarm.ptsecurity.com/rce-cockpit-cms/
HTML Lego: Hidden Phishing at Free JavaScript Site - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/html-lego-hidden-phishing-at-free-javascript-site/
Remote exploitation of a man-in-the-disk vulnerability in WhatsApp (CVE-2021-24027) - https://census-labs.com/news/2021/04/14/whatsapp-mitd-remote-exploitation-CVE-2021-24027/
Dumping LSASS with SharpShere - https://jamescoote.co.uk/Dumping-LSASS-with-SharpShere/

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-04-13T21:01:01+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/13.04.2021.md
Point-In-Time Recovery in Kubernetes Operator for Percona XtraDB Cluster – Architecture Decisions - https://www.percona.com/blog/2021/02/24/point-in-time-recovery-in-kubernetes-operator-for-percona-xtradb-cluster-architecture-decisions/
Four Bytes of Power: exploiting CVE-2021-26708 in the Linux kernel - https://a13xp0p0v.github.io/2021/02/09/CVE-2021-26708.html
Tutorial: Scanning AWS CDK-generated templates at build-time with Bridgecrew - https://bridgecrew.io/blog/cloudformation-aws-cdk-scanning-security-compliance/
Contextual Content Discovery Tool - https://github.com/assetnote/kiterunner
Detecting Exposed Cobalt Strike DNS Redirectors - https://labs.f-secure.com/blog/detecting-exposed-cobalt-strike-dns-redirectors
2FA Bypass techniques - https://www.notion.so/2FA-Bypass-techniques-4959be3d7a40486db6c704e8e92ab078
A tool for studying JavaScript malware - https://github.com/CapacitorSet/box-js

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-04-11T11:15:36+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/11.04.2021.md
CVE-2021-26708: Local Privilege Escalation Demo (SMAP and SMEP Bypass) - https://www.youtube.com/watch?v=EC8PFOYOUgU
Run Bhyve in FreeBSD jails - https://neirac.byteswizards.com/posts/run-bhyve-in-freebsd-jails/
Privilege Escalation Enumeration Script for Windows - https://github.com/itm4n/PrivescCheck
Python client for Microsoft Exchange Web Services (EWS) - https://github.com/ecederstrand/exchangelib
documentations, slides decks... - https://github.com/corkami/docs
Analysis of a Windows IPv6 Fragmentation Vulnerability: CVE-2021-24086 - https://blog.quarkslab.com/analysis-of-a-windows-ipv6-fragmentation-vulnerability-cve-2021-24086.html

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

konik_polanowy

Osobistość

w Ciekawostki 2021-04-09T10:27:35+02:00

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/09.04.2021.md
BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution - https://google.github.io/security-research/pocs/linux/bleedingtooth/
Analysis of a Windows IPv6 Fragmentation Vulnerability: CVE-2021-24086 - https://blog.quarkslab.com/analysis-of-a-windows-ipv6-fragmentation-vulnerability-cve-2021-24086.html
CVE-2021-24086 - https://github.com/0vercl0k/CVE-2021-24086
Elevate Yourself to Admin in Umbraco CMS 8.9.0 (CVE-2020-29454) - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/elevate-yourself-to-admin-in-umb-cms-890-cve-2020-29454/
Fuzzing sockets: Apache HTTP, Part 2: Custom Interceptors - https://securitylab.github.com/research/fuzzing-apache-2/
CANalyse: vehicle network analysis and attack tool - https://securityonline.info/canalyse-vehicle-network-analysis-and-attack-tool/

Nieuport/news-and-links

Contribute to Nieuport/news-and-links development by creating an account on GitHub.

GitHub

Zaloguj się aby komentować

Poprzednia strona

44 45 46

Następna strona