#Malware_analysis
1. Drokbk Malware
https://www.secureworks.com/blog/drokbk-malware-uses-github-as-dead-drop-resolver
2. Typosquat/Ransomware Campaign in PyPI and NPM
https://blog.phylum.io/phylum-detects-active-typosquatting-campaign-in-pypi

#Malware_analysis
1. Invisbile npm malware evading security checks
https://jfrog.com/blog/invisible-npm-malware-evading-security-checks-with-crafted-versions
2. Azov Ransomware: Polymorphic Wiper
https://research.checkpoint.com/2022/pulling-the-curtains-on-azov-ransomware-not-a-skidsware-but-polymorphic-wiper

#exploit
1. CVE-2022-45025:
Command injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)
https://github.com/yuriisanin/CVE-2022-45025

2. Exploring Chrome’s CVE-2020-6418
https://blog.haboob.sa/blog/exploring-chromes-cve-2020-6418-part1

3. CVE-2022-39066:
SQL Injection Vulnerability in ZTE MF286R
https://github.com/v0lp3/CVE-2022-39066

#Infosec_Standards
"PCI Software Security Framework - Secure Software Requirements and Assessment Procedures", Version 1.2, Dec. 2022.

#Offensive_security
1. AV Evasion Methodology
https://book.hacktricks.xyz/windows-hardening/av-bypass
2. Bypassing MacOS Privacy Controls
https://blog.xpnsec.com/bypassing-macos-privacy-controls

#reversing
#Research
BlackHat Europe 2022:
"Exploring a New Class of Kernel Exploit Primitive".

#Threat_Research
1. Exploitable memory corruption using CVE-2020-25669 and Linux Kernel
https://www.synopsys.com/blogs/software-security/cyrc-case-study-linux-kernel-vulnerability
2. Zeek-Formatted Threat Intelligence Feeds
https://github.com/CriticalPathSecurity/Zeek-Intelligence-Feeds

#Infographics
#Infosec_Standards
Types of VPN

]-> RFC4026: "Provider Provisioned VPN Terminology", 2018.
https://datatracker.ietf.org/doc/rfc4026

#Red_Team_Tactics
BlackHat Europe 2022:
"Dirty Vanity: A New Approach to Code injection & EDR bypass".

]-> A PoC for the new injection technique, abusing windows fork API to evade EDRs:
https://github.com/deepinstinct/Dirty-Vanity

#Whitepaper
"Routing Security: BGP Incidents, Mitigation Techniques and Policy Actions", 2022.

🇮🇷 Iranian rap about corrupt actors who are in the position of spies

Based on observations in Iran, there are actors who are willing to sell their homeland for money and spy for other countries.
This issue has made the people of Iran very angry with some famous actors.
It is expected that the Iranian government will take care of the request of its people and deal seriously with these spies.

via "shabzadeh".

#Celebrity_2zari #Green_card #Iranian_rap

@YourJiniNews

I Can Help You To Clear & Give the training & exam solutions on the below certifications
1_CEH.
2_CEH Practical.
3_eJPT.
4_eCCPTv2.
5_eWPT.
6_eWPTxv2.
7_CRTP.
8_CRTO.
9_OSCP.
10_OSWE.
11_OSEP.
12_OSWP.
13_CPENT
14_CHFI
15_eCPTxv2
16_PNPT
17_Burpsuite exam
Remote Exam Support possible.
If anyone needs message me.
Lower prices & passing guaranteed!
Follow: https://t.me/alexserviceez
Ping @examsolutionz

We have added new exam of burpsuite solutions

#Fuzzing
1. Fuzzing ping(8)… and finding a 24 year old bug
https://tlakh.xyz/fuzzing-ping.html
2. Finding JIT Optimizer Bugs using SMT Solvers and Fuzzing
https://www.pypy.org/posts/2022/12/jit-bug-finding-smt-fuzzing.html
3. Fuzzing the Shield: CVE-2022-24548
https://medium.com/s2wblog/fuzzing-the-shield-cve-2022-24548-96f568980c0

#tools
#Offensive_security
1. Nightly builds of common C# offensive tools
https://github.com/Flangvik/SharpCollection
2. Nemo - An offensive Remote Access Tool & Post-Exploitation Framework
https://github.com/CompeyDev/nemo

#Threat_Research
Diamond/Sapphire Ticket:
The New Generation of Kerberos Attacks
https://unit42.paloaltonetworks.com/next-gen-kerberos-attacks

#Research
"DISTDET: A Cost-Effective Distributed Cyber Threat Detection System", 2022.