Hacking Articles Tips Tricks Videos Tutorials

Any known case studies on a beacon’s logic executing from within a GPU compute shader?
https://www.reddit.com/r/redteamsec/comments/xdlssd/any_known_case_studies_on_a_beacons_logic/

I’ve been tinkering with writing a chess engine as this fun security engineering project write-up where the vulnerable chess web app uses peer-to-peer and the attacker exploits the victim peer, the pieces start breaking the rules, we use memory forensics to try to analyze and detect the exploitation heuristically via dynamic run-time analysis with baselining… Anyway, I digress. As part of this project I’m thinking a lot about chess engines and wonder: Hmm, I could probably write a chess sim inside a GPU compute shader to calculate a large number of variations in parallel. Then it struck me: If I can do that, couldn’t we write beacons which mostly execute their malicious code within a GPU shader, then pass the I/O in and out of a more benign process? You’d still need to do some stuff on the CPU (any effects on target), but with popular C2 frameworks you have this significant, sort of robust beacon agent code injected in a process to be detected. Sleep masking hides it from memory scanning kinda sorta, but not really against good defensive techniques. Seems like you could hide most of that memory signature inside a GPU compute shader and have much less “robust” code (essentially attack surface for defenders to use for detection) in RAM. Doubt any EDRs out there are scanning VRAM… Even if you did zero processing in a shader, even just hiding data in VRAM when not in-use (example: sleep masking) seems interesting on its own. Maybe someone’s heard of such a thing? Google is terrible with results when “GPU” and “red team” point to non-cyber branding slang. Google Scholar also turned up nothing. submitted by /u/Jonathan-Todd (https://www.reddit.com/user/Jonathan-Todd)
[link] (https://www.reddit.com/r/redteamsec/comments/xdlssd/any_known_case_studies_on_a_beacons_logic/) [comments] (https://www.reddit.com/r/redteamsec/comments/xdlssd/any_known_case_studies_on_a_beacons_logic/)

___________________________
@hacking_Attack
@Hacking_Video

From the redteamsec community on Reddit

Explore this post and more from the redteamsec community

9 viewsedited 23:30

Dark Reading: Attacks/Breaches
Bishop Fox Releases Cloud Enumeration Tool CloudFox

CloudFox is a command-line tool to help penetration testers understand unknown cloud environments.

9 views23:35

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Microsoft Quashes Actively Exploited Zero-Day, Wormable Critical Bugs

In Microsoft's lightest Patch Tuesday update of the year so far, several security vulnerabilities stand out as must-patch, researchers warn.

9 views23:35

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
ShadowPad Threat Actors Return With Fresh Government Strikes, Updated Tools

Cyber spies are using legitimate apps for DLL sideloading, deploying an updated range of malware, including the new "Logdatter" info-stealer.

9 views23:35

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Cyberattackers Abuse Facebook Ad Manager in Savvy Credential-Harvesting Campaign

Facebook lead-generation forms are being repurposed to collect passwords and credit card information from unsuspecting Facebook advertisers.

8 views23:36

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
U-Haul Customer Contract Search Tool Compromised

Password compromise led to unauthorized access to a customer contract search tool over a five-month window, according to the company.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading

U-Haul Customer Contract Search Tool Compromised

Password compromise led to unauthorized access to a customer contract search tool over a five-month window, according to the company.

8 viewsedited 23:36

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Accidentally logged into Capital One using gym’s wifi.

Since it’s not recommended to login to public wifis, should I take action to protect myself?

submitted by /u/IsaPixza
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Accidentally logged into Capital One using gym’s wifi.

Since it’s not recommended to login to public wifis, should I take action to protect myself?

9 viewsedited 00:23

About

Blog

Apps

Platform