RDP to RCE: When Fragmentation Goes Wrong
🗣digicat
why in the world would you use UDP if you needed the data to arrive fully and in the correct order?
👤SirensToGo
UDP is a terrible protocol for RDP, it shouldn't even be considered. One wrong bit and you completely fucked up a server.
👤magneticphoton
4 ok bye
1 hi UDP
3 i'm good
2 hi how are you
666 kekekekeke
👤society2-com
🎖@malwr
🗣digicat
why in the world would you use UDP if you needed the data to arrive fully and in the correct order?
👤SirensToGo
UDP is a terrible protocol for RDP, it shouldn't even be considered. One wrong bit and you completely fucked up a server.
👤magneticphoton
4 ok bye
1 hi UDP
3 i'm good
2 hi how are you
666 kekekekeke
👤society2-com
🎖@malwr
Kryptoslogic
RDP to RCE: When Fragmentation Goes Wrong
Remote Desktop Gateway (RDG), previously known as Terminal Services Gateway, is a Windows Server component that provides routing for Remote Desktop (RDP). Rather then users connecting directly to an RDP Server, users instead connect and authenticate to the…
FBI alerts private industry partners: Microsoft SharePoint server exploits were used by nation-state actors to infiltrate two U.S. municipality networks
🗣ThreshingBee
Share point and DoD reluctance to migrate away from share point, back in 2010, is exactly why I left the government.
you don’t have to be a security expert to follow your gut.
👤interactionjackson
🎖@malwr
🗣ThreshingBee
Share point and DoD reluctance to migrate away from share point, back in 2010, is exactly why I left the government.
you don’t have to be a security expert to follow your gut.
👤interactionjackson
🎖@malwr
ZDNET
FBI: Nation-state actors have breached two US municipalities
The SharePoint CVE-2019-0604 vulnerability has been one of the most targeted security flaws.
A technical look inside the Microsoft CryptoAPI vulnerability aka CVE-2020-0601/Curveball
🗣nezza-_-
🎖@malwr
🗣nezza-_-
🎖@malwr
YouTube
CVE-2020-0601 aka Curveball: A technical look inside the critical Microsoft CryptoAPI vulnerability
On Tueday, a critical vulnerability in Microsoft's CryptoAPI was patched - it can allow an attacker to generate a CA that is considered trusted by the system, allowing attacks on TLS, code signing and co.
In this video, we look at how exactly that vulnerably…
In this video, we look at how exactly that vulnerably…
Now UEFI_RETool IDA plugin can display the sequence of execution of UEFI images and dependencies between images
🗣yeggor
🎖@malwr
🗣yeggor
🎖@malwr
GitHub
uefi_retool/ida_plugin at master · yeggor/uefi_retool
A tool for UEFI firmware reverse engineering. Contribute to yeggor/uefi_retool development by creating an account on GitHub.
Reverse Engineering the BMW Connected Apps Protocol
🗣hufman
Cool, tried to reverse the BMW app but couldn't bypass the cert pinning because of limited time. Thanks for the writeup!
EDIT: Okay the post is not about the actual app, still a good reading :)
👤0x00xx
awesome work nicely explained!
👤sowbener
Very well written and thoroughly explained. Thanks for sharing!
👤15charisnoteno
🎖@malwr
🗣hufman
Cool, tried to reverse the BMW app but couldn't bypass the cert pinning because of limited time. Thanks for the writeup!
EDIT: Okay the post is not about the actual app, still a good reading :)
👤0x00xx
awesome work nicely explained!
👤sowbener
Very well written and thoroughly explained. Thanks for sharing!
👤15charisnoteno
🎖@malwr
hufman.github.io
BMW Connected Apps Protocol
Stories about my nerd projects
WinFE 10 (Windows Forensic Environment)
WinFE 10 has been released. The WinFE 10 framework is free to download to build your own WinFE 10.
The biggest update is that WinFE now runs in ARM (still runs in Intel x86 and Intel x64). The ARM version includes its own imaging tool. Build WinFE to ISO, CD/DVD, USB flash drive, or USB hard drive.
I've written more about it here: https://www.dfir.training/dfir-training-blog/winfe10
You can download the framework here: https://www.winfe.net/
🗣bshavers
Hi!
I've been using WinFE during searches for a few months (mostly to run X-Ways if I can't remove the hard drive) and I love it. I'm excited to try to image ARM devices next week. Good job!
👤TardisDude
🎖@malwr
WinFE 10 has been released. The WinFE 10 framework is free to download to build your own WinFE 10.
The biggest update is that WinFE now runs in ARM (still runs in Intel x86 and Intel x64). The ARM version includes its own imaging tool. Build WinFE to ISO, CD/DVD, USB flash drive, or USB hard drive.
I've written more about it here: https://www.dfir.training/dfir-training-blog/winfe10
You can download the framework here: https://www.winfe.net/
🗣bshavers
Hi!
I've been using WinFE during searches for a few months (mostly to run X-Ways if I can't remove the hard drive) and I love it. I'm excited to try to image ARM devices next week. Good job!
👤TardisDude
🎖@malwr
www.dfir.training
It’s here! WinFE 10.
TL:DR Here is the WinFE website with build instructions: www.winfe.net. Brief overview of some details that may be helpful to know Developed by Troy Larson of Microsoft in 2008, further developed into a GUI build (WinBuilder) by a number of developer
LoRa Craft: a set of tools to perform security assessments on LoRa and LoRaWAN
https://github.com/PentHertz/LoRa\_Craft
🗣sebazzen
🎖@malwr
https://github.com/PentHertz/LoRa\_Craft
🗣sebazzen
🎖@malwr
GitHub
GitHub - PentHertz/LoRa_Craft: Some Scapy layers and tools to study LoRa PHY and LoRaWAN
Some Scapy layers and tools to study LoRa PHY and LoRaWAN - PentHertz/LoRa_Craft
SHA-1 is now fully broken
🗣tausciam
I thought got stopped using sha1? Wasn't there a patch for it like a day after the first collision was found?
👤crikeydilehunter
does this mean we should just set GPG to use SHA256 by default?
Do we just use the
> --cipher-algo AES256
to encrypt to 256?
👤U5efull
Are the git folks working on this at all?
👤aaronbp
🎖@malwr
🗣tausciam
I thought got stopped using sha1? Wasn't there a patch for it like a day after the first collision was found?
👤crikeydilehunter
does this mean we should just set GPG to use SHA256 by default?
Do we just use the
> --cipher-algo AES256
to encrypt to 256?
👤U5efull
Are the git folks working on this at all?
👤aaronbp
🎖@malwr
Threat Post
Exploit Fully Breaks SHA-1, Lowers the Attack Bar
Users of GnuPG, OpenSSL and Git could be in danger from an attack that's practical for ordinary attackers to carry out.
I'd like to hear from you! On any opinion, question or feedback ping me at @SirMalware
Partner channel: @cveNotify
Partner channel: @cveNotify
Malware News pinned «I'd like to hear from you! On any opinion, question or feedback ping me at @SirMalware Partner channel: @cveNotify»
JhoneRAT uses Google Drive, Twitter, ImgBB, and Google Forms to target countries in Middle East
🗣quellaman
🎖@malwr
🗣quellaman
🎖@malwr
Security Affairs
JhoneRAT uses Google Drive, Twitter, ImgBB, and Google Forms to target countries in Middle East
Researchers from Cisco Talos discovered a new Trojan named JhoneRAT that was used in targeted attacks against entities in the Middle East.