An In-Depth Technical Analysis of CurveBall (CVE-2020-0601)
🗣thracky
So there's been a number of high level crypto-focused posts about curveball, and a couple posts that touch briefly on a small chunk of the code but I wrote a detailed post about how the vulnerability works in the context of TLS cert validation in CryptoAPI. Please feel free to ask me questions here or on twitter with the same handle :)
👤thracky
🎖@malwr
🗣thracky
So there's been a number of high level crypto-focused posts about curveball, and a couple posts that touch briefly on a small chunk of the code but I wrote a detailed post about how the vulnerability works in the context of TLS cert validation in CryptoAPI. Please feel free to ask me questions here or on twitter with the same handle :)
👤thracky
🎖@malwr
Trend Micro
A Technical Analysis of CurveBall (CVE-2020-0601)
A code-level root cause analysis of CVE-2020-0601 in the context of how applications are likely to use CryptoAPI to handle certificates — more specifically in the context of applications communicating via Transport Layer Security (TLS).
Proof-of-Concept Video: LPC Bus Sniffing Attack against Microsoft BitLocker in TPM-only Mode
🗣Radi0activeM0use
Kinda old. But still good to remind people how easy it is to extract Windows Shitlocker^(TM) VMKs from a TPM.
👤quantumtrap
Is there a write-up? There is no reason to put this information into a video.
👤TheShallowOne
🎖@malwr
🗣Radi0activeM0use
Kinda old. But still good to remind people how easy it is to extract Windows Shitlocker^(TM) VMKs from a TPM.
👤quantumtrap
Is there a write-up? There is no reason to put this information into a video.
👤TheShallowOne
🎖@malwr
YouTube
LPC Bus Sniffing Attack against Microsoft BitLocker in TPM-only Mode
In this SySS (https://www.syss.de/) proof-of-concept video, a sniffing attack against the Low Pin Count (LPC) bus communication of a trusted platform module (TPM) is demonstrated using the developed iCEstick LPC TPM Sniffer for the Lattice iCEstick Evaluation…
SecurityAnalysisOfVoatz_Public.pdf
5.5 MB
The Ballot is Busted Before the Blockchain:
A Security Analysis of Voatz, the First Internet Voting Application Used in U.S. Federal Elections
🎖@malwr
A Security Analysis of Voatz, the First Internet Voting Application Used in U.S. Federal Elections
🎖@malwr
Re: phpList's Authentication Bypass (CVE-2020-8547). Here's a phpList Hardening Guide.
🗣maltfield
🎖@malwr
🗣maltfield
🎖@malwr
Michael Altfield's Tech Blog
Hardening Guide for phpList - Michael Altfield's Tech Blog
This post will outline recommended steps to harden phpList after install to make it reasonably secure. phpList is the most popular open-source software for managing mailing lists. Like wordpress, they have a phplist.com for paid hosting services and phplist.org…
Vulnhub write-up: Five86–1 ( no metasploit )
I'd like to share my second attempt at a write up! I hope you will enjoy it, any suggestion welcome.
https://link.medium.com/XaOwiH6Q43
🗣kolima_
🎖@malwr
I'd like to share my second attempt at a write up! I hope you will enjoy it, any suggestion welcome.
https://link.medium.com/XaOwiH6Q43
🗣kolima_
🎖@malwr
Medium
Vulnhub write-up: Five86–1
After the classic VM bootstrap the first thing that I had to do is to obtain the IP of the target machine. Then I needed to use nmap…
Introduction to Malware Analysis | Common Terms | Tools to Get Started
🗣davidalbertozam
Excellent video.
👤GibsonAleph
🎖@malwr
🗣davidalbertozam
Excellent video.
👤GibsonAleph
🎖@malwr
YouTube
Malware Analysis Overview For Beginners | Common Terms & Tools
An overview for beginners to get started with malware analysis. You need to know the common terms, what are "Malware Packers", for instance. This will allow you to better approach the nature of any security incident. So, for starters, Malware analysis involves…