Binwalk
I've figured out how and when exactly to use Binwalk on files (JPG files for example, steganography).
But what is exactly Binwalk? How does it show me more files inside a file?
How does it work?
🗣blue8ird
It looks for file format signatures and for file headers/footers of different formats.
Btw a more common use case than steganography is extracting files from a firmware image.
👤Tompazi
🎖@malwr
I've figured out how and when exactly to use Binwalk on files (JPG files for example, steganography).
But what is exactly Binwalk? How does it show me more files inside a file?
How does it work?
🗣blue8ird
It looks for file format signatures and for file headers/footers of different formats.
Btw a more common use case than steganography is extracting files from a firmware image.
👤Tompazi
🎖@malwr
reddit
Binwalk
I've figured out how and when exactly to use Binwalk on files (JPG files for example, steganography). But what is exactly Binwalk? How does it...
I just open-sourced sweetie data, a repo of multiple honeypot logs.
🗣0xsha
Nice thanks for sharing. I've shut down the majority of my honeypots and just use threat feeds and other intelligence streams.
👤intoxicatednoob
🎖@malwr
🗣0xsha
Nice thanks for sharing. I've shut down the majority of my honeypots and just use threat feeds and other intelligence streams.
👤intoxicatednoob
🎖@malwr
GitHub
GitHub - 0xsha/sweetie-data: This repo contains logstash of various honeypots
This repo contains logstash of various honeypots. Contribute to 0xsha/sweetie-data development by creating an account on GitHub.
[PDF] OSS Supply Chain Security by the Linux Foundation
https://www.linuxfoundation.org/wp-content/uploads/2020/02/oss\_supply\_chain\_security.pdf
🗣digicat
🎖@malwr
https://www.linuxfoundation.org/wp-content/uploads/2020/02/oss\_supply\_chain\_security.pdf
🗣digicat
🎖@malwr
Workshop on Binary Analysis Research (BAR) 2020 at NDSS
🗣mttd
It would be nice to have the slides of the invited talks as well.
👤XVilka
🎖@malwr
🗣mttd
It would be nice to have the slides of the invited talks as well.
👤XVilka
🎖@malwr
ObliqueRAT, a new malware employed in attacks on government targets in Southeast Asia
🗣quellaman
🎖@malwr
🗣quellaman
🎖@malwr
Security Affairs
ObliqueRAT, a new malware employed in attacks on government targets
Cisco Talos researchers discovered a new malware, tracked as ObliqueRAT, that was employed targeted attacks against organizations in Southeast Asia.
Tutorial: Archive Azure AD logs to an Azure storage account
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/quickstart-azure-monitor-route-logs-to-storage-account
🗣digicat
🎖@malwr
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/quickstart-azure-monitor-route-logs-to-storage-account
🗣digicat
🎖@malwr
Docs
How to archive activity logs to a storage account - Microsoft Entra ID
Learn how to archive Microsoft Entra activity logs to a storage account through Diagnostic settings.
Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations. (Note: it is designed to alert offense to defensive 'enquiries')
🗣digicat
🎖@malwr
🗣digicat
🎖@malwr
GitHub
GitHub - outflanknl/RedELK: Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well…
Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations. - outflanknl/RedELK
CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys
🗣RedmondSecGnome
🎖@malwr
🗣RedmondSecGnome
🎖@malwr
Zero Day Initiative
Zero Day Initiative — CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys
This most recent Patch Tuesday, Microsoft released an Important-rated patch to address a remote code execution bug in Microsoft Exchange Server. This vulnerability was reported to us by an anonymous researcher and affects all supported versions of Microsoft…