Looking to learn about system exploitation, but don't know where to start? This (very) detailed guide covers all the basics. Contains 21 detailed CTF solutions, plenty of theory, and zero times the phrase "exercise left to the reader".
🗣ynvb
> The standard answer is often an embarrassed mumble that there are no golden rules, and that you should probably follow this or that person on Twitter to get tips, then “go practice, like you would with CTF exercises.”
CTF exercises are basically self-contained challenges that require the player to crack some problem and recover some piece of text (the “flag”) as a proof of having cracked the problem.
This is always my answer to this question.
👤MaliciouSSymbol
Thank you!!!
👤redimusu76
This is a great read. I hope more of this pops up.
👤snake_case_believer
🎖@malwr
🗣ynvb
> The standard answer is often an embarrassed mumble that there are no golden rules, and that you should probably follow this or that person on Twitter to get tips, then “go practice, like you would with CTF exercises.”
CTF exercises are basically self-contained challenges that require the player to crack some problem and recover some piece of text (the “flag”) as a proof of having cracked the problem.
This is always my answer to this question.
👤MaliciouSSymbol
Thank you!!!
👤redimusu76
This is a great read. I hope more of this pops up.
👤snake_case_believer
🎖@malwr
Check Point Research
"I want to learn about exploitation! Where do I start?" - Check Point Research
A comprehensive exploitation ("hacking") tutorial based on Georgia Tech's pwnable.kr exercises. Theory, hands-on exercises and detailed solutions.
Writing Your First Bootloader for Better Analyses
https://marcoramilli.com/2019/09/03/writing-your-first-bootloader-for-better-analyses/
🎖@malwr
https://marcoramilli.com/2019/09/03/writing-your-first-bootloader-for-better-analyses/
🎖@malwr
Marco Ramilli Web Corner
Writing Your First Bootloader for Better Analyses
From time to time we might observe special Malware storing themselves into a MBR and run during the booting process. Attackers could use this neat technique to infect and to mess-up your disk and e…
InQL Scanner: can be used as a stand-alone script, or as a Burp Suite extension (available for both Professional and Community editions) to assess GraphQL
🗣digicat
🎖@malwr
🗣digicat
🎖@malwr
Doyensec
InQL Scanner
As a part of our continuing security research journey, we started developing an internal tool to speed-up GraphQL security testing efforts. We’re excited to announce that InQL is available on Github.
iOS exploit chain deploys “LightSpy” feature-rich malware (same campaign as Operation Poisoned News: Hong Kong Users Targeted With Mobile Malware via Local News Links)
🗣digicat
🎖@malwr
🗣digicat
🎖@malwr
Securelist
iOS exploit chain deploys LightSpy feature-rich malware
A watering hole was discovered on January 10, 2020 utilizing a full remote iOS exploit chain to deploy a feature-rich implant named LightSpy.
Hacker Mails Best Buy Gift Card Offer to Trick Victim into Plugging in Malicious USB Thumb Drive
🗣andyholla84
🎖@malwr
🗣andyholla84
🎖@malwr
PCMAG
PSA: If You Get a 'Best Buy Gift Card' on a USB Drive in the Mail, Don't Plug It Into Your PC
Trustwave has uncovered an incident where a hacker mailed a malicious USB stick to a victim on the pretense the thumb drive was part of a Best Buy gift card offer. In reality, the thumb drive was full of malware.
Fitz Roy: a free solo climbing to sanitize virtual machines
🗣vilethan3773
Fitz Roy monitorizes Linux guests filesystems (raw, qcow2, vmdk , vdi, vpc, vhd) relying on libguestfs and Virustotal's API. Libguestfs mounts virtual machine filesystem and uploads suspicious files to Virustotal's API which are then analyzed.
🎖@malwr
🗣vilethan3773
Fitz Roy monitorizes Linux guests filesystems (raw, qcow2, vmdk , vdi, vpc, vhd) relying on libguestfs and Virustotal's API. Libguestfs mounts virtual machine filesystem and uploads suspicious files to Virustotal's API which are then analyzed.
🎖@malwr
GitLab
Luis Fueris / Fitz Roy
Fitz Roy monitorizes Linux guests filesystems (raw, qcow2, vmdk , vdi, vpc, vhd) relying on libguestfs and Virustotal's API. Libguestfs mounts virtual machine filesystem and uploads suspicious files...
When Mac has gone to hibernate/safe sleep can memory still be gathered?
If a MacBook Pro goes into hibernation mode can the ram still be acquired? The laptop is encrypted FV2 APFS...I’m guessing the ram would be written to disk and only FileVault password could cause the data to be written back to them ram...
🗣Lackluster123
Are you asking "can it be recovered after it wakes up?"
Or "can it be recovered while it's in that state?"
The answer to the first one is yes, and the second one is "not with any tool I've ever heard of."
👤Cypher_Blue
🎖@malwr
If a MacBook Pro goes into hibernation mode can the ram still be acquired? The laptop is encrypted FV2 APFS...I’m guessing the ram would be written to disk and only FileVault password could cause the data to be written back to them ram...
🗣Lackluster123
Are you asking "can it be recovered after it wakes up?"
Or "can it be recovered while it's in that state?"
The answer to the first one is yes, and the second one is "not with any tool I've ever heard of."
👤Cypher_Blue
🎖@malwr
reddit
When Mac has gone to hibernate/safe sleep can memory still be...
If a MacBook Pro goes into hibernation mode can the ram still be acquired? The laptop is encrypted FV2 APFS...I’m guessing the ram would be...
A Deep Dive Into CVE-2020-0729: Remote Code Execution Through Windows .LNK Files
🗣RedmondSecGnome
🎖@malwr
🗣RedmondSecGnome
🎖@malwr
Zero Day Initiative
Zero Day Initiative — CVE-2020-0729: Remote Code Execution Through .LNK Files
In this excerpt of a Trend Micro Vulnerability Research Service vulnerability report, John Simpson and Pengsu Cheng of the Trend Micro Research Team detail a recent remote code execution bug in Microsoft Windows .LNK files. The following is a portion of their…
PCode Disasm - VB6 For Loops
🗣dz3212
Wow. This is so cool!!! When do you plan to release this? I tried to find the WKTVB Debugger source code and use it, however, I don't have any idea how VB6 Pcode debugger works.
👤ismael_akez
🎖@malwr
🗣dz3212
Wow. This is so cool!!! When do you plan to release this? I tried to find the WKTVB Debugger source code and use it, however, I don't have any idea how VB6 Pcode debugger works.
👤ismael_akez
🎖@malwr
YouTube
Vb6 Pcode For Loops Disasm
Looking at how VB6 PCode For Loops work in disassembler and debugger