Attack Chain Series: Remote Access Service Compromise Part 1 โ RDS - relevant in the age of rapid remote access infrastructure (spoiler: password spraying)
๐ฃdigicat
๐@malwr
๐ฃdigicat
๐@malwr
Medium
Attack Chain Series: Remote Access Service Compromise Part 1 โ RDS
This post covers initial compromise via the RDS service, bypassing AppLocker and AMSI protections, and domain/trust compromise.
Introduction to iLEAPP - iOS Forensics Made Easy
Good morning,
This monthโs episode is a special collaboration with Alexis Brignoni and introduces an area of forensics not previously explored within any other 13Cubed episode โ smartphone forensics! Letโs take a look at iLEAPP - a free, open source, and easy to use #iOS forensics tool.
Episode:
https://www.youtube.com/watch?v=fEYV5vVAdu4
Episode Guide:
https://www.13cubed.com/episodes
Channel:
https://www.youtube.com/13cubed
Patreon (Help support 13Cubed):
https://www.patreon.com/13cubed
๐ฃ13Cubed
๐@malwr
Good morning,
This monthโs episode is a special collaboration with Alexis Brignoni and introduces an area of forensics not previously explored within any other 13Cubed episode โ smartphone forensics! Letโs take a look at iLEAPP - a free, open source, and easy to use #iOS forensics tool.
Episode:
https://www.youtube.com/watch?v=fEYV5vVAdu4
Episode Guide:
https://www.13cubed.com/episodes
Channel:
https://www.youtube.com/13cubed
Patreon (Help support 13Cubed):
https://www.patreon.com/13cubed
๐ฃ13Cubed
๐@malwr
YouTube
Introduction to iLEAPP - iOS Forensics Made Easy
In this special 13Cubed collaboration episode, we'll take a look at iLEAPP - a free, open source, and easy to use iOS forensics tool written by Alexis Brignoni.
*** If you enjoy this video, please consider supporting 13Cubed on Patreon at patreon.com/13cubed.โฆ
*** If you enjoy this video, please consider supporting 13Cubed on Patreon at patreon.com/13cubed.โฆ
Dissecting the Windows Defender Driver - WdFilter (Part 3) :: Up is Down and Black is White
๐ฃdigicat
1๏ธโฃ Part 1: https://n4r1b.netlify.com/posts/2020/01/dissecting-the-windows-defender-driver-wdfilter-part-1/
2๏ธโฃ Part 2: https://n4r1b.netlify.com/posts/2020/02/dissecting-the-windows-defender-driver-wdfilter-part-2/
๐@malwr
๐ฃdigicat
1๏ธโฃ Part 1: https://n4r1b.netlify.com/posts/2020/01/dissecting-the-windows-defender-driver-wdfilter-part-1/
2๏ธโฃ Part 2: https://n4r1b.netlify.com/posts/2020/02/dissecting-the-windows-defender-driver-wdfilter-part-2/
๐@malwr
n4r1b.netlify.app
Dissecting the Windows Defender Driver - WdFilter (Part 3)
In this series of posts I'll be explaining how the Windows Defender main Driver works, in this third post we will look into the callback routine for process/desktop handle operations and also into everything related to drivers information and verification
Patching MacOS Sketch.App for unlimited Trial in Ghidra
๐ฃck3k
Can somebody elaborate on how this qualifies as security related, when it's an article about how to pirate a piece of software?
๐คDebugDucky
๐@malwr
๐ฃck3k
Can somebody elaborate on how this qualifies as security related, when it's an article about how to pirate a piece of software?
๐คDebugDucky
๐@malwr
deviltux.thedev.id
Patching MacOS Sketch.App for unlimited Trial in Ghidra
<%= @description %>
Phishing Blocklist sourced from Phishtank
I created this because it's useful for me, Perhaps it might be useful for you.
A Phishing blocklist from Phishtank, Originally intended use within PiHole but you can use it in other things too.
https://github.com/tg12/pihole-phishtank-list
๐ฃCoronationStreetFan1
These days from a business standpoint itโs protect against zero-day or go home Iโm afraid.
Iโm sure this will be useful for home users though with things like pihole, thanks for sharing.
๐คMSPInTheUK
I believe phishing.army covers this
Also: https://firebog.net/
๐คDevinSysAdmin
๐@malwr
I created this because it's useful for me, Perhaps it might be useful for you.
A Phishing blocklist from Phishtank, Originally intended use within PiHole but you can use it in other things too.
https://github.com/tg12/pihole-phishtank-list
๐ฃCoronationStreetFan1
These days from a business standpoint itโs protect against zero-day or go home Iโm afraid.
Iโm sure this will be useful for home users though with things like pihole, thanks for sharing.
๐คMSPInTheUK
I believe phishing.army covers this
Also: https://firebog.net/
๐คDevinSysAdmin
๐@malwr
GitHub
GitHub - tg12/pihole-phishtank-list: A blocklist for Pihole from PhishTank
A blocklist for Pihole from PhishTank. Contribute to tg12/pihole-phishtank-list development by creating an account on GitHub.
Excision: An In-Browser System for Detection of Malicious Third-Party Content Inclusions
๐ฃsajjadium
๐@malwr
๐ฃsajjadium
๐@malwr
GitHub
GitHub - sajjadium/Excision: Excision: An In-Browser System for Detection of Malicious Third-Party Content Inclusions
Excision: An In-Browser System for Detection of Malicious Third-Party Content Inclusions - sajjadium/Excision
keystack: a proof-of-concept demo for "cracking" AES-256 when keys are left unprotected in another process
๐ฃmtreece
This was inspired by a friend who wondered/commented that it might be difficult for an attacker to brute force search the memory of another process to find crypto keys if they weren't cleared from memory after use.
Just a fun demo; nothing (yet) serious :-).
๐คmtreece
๐@malwr
๐ฃmtreece
This was inspired by a friend who wondered/commented that it might be difficult for an attacker to brute force search the memory of another process to find crypto keys if they weren't cleared from memory after use.
Just a fun demo; nothing (yet) serious :-).
๐คmtreece
๐@malwr
GitLab
Tyler Reece / keystack ยท GitLab
A Frida Script to Bypass Mono/Xamarin based Certificate Pinning on Android Devices for Mobile Assessments and Man-in-the-Middle
๐ฃalxbl
๐@malwr
๐ฃalxbl
๐@malwr
GoSecure
24/7 managed detection, response, and expert cybersecurity services - GoSecure
We provide around-the-clock threat detection and incident response, backed by expert consulting to keep your organization secure.