List of IP ranges owned by AWS, Google, OVH, Microsoft, and much more. For security researchers, easier mass web scanning - Created by Pyr0cc
🗣ZeusRoot

Here's another useful set of scripts and data:

https://github.com/dpsystems/login-shield

This is an IP-based blacklist of known IP space of both rogue ISPs, foreign countries and VPN space that is used with iptables to block any login ports on your computer. We're using it on a few servers and it's blocked 99% of the unauthorized logins.
👤mabu

This list is also very convenient for phishing website hosting :D
👤Hellcleaver

Microsoft publishes theirs because azure is all dynamic public IP’s for their PaaS services so without knowing Microsoft’s Ip blocks you have to make wide open firewall rules.

Now you only have to leave your PaaS open to all of Microsoft and their customer base.

Super secure.
👤ResidentKernel


🎖@malwr

The x86 Advanced Matrix Extension (AMX) Brings Matrix Operations
🗣mttd

Is it subject to branching? I'm thinking no, but hoping somebody who has read the reference manual might know.
👤masta


🎖@malwr

Frida 12.10 is out with HotSpot JVM support, Stalker ARM improvements, and more
🗣oleavr

Thanks for your work on this project, oleavr. Nice contrib,0xraaz.
👤truelai

This is great news. Thank you oleavr.
👤jmp_jsp


🎖@malwr

M00nD3v, HawkEye threat actor, sells malware after COVID-19 diagnosis
https://www.blueliv.com/cyber-security-and-cyber-threat-intelligence-blog-blueliv/research/covid-19-cybercrime-m00nd3v-hawkeye-malware-threat-actor/

ℹ️ Sent from one of our members

🎖@malwr

[Hwp Malware kimsuky's love is all around](https://sfkino.tistory.com/78)
🗣digicat


🎖@malwr

HID Attack using 1.5$ Arduino Rubber Ducky-ish
🗣jithins1610

A lot of people don’t trust these cause the price but they’re a charm and so. Much. God. Damn. Fun.
👤maximus1218

Pro tip though, get several Digisparks. There’s probably a 20% chance they won’t work
👤mcbergstedt

The dollar sign goes first
👤LegitimateCrepe


🎖@malwr

10 Years of Linux Security - A Report Card
🗣citypw

Keep in mind that grsecurity's business model relies on painting Linux, and in particular Linux security, in a negative light.

I'm not saying that makes any of this information invalid by itself, but it's worth considering the source.
👤awkisopen

I see words in that PDF but barely understand anything it's saying. Context is key.

This was clearly written by an engineer who had no idea whether or not the audience would understand the presentation.
👤ToasterToasts

Well, that could have benefited from some explanation of acronyms.

Most of the recommendations seemed to be process or attitude things. How about recommending some simplification, throwing away old code even if it still mostly works ? I'm mostly talking about user-space code. Could we get rid of the init structure and commit to systemd ? Get rid of some old encryption and hashing and VPN modules, force people onto the new stuff ? Have DNS specified in 1 place instead of 5 ?
👤billdietrich1


🎖@malwr

ARMRef (ARMv8.5 assembly reference app)
🗣_evilpenguin

Sadly no Android support
👤KrieghofGames


🎖@malwr

The analyzer automates the process of exploring EFI files. After the analysis, well-known protocols, interrupts, etc. are found.
https://github.com/DSecurity/efiSeek


🎖@malwr