Test a TLS server: check the security of your SSL/TLS services
🗣dr_fogs

Do it yourself - https://github.com/F5-Labs/cryptonice
👤dunsany

Looks like a UI to testssl.sh ( it is mentioned at the bottom to be based )
👤rathaus

https://www.ssllabs.com/ssltest/
👤kaipee


🎖@malwr

Threat Intelligence from Honeypots
I've tried googling for this but it just shows me how I can setup my own Honeypots, which I'm tempted to do. Is there a way I can view data from other people's Honeypots? I'd be interested to see what vulnerabilities are being exploited right now (i.e. CVEs), what the sources are (region) and how often. Does anything exist like this?
🗣InternalCode

I don't think private companies would be willing to fork over some info about their honey pots, however, you could find a friend or student for sure.
👤TheBaldTech58

honeydb.io and badpackets.net come to mind
👤1128327

I don't think there is an incentive for others to provide you their raw data.

Unit 42 from Palo Alto will publish data that they obtain via their honeypots, but I don't think that is what you're after.

Black Hills will do a lot of honeypot education, as they are very strong in active defense.


Not pissing on your campfire, just drawing your attention to the biz. Much of their methodology is proprietary and they don't want you learning it since its their business.
👤ajay63


🎖@malwr

Determining VueScan's autofocus is nonfunctional using a shared library shim
🗣freezway

Uh, flatbed scanners don't have variable focus - because the scanned item is in a fixed location -- pressed against the glass.

The focus feature works on scanners that have variable focus -- like Nikon 35mm negative & slide scanners.
👤PsychYYZ


🎖@malwr

Prelude Operator is a new free/open-source red team platform, built as a desktop C2. It is heavily supported & community-driven. Main goal is to train IT/InfoSec/DevOps/blue teams to conduct their own security assessments. There is even open-source (free) "in person" training...
🗣privat3duck3y

It seems when you run the Electron app you're greeted with a requirement to provide an email address. After providing it you receive a password that essentially gives you access to the application and it's inner functions.

I may be missing something but there doesn't seem to be any source code available for the Electron app or back-end application server in your Github repository. The only things I can find are the procedures/TTPs, pneuma (c2 agent) and operator-support which contains YAML and HTML files that do not appear to be electron client related. The latter is also described as shown below:

> This repository is a public spot to report issues and request features.

If I'm correct and you can't truly self-host Prelude, it seems like the only thing opensource about this project is the procedures. It feels like you're trying to benefit from the community for a massive part of what makes Prelude function (the plugins) without giving back with the meat of the project.

If I'm wrong I'm happy to update this comment, I just don't understand how based on the above Prelude as a solution can be considered opensource. In summary, I think it's misleading to advertise it as opensource if only a subsection of it is.
👤Top-Brilliant-8

This looks really interesting. Your docs also lead me to the blog, which has some really great content that I'm working through now. Very cool stuff all around, thank you for sharing!
👤initstring


🎖@malwr

Sailing Past Security Measures In AD
🗣The-Luemmel

Nice
👤Dmcxblue

Nice write up!
👤biglib

Thanks for this post, very informative :)
👤GameNCode


🎖@malwr

🚨 CVE-2020-7343
Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulating a directory used by MA for temporary files. The product would continue to function with out-of-date detection files.

🎖@cveNotify

Android: Gaining access to arbitrary* Content Providers
https://blog.oversecured.com/Gaining-access-to-arbitrary-Content-Providers/


ℹ️ Sent from one of our members


🎖@malwr

Digital Forensics Case Management software - Suggestions?
Hi everyone, I'd like to ask you a little off-topic question.

We are a Digital Forensics Agency based in Italy, and right now, as our work increased we are having difficulties managing all the cases we have.

I wanted to ask if you use any kind of case management software, and if yes, if you had it custom built or if it was a pre-made solution.
All the software in the field I found are for law firms and lawyers, but that's not what we are looking for.

Our ideal software should handle cases from multiple public prosecutor's offices but also from private clients, should keep track of received evidences, HDDs used, expenses and business trips, etc.

I hope this question doesn't break any subreddit rules.
Thanks.
🗣walker1993

Kirjuri (no longer actively developed since 09/2017) did cover my needs after some tweaks.

https://github.com/AnttiKurittu/kirjuri
👤Arcus2005

Whilst we have had to code our own DB for our case management (in order to achieve ISO/IEC 17025:2017), I have trialled Monolith and have to say, it is very good. The designer is very proactive and will respond to suggestions for adaptation and improvement:

https://monolithforensics.com
👤BaudBish


🎖@malwr

[Linux Kernel Exploitation 0x2 Controlling RIP and Escalating privileges via Stack Overflow](https://blog.k3170makan.com/2021/01/linux-kernel-exploitation-0x2.html)
🗣k3170makan


🎖@malwr

Dumping the Zynq bootROM the easy way
🗣Phenominom

Awesome, thank you for the link! I will try it on my zynq board this evening. Right yesterday I was wandering about the possibility to access the BootROM!
👤glukosio


🎖@malwr

🚨 CVE-2021-3177
Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.

🎖@cveNotify