New SUNSHUTTLE Second-Stage Backdoor Uncovered Targeting U.S.-Based Entity; Possible Connection to UNC2452
🗣digicat
🎖@malwr
🗣digicat
🎖@malwr
Google Cloud
Mandiant Cybersecurity Consulting
Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.
GoldMax, GoldFinder, and Sibot: Analyzing NOBELIUM’s layered persistence - Microsoft Security
🗣digicat
🎖@malwr
🗣digicat
🎖@malwr
Microsoft News
GoldMax, GoldFinder, and Sibot: Analyzing NOBELIUM’s layered persistence
Microsoft has identified three new pieces of malware being used in late-stage activity by NOBELIUM – the actor behind the SolarWinds attacks, SUNBURST, and TEARDROP.
I often get asked what does if __name__ == “__main__” do? Here's an explanation!
Read about it here :) https://www.conorjohanlon.com/if\_\_name\_\_eq\_\_main\_\_explained/
🗣conoroha
🎖@malwr
Read about it here :) https://www.conorjohanlon.com/if\_\_name\_\_eq\_\_main\_\_explained/
🗣conoroha
🎖@malwr
Conor J O'Hanlon
What does if __name__ == "__main__" do?
Having if __name__ == "__main__" in a Python script will allow any code in this if statement to execute if that Python script is executed as the main script
Automate Google Maps API keys analysis
🗣marduc812
Nice work! Wonder if these are generally addressed with adding the signature? Does generating the signature at scale (like uber) cause any noticable reduction in response time?
Cheers!
👤theappanalyst
🎖@malwr
🗣marduc812
Nice work! Wonder if these are generally addressed with adding the signature? Does generating the signature at scale (like uber) cause any noticable reduction in response time?
Cheers!
👤theappanalyst
🎖@malwr
GitHub
GitHub - joanbono/gap: Google Maps API checker
Google Maps API checker. Contribute to joanbono/gap development by creating an account on GitHub.
Tutorial: Azure Active Directory single sign-on (SSO) integration with AWS Single Sign-on
🗣digicat
🎖@malwr
🗣digicat
🎖@malwr
Docs
Microsoft Entra SSO integration with AWS IAM Identity Center (successor to AWS Single Sign-On) - Microsoft Entra ID
Learn how to configure single sign-on between Microsoft Entra ID and AWS IAM Identity Center (successor to AWS Single Sign-On).
How to extract Python source code from Py2App packed Mach-O Binaries
🗣lordx64
This is amazing
👤pm_me_your_findings
🎖@malwr
🗣lordx64
This is amazing
👤pm_me_your_findings
🎖@malwr
Medium
How to extract Python source code from Py2App packed Mach-O Binaries
I got many requests after my last tweet on the discovery of a backdoored Electrum wallet, that was notarized by Apple !
Hosted Exchange to Microsoft 365 migration - How To
I am doing my best to learn how to migrate Hosted Exchange to Microsoft 365. I have found a few resources helpful:
https://docs.microsoft.com/en-us/exchange/mailbox-migration/cutover-migration-to-office-365
https://www.quadrotech-it.com/blog/how-to-migrate-exchange-to-office-365-step-by-step-part-1/
https://www.quadrotech-it.com/blog/how-to-migrate-exchange-to-office-365-step-by-step-part-2/
https://www.youtube.com/watch?v=BwbFUtL9AIE
Anyone out there have any experience or resources they would like to share that were helpful?
I want to be sure when I attempt this I have a solid understanding on what is suppose to happen.
🗣Failed2FixThisThing
No idea why anyone would pay for tools like MigrationWiz or BitTitan when they don't offer any value on top of the FREE tools available to you from Microsoft that do the exact same thing
Works well for us and saved us ££££
https://docs.microsoft.com/en-us/exchange/mailbox-migration/cutover-migration-to-office-365
👤d4ngerm0use
Big fan of Audriga. Germany based company with great support.
👤hasKo91
Hybrid is easy.. its almost all wizard these days.
We’ve done a few hundred server migrations.. thousands of mailboxes.
Bittitan is good but not needed for same domain migrations. I did use it for a gmail to 365 migration last week though.
👤capturedlight77
🎖@malwr
I am doing my best to learn how to migrate Hosted Exchange to Microsoft 365. I have found a few resources helpful:
https://docs.microsoft.com/en-us/exchange/mailbox-migration/cutover-migration-to-office-365
https://www.quadrotech-it.com/blog/how-to-migrate-exchange-to-office-365-step-by-step-part-1/
https://www.quadrotech-it.com/blog/how-to-migrate-exchange-to-office-365-step-by-step-part-2/
https://www.youtube.com/watch?v=BwbFUtL9AIE
Anyone out there have any experience or resources they would like to share that were helpful?
I want to be sure when I attempt this I have a solid understanding on what is suppose to happen.
🗣Failed2FixThisThing
No idea why anyone would pay for tools like MigrationWiz or BitTitan when they don't offer any value on top of the FREE tools available to you from Microsoft that do the exact same thing
Works well for us and saved us ££££
https://docs.microsoft.com/en-us/exchange/mailbox-migration/cutover-migration-to-office-365
👤d4ngerm0use
Big fan of Audriga. Germany based company with great support.
👤hasKo91
Hybrid is easy.. its almost all wizard these days.
We’ve done a few hundred server migrations.. thousands of mailboxes.
Bittitan is good but not needed for same domain migrations. I did use it for a gmail to 365 migration last week though.
👤capturedlight77
🎖@malwr
Docs
Migrate email to Exchange Online using the Exchange cutover method in Exchange Online
As part of a Microsoft 365 or Office 365 deployment, you can migrate the contents of user mailboxes from a source email system to Microsoft 365 or Office 365. When you do this all at one time, it's called a cutover migration. Choosing a cutover migration…
How do Windows 'fibers' work? Practical Reverse Engineering [YouTube](https://www.youtube.com/watch?v=YiGKVouxxa4)
🗣rolfr
🎖@malwr
🗣rolfr
🎖@malwr
YouTube
How do Windows 'fibers' work? Practical Reverse Engineering.
This video aims to show how to reverse engineer a specific Windows feature (fibers). The idea is not to talk about how Windows fibers works, but, naturally, the internals about how are Windows fibers implemented by Microsoft will be discovered while reverse…
At Least 30,000 U.S. Organizations Newly Hacked Via Holes in Microsoft’s Email Software
🗣digicat
Glad ours is not exposed to the internet.
👤phl23
For anyone who is having to investigate older systems to see if they’ve been affected, this GitHub has a list of the valid files (& hashes) from an Exchange 2010 box to help with webshell detection: GitHub|PwnDefend|Exchange2010 Hashes
👤TroublingName
And patching it is proving to be a real son of a bitch.
👤bolunez
🎖@malwr
🗣digicat
Glad ours is not exposed to the internet.
👤phl23
For anyone who is having to investigate older systems to see if they’ve been affected, this GitHub has a list of the valid files (& hashes) from an Exchange 2010 box to help with webshell detection: GitHub|PwnDefend|Exchange2010 Hashes
👤TroublingName
And patching it is proving to be a real son of a bitch.
👤bolunez
🎖@malwr
iPhone Mobile Forensics | TryHackMe IOS Forensics
In this video walkthrough, we demonstrated the process of analyzing a dump taken from an IOS device namely iPhone.
Video is here
🗣David-hawk
🎖@malwr
In this video walkthrough, we demonstrated the process of analyzing a dump taken from an IOS device namely iPhone.
Video is here
🗣David-hawk
🎖@malwr
YouTube
iPhone Mobile Forensics | TryHackMe IOS Forensics
This video is a comprehensive walkthrough of TryHackMe's "iOS Forensics" room, designed to help learners practice digital forensic techniques on iPhone devices. The scenario involves analyzing a file system dump from a suspect’s iPhone to gather evidence…
I made a tutorial on intercepting Android application traffic including SSL pinning bypass and hiding your root priviliges.
🗣shirak_untel
🎖@malwr
🗣shirak_untel
🎖@malwr
YouTube
Hacking: intercepting Android requests to find security vulnerabilities.
Burp: https://portswigger.net/burp/communitydownload
MEmu: https://www.memuplay.com/
Xposed: https://forum.xda-developers.com/t/official-xposed-for-lollipop-marshmallow-nougat-oreo-v90-beta3-2018-01-29.3034811/
00:00 - Install Burp
00:57 - Install Android…
MEmu: https://www.memuplay.com/
Xposed: https://forum.xda-developers.com/t/official-xposed-for-lollipop-marshmallow-nougat-oreo-v90-beta3-2018-01-29.3034811/
00:00 - Install Burp
00:57 - Install Android…
Investigation into the state of NiM coded malware
🗣sysopfb
Nice. That team does good work
👤Hartescout
🎖@malwr
🗣sysopfb
Nice. That team does good work
👤Hartescout
🎖@malwr
Medium
Investigation into the state of Nim malware
By: Jason Reaves and Joshua Platt