Automate Google Maps API keys analysis
🗣marduc812
Nice work! Wonder if these are generally addressed with adding the signature? Does generating the signature at scale (like uber) cause any noticable reduction in response time?
Cheers!
👤theappanalyst
🎖@malwr
🗣marduc812
Nice work! Wonder if these are generally addressed with adding the signature? Does generating the signature at scale (like uber) cause any noticable reduction in response time?
Cheers!
👤theappanalyst
🎖@malwr
GitHub
GitHub - joanbono/gap: Google Maps API checker
Google Maps API checker. Contribute to joanbono/gap development by creating an account on GitHub.
Tutorial: Azure Active Directory single sign-on (SSO) integration with AWS Single Sign-on
🗣digicat
🎖@malwr
🗣digicat
🎖@malwr
Docs
Microsoft Entra SSO integration with AWS IAM Identity Center (successor to AWS Single Sign-On) - Microsoft Entra ID
Learn how to configure single sign-on between Microsoft Entra ID and AWS IAM Identity Center (successor to AWS Single Sign-On).
How to extract Python source code from Py2App packed Mach-O Binaries
🗣lordx64
This is amazing
👤pm_me_your_findings
🎖@malwr
🗣lordx64
This is amazing
👤pm_me_your_findings
🎖@malwr
Medium
How to extract Python source code from Py2App packed Mach-O Binaries
I got many requests after my last tweet on the discovery of a backdoored Electrum wallet, that was notarized by Apple !
Hosted Exchange to Microsoft 365 migration - How To
I am doing my best to learn how to migrate Hosted Exchange to Microsoft 365. I have found a few resources helpful:
https://docs.microsoft.com/en-us/exchange/mailbox-migration/cutover-migration-to-office-365
https://www.quadrotech-it.com/blog/how-to-migrate-exchange-to-office-365-step-by-step-part-1/
https://www.quadrotech-it.com/blog/how-to-migrate-exchange-to-office-365-step-by-step-part-2/
https://www.youtube.com/watch?v=BwbFUtL9AIE
Anyone out there have any experience or resources they would like to share that were helpful?
I want to be sure when I attempt this I have a solid understanding on what is suppose to happen.
🗣Failed2FixThisThing
No idea why anyone would pay for tools like MigrationWiz or BitTitan when they don't offer any value on top of the FREE tools available to you from Microsoft that do the exact same thing
Works well for us and saved us ££££
https://docs.microsoft.com/en-us/exchange/mailbox-migration/cutover-migration-to-office-365
👤d4ngerm0use
Big fan of Audriga. Germany based company with great support.
👤hasKo91
Hybrid is easy.. its almost all wizard these days.
We’ve done a few hundred server migrations.. thousands of mailboxes.
Bittitan is good but not needed for same domain migrations. I did use it for a gmail to 365 migration last week though.
👤capturedlight77
🎖@malwr
I am doing my best to learn how to migrate Hosted Exchange to Microsoft 365. I have found a few resources helpful:
https://docs.microsoft.com/en-us/exchange/mailbox-migration/cutover-migration-to-office-365
https://www.quadrotech-it.com/blog/how-to-migrate-exchange-to-office-365-step-by-step-part-1/
https://www.quadrotech-it.com/blog/how-to-migrate-exchange-to-office-365-step-by-step-part-2/
https://www.youtube.com/watch?v=BwbFUtL9AIE
Anyone out there have any experience or resources they would like to share that were helpful?
I want to be sure when I attempt this I have a solid understanding on what is suppose to happen.
🗣Failed2FixThisThing
No idea why anyone would pay for tools like MigrationWiz or BitTitan when they don't offer any value on top of the FREE tools available to you from Microsoft that do the exact same thing
Works well for us and saved us ££££
https://docs.microsoft.com/en-us/exchange/mailbox-migration/cutover-migration-to-office-365
👤d4ngerm0use
Big fan of Audriga. Germany based company with great support.
👤hasKo91
Hybrid is easy.. its almost all wizard these days.
We’ve done a few hundred server migrations.. thousands of mailboxes.
Bittitan is good but not needed for same domain migrations. I did use it for a gmail to 365 migration last week though.
👤capturedlight77
🎖@malwr
Docs
Migrate email to Exchange Online using the Exchange cutover method in Exchange Online
As part of a Microsoft 365 or Office 365 deployment, you can migrate the contents of user mailboxes from a source email system to Microsoft 365 or Office 365. When you do this all at one time, it's called a cutover migration. Choosing a cutover migration…
How do Windows 'fibers' work? Practical Reverse Engineering [YouTube](https://www.youtube.com/watch?v=YiGKVouxxa4)
🗣rolfr
🎖@malwr
🗣rolfr
🎖@malwr
YouTube
How do Windows 'fibers' work? Practical Reverse Engineering.
This video aims to show how to reverse engineer a specific Windows feature (fibers). The idea is not to talk about how Windows fibers works, but, naturally, the internals about how are Windows fibers implemented by Microsoft will be discovered while reverse…
At Least 30,000 U.S. Organizations Newly Hacked Via Holes in Microsoft’s Email Software
🗣digicat
Glad ours is not exposed to the internet.
👤phl23
For anyone who is having to investigate older systems to see if they’ve been affected, this GitHub has a list of the valid files (& hashes) from an Exchange 2010 box to help with webshell detection: GitHub|PwnDefend|Exchange2010 Hashes
👤TroublingName
And patching it is proving to be a real son of a bitch.
👤bolunez
🎖@malwr
🗣digicat
Glad ours is not exposed to the internet.
👤phl23
For anyone who is having to investigate older systems to see if they’ve been affected, this GitHub has a list of the valid files (& hashes) from an Exchange 2010 box to help with webshell detection: GitHub|PwnDefend|Exchange2010 Hashes
👤TroublingName
And patching it is proving to be a real son of a bitch.
👤bolunez
🎖@malwr
iPhone Mobile Forensics | TryHackMe IOS Forensics
In this video walkthrough, we demonstrated the process of analyzing a dump taken from an IOS device namely iPhone.
Video is here
🗣David-hawk
🎖@malwr
In this video walkthrough, we demonstrated the process of analyzing a dump taken from an IOS device namely iPhone.
Video is here
🗣David-hawk
🎖@malwr
YouTube
iPhone Mobile Forensics | TryHackMe IOS Forensics
This video is a comprehensive walkthrough of TryHackMe's "iOS Forensics" room, designed to help learners practice digital forensic techniques on iPhone devices. The scenario involves analyzing a file system dump from a suspect’s iPhone to gather evidence…
I made a tutorial on intercepting Android application traffic including SSL pinning bypass and hiding your root priviliges.
🗣shirak_untel
🎖@malwr
🗣shirak_untel
🎖@malwr
YouTube
Hacking: intercepting Android requests to find security vulnerabilities.
Burp: https://portswigger.net/burp/communitydownload
MEmu: https://www.memuplay.com/
Xposed: https://forum.xda-developers.com/t/official-xposed-for-lollipop-marshmallow-nougat-oreo-v90-beta3-2018-01-29.3034811/
00:00 - Install Burp
00:57 - Install Android…
MEmu: https://www.memuplay.com/
Xposed: https://forum.xda-developers.com/t/official-xposed-for-lollipop-marshmallow-nougat-oreo-v90-beta3-2018-01-29.3034811/
00:00 - Install Burp
00:57 - Install Android…
Investigation into the state of NiM coded malware
🗣sysopfb
Nice. That team does good work
👤Hartescout
🎖@malwr
🗣sysopfb
Nice. That team does good work
👤Hartescout
🎖@malwr
Medium
Investigation into the state of Nim malware
By: Jason Reaves and Joshua Platt
retoolkit - offline installer containing many reversing tools
🗣nandu88
As long as you’re working on Windows...
I’m not objecting to the fact it’s a Windows collection, just the fact that neither the Project nor the README think it worth mentioning...
👤gwynevans
It would be nice to have a table comparing installed tools between this one and flare vm.
👤movr0spblxr2
Is it safe to install...i don’t know. Haha...love it.
👤earthmisfit
🎖@malwr
🗣nandu88
As long as you’re working on Windows...
I’m not objecting to the fact it’s a Windows collection, just the fact that neither the Project nor the README think it worth mentioning...
👤gwynevans
It would be nice to have a table comparing installed tools between this one and flare vm.
👤movr0spblxr2
Is it safe to install...i don’t know. Haha...love it.
👤earthmisfit
🎖@malwr
GitHub
GitHub - mentebinaria/retoolkit: Reverse Engineer's Toolkit
Reverse Engineer's Toolkit. Contribute to mentebinaria/retoolkit development by creating an account on GitHub.
The Wine development release 6.4 is now available.
🗣_-ammar-_
What's new in this release (see below for details):
\- Support for the DTLS protocol.
\- Fontset support in DirectWrite.
\- Dialog for editing Access Control entries.
\- Theming support for a few more common controls.
\- Support for Korean Wansung encoding. - Various bug fixes.
7416 Support multiple independent displays for PowerPoint, OpenOffice.org, etc
16676 RTG Bills 2.x (VB6 app) reports 'ADO error 1BD Object doesn't support this action' on startup (msado15 'connectionGetIDsOfNames' is a stub)
25323 Civilization IV Beyond the Sword crashed when trying to start a new game.
31814 Gecko should clean up when upgrading
36463 wine can't load unstripped gecko builds
36697 64-bit InstallShield engine COM server 'ISBEW64.exe' crashes or hangs (32-bit InstallShield based installers in 64-bit WINEPREFIX)
37011 acid3.acidtests.org can't load with builtin IE
38744 support UNITYNETWORKAREAREGION
39381 32-bit Turbocad 8.0 LTE 'CrashSender.exe' utility crashes in WMI Query "SELECT * FROM Win32NetworkAdapterConfiguration where IPEnabled='True' and index=1"
41433 Acrobat Reader XI (11.0.8): Annotations are empty
42827 Canon MP Navigator EX 4.x/5.x installer crashes due to setupapi SPFILENOTIFYFILEINCABINET handler/callback insufficiencies
46969 Multiple 64-bit WDM kernel drivers want Windows 8+ 'ntdll.RtlQueryRegistryValuesEx' (WIBUKEY, Denuvo Anti-Cheat)
48127 Soldiers of Anarchy (demos & full game 1.1.2.178), crashes with an 'Unknown error' message when starting a level
48879 NVIDIA PhysX System Software 9.12.1031 installer fails ('Add64BitReg' VBScript action needs minimal 'WbemScripting.SWbemNamedValueSet' implementation)
49531 Multiple Qt5 applications spam the console continuously with 'fixme:netprofm:connectionGetAdapterId' ('INetworkConnection::GetAdapter' returns incorrect adapter GUID)(Futubull 10.x, Melodics V2, Topaz Video Enhance AI 1.x)
49830 Obduction stops with "fatal error"
49998 widl doesn't support winrt types (runtimeclass, delegate, parameterized types, ...)
50123 The Elder Scrolls V: Skyrim SE has rendering glitches with vulkan renderer
50263 Entropia Universe: Won't Start the Game from Client Loader
50377 Banished cast shadows are broken with Vulkan renderer
50422 Multiple games (Horizon Zero Dawn, Serious Sam 4) crash on start on Nvidia due to missing unwrap for VKOBJECTTYPESURFACEKHR
50563 The Witcher 3: Wild Hunt has missing sunlight with Vulkan renderer
50632 Neverwinter: Broken graphics (texturing)
50641 Wine cmd handles incorrectly if-for on a single line
50642 Wine cmd handles incorrectly if-set when expanding variable with brackets
50667 Final Fantasy XI Online: Opening movie doesn't play (redux).
50678 Filmotech v3.91: partial black area
50698 ::wcsrtombs does not NULL "const wchart PSource" parameter in Wine.
50704 QueueUserAPC() Has Incorrect Error Set When Called On Terminating Thread
50706 6.2 hangs on grey, then crashes Snapdragon855(+) Android 10
50731 All Winelib applications built with winegcc/wineg++ segfault on startup as of Wine 6.3
50732 Multiple Adobe products fail to start due to Wine 6.3 breaking Adobe License Manager/FLEXnet Licensing Service (Acrobat 8.x, FrameMaker 8)
50740 The Suffering (Midway Games) crashes due to missing wmvcore 'IWMSyncReader2', CLSID '{faed3d21-1b6b-4af7-8cb6-3e189bbc187b}'
50744 continuous spamming of fixme:msctf:InputProcessorProfileMgrGetActiveProfile in console
50769 notepad: menu bar items and title text are not translated.
50774 DirectWrite should use mac platform name entry for English, if Windows entry is missing
50781 cl.exe fails to open program database
50786 WINEPATH env var broken by "ntdll: Set environment variables from the registry on the Unix side.
👤_-ammar-_
🎖@malwr
🗣_-ammar-_
What's new in this release (see below for details):
\- Support for the DTLS protocol.
\- Fontset support in DirectWrite.
\- Dialog for editing Access Control entries.
\- Theming support for a few more common controls.
\- Support for Korean Wansung encoding. - Various bug fixes.
7416 Support multiple independent displays for PowerPoint, OpenOffice.org, etc
16676 RTG Bills 2.x (VB6 app) reports 'ADO error 1BD Object doesn't support this action' on startup (msado15 'connectionGetIDsOfNames' is a stub)
25323 Civilization IV Beyond the Sword crashed when trying to start a new game.
31814 Gecko should clean up when upgrading
36463 wine can't load unstripped gecko builds
36697 64-bit InstallShield engine COM server 'ISBEW64.exe' crashes or hangs (32-bit InstallShield based installers in 64-bit WINEPREFIX)
37011 acid3.acidtests.org can't load with builtin IE
38744 support UNITYNETWORKAREAREGION
39381 32-bit Turbocad 8.0 LTE 'CrashSender.exe' utility crashes in WMI Query "SELECT * FROM Win32NetworkAdapterConfiguration where IPEnabled='True' and index=1"
41433 Acrobat Reader XI (11.0.8): Annotations are empty
42827 Canon MP Navigator EX 4.x/5.x installer crashes due to setupapi SPFILENOTIFYFILEINCABINET handler/callback insufficiencies
46969 Multiple 64-bit WDM kernel drivers want Windows 8+ 'ntdll.RtlQueryRegistryValuesEx' (WIBUKEY, Denuvo Anti-Cheat)
48127 Soldiers of Anarchy (demos & full game 1.1.2.178), crashes with an 'Unknown error' message when starting a level
48879 NVIDIA PhysX System Software 9.12.1031 installer fails ('Add64BitReg' VBScript action needs minimal 'WbemScripting.SWbemNamedValueSet' implementation)
49531 Multiple Qt5 applications spam the console continuously with 'fixme:netprofm:connectionGetAdapterId' ('INetworkConnection::GetAdapter' returns incorrect adapter GUID)(Futubull 10.x, Melodics V2, Topaz Video Enhance AI 1.x)
49830 Obduction stops with "fatal error"
49998 widl doesn't support winrt types (runtimeclass, delegate, parameterized types, ...)
50123 The Elder Scrolls V: Skyrim SE has rendering glitches with vulkan renderer
50263 Entropia Universe: Won't Start the Game from Client Loader
50377 Banished cast shadows are broken with Vulkan renderer
50422 Multiple games (Horizon Zero Dawn, Serious Sam 4) crash on start on Nvidia due to missing unwrap for VKOBJECTTYPESURFACEKHR
50563 The Witcher 3: Wild Hunt has missing sunlight with Vulkan renderer
50632 Neverwinter: Broken graphics (texturing)
50641 Wine cmd handles incorrectly if-for on a single line
50642 Wine cmd handles incorrectly if-set when expanding variable with brackets
50667 Final Fantasy XI Online: Opening movie doesn't play (redux).
50678 Filmotech v3.91: partial black area
50698 ::wcsrtombs does not NULL "const wchart PSource" parameter in Wine.
50704 QueueUserAPC() Has Incorrect Error Set When Called On Terminating Thread
50706 6.2 hangs on grey, then crashes Snapdragon855(+) Android 10
50731 All Winelib applications built with winegcc/wineg++ segfault on startup as of Wine 6.3
50732 Multiple Adobe products fail to start due to Wine 6.3 breaking Adobe License Manager/FLEXnet Licensing Service (Acrobat 8.x, FrameMaker 8)
50740 The Suffering (Midway Games) crashes due to missing wmvcore 'IWMSyncReader2', CLSID '{faed3d21-1b6b-4af7-8cb6-3e189bbc187b}'
50744 continuous spamming of fixme:msctf:InputProcessorProfileMgrGetActiveProfile in console
50769 notepad: menu bar items and title text are not translated.
50774 DirectWrite should use mac platform name entry for English, if Windows entry is missing
50781 cl.exe fails to open program database
50786 WINEPATH env var broken by "ntdll: Set environment variables from the registry on the Unix side.
👤_-ammar-_
🎖@malwr
WineHQ
The Wine development release 6.4 is now available.
Reverse Engineering Microsoft Exchange DearCry Ransomware | Brief Analysis
🗣MotasemHa
Two suggestions: get a better mic. Sometimes your voice sounds muffled. It’s not your accent, I’m spanish and I have a good ear for accents but your voice doesn’t come in clear.
Second: you need to zoom in because if someone is watching on a phone, we cannot see what you are seeing. It just looks like blobs to me. I wish I could understand what you are doing because I want to learn, but I just can’t from what you posted. Your set up looks nice but it needs to be edited to show code bigger. I understand if you see this on a computer you can see it big but not everyone is on a computer 24/7.
👤Simsimma76
🎖@malwr
🗣MotasemHa
Two suggestions: get a better mic. Sometimes your voice sounds muffled. It’s not your accent, I’m spanish and I have a good ear for accents but your voice doesn’t come in clear.
Second: you need to zoom in because if someone is watching on a phone, we cannot see what you are seeing. It just looks like blobs to me. I wish I could understand what you are doing because I want to learn, but I just can’t from what you posted. Your set up looks nice but it needs to be edited to show code bigger. I understand if you see this on a computer you can see it big but not everyone is on a computer 24/7.
👤Simsimma76
🎖@malwr
YouTube
Reverse Engineering Microsoft Exchange DearCry Ransomware | Brief Analysis
In this video walkthrough, we did reverse engineering on the recent DearCry ransomware that hit Microsoft Exchange systems.
-------------------
Receive video documentation
https://www.youtube.com/channel/UCNSdU_1ehXtGclimTVckHmQ/join
----
Backup channel
…
-------------------
Receive video documentation
https://www.youtube.com/channel/UCNSdU_1ehXtGclimTVckHmQ/join
----
Backup channel
…
IoT Malware Journals: Prometei (Linux)
Technical analysis of Prometei (Linux):
https://cujo.com/iot-malware-journals-prometei-linux/
🗣kernelv0id
🎖@malwr
Technical analysis of Prometei (Linux):
https://cujo.com/iot-malware-journals-prometei-linux/
🗣kernelv0id
🎖@malwr
CUJO AI
IoT Malware Journals: Prometei (Linux) - CUJO AI
IoT threat researcher Albert Zsigovits takes a closer, technical look at the Linux version of Prometei, dissecting its capabilities and features.