.E01 (bootable) converted to .VMDK with Virtual Box was successful, however the bootup sits on this screen and Im not sure could be keeping it from finishing a boot up of Windows. The VM spec is about 26GB RAM, dynamic sizing, and the E01 was a functioning Win machine. Why wont it finish booting?
🗣mattisha
I feel like you are doing too many steps. As others have said, use Arsenal or even FTK Imager. Mount the E01 as a Physical Disk. Then using VMWare or Hyper-V just make a new VM, and the only disk you should add is this new PhysicalDisk. The most important thing is matching BIOS or UEFI of the host, that's really about it. If it's Windows 10 it should fix itself and boot.
Or, just pay for Arsenal and it will boot a VM in one click and bypass the bitlocker and lock screen for ya. Def worth it.
👤FunkeDope
We usually mount the E01 using Arsenal Image Mounter and create a VM with VMware giving the mounted physical drive as VM hdd.
👤walker1993
I've never had success with this method...I always just restore the image to another disk.
👤kstewart0x00
🎖@malwr
🗣mattisha
I feel like you are doing too many steps. As others have said, use Arsenal or even FTK Imager. Mount the E01 as a Physical Disk. Then using VMWare or Hyper-V just make a new VM, and the only disk you should add is this new PhysicalDisk. The most important thing is matching BIOS or UEFI of the host, that's really about it. If it's Windows 10 it should fix itself and boot.
Or, just pay for Arsenal and it will boot a VM in one click and bypass the bitlocker and lock screen for ya. Def worth it.
👤FunkeDope
We usually mount the E01 using Arsenal Image Mounter and create a VM with VMware giving the mounted physical drive as VM hdd.
👤walker1993
I've never had success with this method...I always just restore the image to another disk.
👤kstewart0x00
🎖@malwr
I built a free tool to assess IT security risks, objectively, unbiased and visually presented. It is specially targeted at SME's who don't have the resources for deep dives but want an overview of their risk landscape. Would love your feedback.
🗣ZhongTr0n
What's the outcome you're looking for? Mostly practice creating an app? UI looks good. Could be useful for bootstrapped startups.
Looking to make a profit? Eventually a bootstrapped startup will lose business if they don't have a SOC2, and they'll leverage something like Vanta to make it easier. Long way to go to reach feature parity with Vanta. Check out the book Zero to One by Peter Theil.
👤ericalexander303
I'll be trying this out today.
👤wormhole360
You can check it out for free on https://riskbull.app . I've worked for 10 months on this tool with u/CoolingSoup and incorporated reddit feedback from previous versions. It assesses your IT security risk based on a survey and a rule engine based on ISO2700x.
The idea is to help people without sufficient in-house infosec expertise get an overview of their risk landscape.This is still an early version, as many other features and insights will be added later.
Currently it is not mobile friendly,
Would love your feedback.
👤ZhongTr0n
🎖@malwr
🗣ZhongTr0n
What's the outcome you're looking for? Mostly practice creating an app? UI looks good. Could be useful for bootstrapped startups.
Looking to make a profit? Eventually a bootstrapped startup will lose business if they don't have a SOC2, and they'll leverage something like Vanta to make it easier. Long way to go to reach feature parity with Vanta. Check out the book Zero to One by Peter Theil.
👤ericalexander303
I'll be trying this out today.
👤wormhole360
You can check it out for free on https://riskbull.app . I've worked for 10 months on this tool with u/CoolingSoup and incorporated reddit feedback from previous versions. It assesses your IT security risk based on a survey and a rule engine based on ISO2700x.
The idea is to help people without sufficient in-house infosec expertise get an overview of their risk landscape.This is still an early version, as many other features and insights will be added later.
Currently it is not mobile friendly,
Would love your feedback.
👤ZhongTr0n
🎖@malwr
CVE-2021-20226: A reference-counting bug in the Linux kernel io_uring subsystem that can be leveraged for local privilege escalation
🗣RedmondSecGnome
🎖@malwr
🗣RedmondSecGnome
🎖@malwr
Zero Day Initiative
Zero Day Initiative — CVE-2021-20226: A Reference-Counting Bug in the Linux Kernel io_uring Subsystem
Conclusion New features mean new attack surfaces, and new attack surfaces often lead to new bugs being discovered. It will be interesting to see if any other vulnerabilities are found in this subsystem. Regardless, it was a great find by Ryota, and we appreciate…
Dutch government release a Windows event logging and collection baseline focused on finding balance between forensic value and optimising retention.
🗣digicat
🎖@malwr
🗣digicat
🎖@malwr
GitHub
GitHub - JSCU-NL/logging-essentials: A Windows event logging and collection baseline focused on finding balance between forensic…
A Windows event logging and collection baseline focused on finding balance between forensic value and optimising retention. - JSCU-NL/logging-essentials
Avaddon RaaS | Breaks Public Decryptor, Continues On Rampage
🗣darronofsky
Honestly I always wonder what type of software these people could make to benefit the world. Instead they are forced to make this type of software due to where they live.
A beautiful front end on the .Onion? Hell I’d love at least 1 of my vendors to make a usable front end for my tool sets that didn’t suck.
👤redvelvet92
🎖@malwr
🗣darronofsky
Honestly I always wonder what type of software these people could make to benefit the world. Instead they are forced to make this type of software due to where they live.
A beautiful front end on the .Onion? Hell I’d love at least 1 of my vendors to make a usable front end for my tool sets that didn’t suck.
👤redvelvet92
🎖@malwr
SentinelOne
Avaddon RaaS | Breaks Public Decryptor, Continues On Rampage - SentinelLabs
Unbreakable encryption, a data leak site and threats of DDoS attacks, Avaddon has all the tricks of a modern RaaS. And now version 2 is on the way.
What is SELinux exactly and what networking ports or protocols rely on it?
Hi,
What is SELinux exactly? My understanding was that it was a security module in Linux responsible for hardening the system kernel.
Also, what networking ports or protocols rely on it?
Thanks
🗣securm0n
I discovered this video while taking a class on Linux. https://www.youtube.com/watch?v=JFjXvIwAeVI It's really great about explaining the concepts you're researching and the speaker's other videos are honestly life changing.
👤corbanmonoxide
So you know how Linux has discretionary access control (DAC)? For example User: root has access to user: root’s files. group: securmon has access to any files that belong to group: securmon. It’s kinda like that but it’s called media access control (MAC) and uses labels to isolate and limit processes. It’s a labeling system that dictates what process can interact with each other. I’m applying a label to allow My process: X to interact with my other process: Y. For example if someone finds an exploit for a process you’re running (like your web server: Apache), they won’t be able to access other resources (like your ftp server) unless you apply the label that says that it can. This video series, although dated, does a really good job of explaining it:
https://youtube.com/playlist?list=PLXEcKYHTGBdRyWWz8rqP9rYtMvS4VqlRR
Anyone feel free to jump in and expand on my input.
👤MrLexDiamondz
Google is your friend: https://www.redhat.com/en/topics/linux/what-is-selinux
👤So0ver1t83
🎖@malwr
Hi,
What is SELinux exactly? My understanding was that it was a security module in Linux responsible for hardening the system kernel.
Also, what networking ports or protocols rely on it?
Thanks
🗣securm0n
I discovered this video while taking a class on Linux. https://www.youtube.com/watch?v=JFjXvIwAeVI It's really great about explaining the concepts you're researching and the speaker's other videos are honestly life changing.
👤corbanmonoxide
So you know how Linux has discretionary access control (DAC)? For example User: root has access to user: root’s files. group: securmon has access to any files that belong to group: securmon. It’s kinda like that but it’s called media access control (MAC) and uses labels to isolate and limit processes. It’s a labeling system that dictates what process can interact with each other. I’m applying a label to allow My process: X to interact with my other process: Y. For example if someone finds an exploit for a process you’re running (like your web server: Apache), they won’t be able to access other resources (like your ftp server) unless you apply the label that says that it can. This video series, although dated, does a really good job of explaining it:
https://youtube.com/playlist?list=PLXEcKYHTGBdRyWWz8rqP9rYtMvS4VqlRR
Anyone feel free to jump in and expand on my input.
👤MrLexDiamondz
Google is your friend: https://www.redhat.com/en/topics/linux/what-is-selinux
👤So0ver1t83
🎖@malwr
Reddit
From the netsecstudents community on Reddit
Explore this post and more from the netsecstudents community
A Census of Deployed Pulse Connect Secure (PCS) Versions - CVE-2019-11510 and CVE-2021-22893 | NCC RIFT
🗣darronofsky
🎖@malwr
🗣darronofsky
🎖@malwr
Twitter
NCC Group Research & Technology
Blog: A Census of Deployed Pulse Connect Secure (PCS) Versions - CVE-2019-11510 and CVE-2021-22893 -research.nccgroup.com/2021/04/23/a-c…
Godzilla Vs. Kong Vs … Ghidra? - Ghidra Scripting, PCode Emulation, and Password Cracking for a GBA ROM
🗣wrongbaud
🎖@malwr
🗣wrongbaud
🎖@malwr
Wrongbaud’s Blog
Godzilla Vs. Kong Vs … Ghidra? - Ghidra Scripting, PCode Emulation, and Password Cracking
Godzilla Vs. Kong Vs … Ghidra? - Ghidra Scripting, PCode Emulation and Password Cracking