Find out how two flaws in NETGEAR DGND3700v2 devices allow remote unauthenticated attackers to trigger bypass the authentication mechanism and run commands as root
🗣SSDisclosure
🎖@malwr
🗣SSDisclosure
🎖@malwr
SSD Secure Disclosure
SSD Advisory – NETGEAR DGND3700v2 PreAuth Root Access - SSD Secure Disclosure
Find out how a vulnerability in multiple Uniview devices allow remote unauthenticated attackers to trigger a remote code execution vulnerability in the products the company offers.
Reversing embedded device bootloader (U-Boot) & decrypt the firmware - (Part
1 - Shielder ) : https://www.shielder.it/blog/2022/03/reversing-embedded-device-bootloader-u-boot-p.1/ credits
@zi0Black @Th3Zer0
🗣binitamshah
🎖@malwr
1 - Shielder ) : https://www.shielder.it/blog/2022/03/reversing-embedded-device-bootloader-u-boot-p.1/ credits
@zi0Black @Th3Zer0
🗣binitamshah
🎖@malwr
👍1
http://phishstats.info detected 111 new websites hosting #phishing | new today: 788 | #infosec #cybersecurity #malware
🗣PhishStats
🎖@malwr
🗣PhishStats
🎖@malwr
Malfrat's OSINT Map is live on https://map.malfrats.industries !
We forked http://osintframework.com since this is no longer maintained, so you can easily contribute on our repo.
Thanks for their original work.
🗣MalfratsInd
🎖@malwr
We forked http://osintframework.com since this is no longer maintained, so you can easily contribute on our repo.
Thanks for their original work.
🗣MalfratsInd
🎖@malwr
If you're looking to practice your #malware #analysis skills, I have several exercises available:
🎓 https://github.com/jstrosch/malware-samples
These include challenge tasks and detailed walk-throughs. You'll also find them as CTF challenges at CyberDefenders
👉 https://cyberdefenders.org/blueteam-ctf-challenges/
🗣jstrosch
🎖@malwr
🎓 https://github.com/jstrosch/malware-samples
These include challenge tasks and detailed walk-throughs. You'll also find them as CTF challenges at CyberDefenders
👉 https://cyberdefenders.org/blueteam-ctf-challenges/
🗣jstrosch
🎖@malwr
Day 78 #100DaysofYARA - fun with the dotnet module
looking for user strings (typically wide strings) that imply command execution. Why look in this way vs just as strings?
Well this rule tells us immediately that the file is a dotnet executable
🗣greglesnewich
🎖@malwr
looking for user strings (typically wide strings) that imply command execution. Why look in this way vs just as strings?
Well this rule tells us immediately that the file is a dotnet executable
🗣greglesnewich
🎖@malwr
A nice bit of #HermeticWiper reversing by @eln0ty–
https://eln0ty.github.io/malware%20analysis/HermeticWiper/
🗣juanandres_gs
🎖@malwr
https://eln0ty.github.io/malware%20analysis/HermeticWiper/
🗣juanandres_gs
🎖@malwr
eln0ty
HermeticWiper/FoxBlade Analysis (in-depth)
The malware which targeting Ukrainian infrastructure (Specially windows devices) has since been observed in the neighboring countries of Latvia and Lithuania and manipulating the MBR resulting in subsequent boot failure.
Full Reverse Engineering of Sony Memory Stick
🗣dmitrygr
Is there any easy way to spoof the card serial number?
A MCU acting as man-in-the-middle, or something else?
I need it to unbrick a PSP 2000.
👤RainyShadow
Nice!
Sony, the king of proprietary mediums. What a nightmare for consumers and devs alike.
👤usernamenottakenwooh
MagicGate still holding up?
👤TailSpinBowler
🎖@malwr
🗣dmitrygr
Is there any easy way to spoof the card serial number?
A MCU acting as man-in-the-middle, or something else?
I need it to unbrick a PSP 2000.
👤RainyShadow
Nice!
Sony, the king of proprietary mediums. What a nightmare for consumers and devs alike.
👤usernamenottakenwooh
MagicGate still holding up?
👤TailSpinBowler
🎖@malwr
Dmitry.GR
Sony Memory Stick - Dmitry.GR
Dmitry.GR: The first complete documentation of Sony Memory Stick from HW to DATA
Debugger and analyzer for ELF executables named "donna" made by me . Im still a HS student so any help would be appreciated. Made in C++ btw.
🗣suibex
Writing a debugger in high school? Color me impressed.
👤jameson71
Suggestion: remove all the random empty lines you have littered throughout the code or just run you code through a formatter.
👤magion
🎖@malwr
🗣suibex
Writing a debugger in high school? Color me impressed.
👤jameson71
Suggestion: remove all the random empty lines you have littered throughout the code or just run you code through a formatter.
👤magion
🎖@malwr
GitHub
GitHub - suibex/donna: Debugger and analyzer for ARM ELF executables.
Debugger and analyzer for ARM ELF executables. Contribute to suibex/donna development by creating an account on GitHub.
Suspected Conti Ransomware Activity in the Auto Manufacturing Sector - looks like they used Netflow to understand who the victims were
🗣digicat
🎖@malwr
🗣digicat
🎖@malwr
Dragos
Suspected Conti Ransomware Activity in the Auto Manufacturing Sector
Dragos is observing evidence of multiple automotive manufacturers compromised by Emotet. A malware strain & a cybercrime operation.
DirtyMoe: Worming Modules - The DirtyMoe malware is deployed using various kits like PurpleFox or injected installers of Telegram Messenger that require user interaction. Complementary to this deployment, one of the modules expands the malware using worm-like techniques that require no interaction
🗣digicat
🎖@malwr
🗣digicat
🎖@malwr
Gendigital
DirtyMoe: Worming Modules
DirtyMoe's Rapid Worming Expansion
Frelatage: A fuzzing library to find vulnerabilities and bugs in Python applications
🗣FrenchFuzzer
🎖@malwr
🗣FrenchFuzzer
🎖@malwr
GitHub
GitHub - Rog3rSm1th/frelatage: Coverage-based fuzzer for python applications
Coverage-based fuzzer for python applications. Contribute to Rog3rSm1th/frelatage development by creating an account on GitHub.
A tale of EDR bypass methods
#infosec #pentest #redteam
https://s3cur3th1ssh1t.github.io/A-tale-of-EDR-bypass-methods/
🗣CyberWarship
🎖@malwr
#infosec #pentest #redteam
https://s3cur3th1ssh1t.github.io/A-tale-of-EDR-bypass-methods/
🗣CyberWarship
🎖@malwr
Detect strange memory regions and DLLs by using MalMemDetect by @waldoirc. For more information on this #redteamtool, head to #GitHub: https://bfx.social/3Jqt2Dl #infosec
https://bfx.social/3Jqt2Dl
🗣bishopfox
🎖@malwr
https://bfx.social/3Jqt2Dl
🗣bishopfox
🎖@malwr
GitHub
GitHub - waldo-irc/MalMemDetect: Detect strange memory regions and DLLs
Detect strange memory regions and DLLs. Contribute to waldo-irc/MalMemDetect development by creating an account on GitHub.