Blue Team Lab guide 7 - End Devices
Hello everyone, after a small break I wrote another article in my series for Blue Team Home Lab, this time the focus was on end devices, that represent the corporate devices. Hope you'll like it. :)

https://facyber.me/posts/blue-team-lab-guide-part-7/
🗣facyber


🎖@malwr

monomorph: MD5-Monomorphic Shellcode Packer - Pack arbitrary shellcode into an executable that always has the same MD5 hash
🗣sanitybit

It’s interesting though, next step is to cause collisions with system files hashes and see what happens with AVs 😁
👤mrdantesque

Lmao
👤EvenIfIWantedTo

The output file will always have the same MD5 hash: 3cebbe60d91ce760409bbe513593e401


Well there we go AV vendors…
👤littlejob


🎖@malwr

MalPull version 1.4 brings a more usable CLI, which now only requires the destination folder for the samples which are to be downloaded, and one or more hashes that are to be downloaded. It also allows users to fetch samples from VirusShare via their API, as long as an API key is provided. VirusShare accounts are free, but have a limit of 4 requests per minute, for every minute of the day.

Using MalPull, one can easily search for a given hash on MalShare, Malware Bazaar, VirusShare, Triage, VirusTotal, and Koodous, after which the sample is downloaded. When more samples are requested, the downloads are concurrently processed via N amount of threads, as specified in the settings file.


https://maxkersten.nl/2022/09/29/malpull-1-4-stable-release/

ℹ️ Sent from one of our channel members

🎖@malwr

The PS5 Has Been Jailbroken – Custom Packages Can Now Be Installed
🗣tnavda

This article from Wololo is a bit better (the tweet author in this article even links to it). https://wololo.net/2022/10/03/released-ps5-kernel-exploit-webkit-vulnerability-for-firmware-4-03/
👤Greger34

Tempted to delete this post, more of a press release with zero details
👤tnavda

WOOO YEAH BABY! NOW I CAN PLAY P.T ON PS5
👤BetaTalk64


🎖@malwr

BSides San Francisco 2022 Conference Recordings
🗣sanitybit

Thanks for posting! I almost made it to this con but had to duck out last minute, glad to be able to watch all the talks.
👤IkePAnderson

Click through for the full playlist, the embed starts at opening remarks.
👤sanitybit


🎖@malwr

Seer – a GUI front end to GDB for Linux
🗣modelop

Very enigmatic name.
👤shevy-java

Looks like a powerful debugging frontend, nice work!
I currently use vscodium's debugger GUI, pretty good but sometimes lacking.

If you could add valgrind support, it would make it even more powerful.
👤Settling2981

FINALLY A GUI DEBUGGER AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA *explodes in excitement*

Yes this is valid because it seems CLI is king, but certainly not the king of usability. A GUI is VERY MUCH APPRECIATED.

Yaaaaaaaaaaaaaaaaaaaaaaaaaaaaaay!
👤darkguy2008


🎖@malwr