AzureGraph: Azure AD enumeration over MS Graph
🗣digicat
Hey can't click on link yet but can I use this officially instead of powershell for azure administration?
👤TwixPoe
Nice tool, seems well built and nice that it uses MS Graph rather than PowerShell, but not sure what the use case for something like this would be rather than something like AzureHound that can map out paths of attack, or just interacting with Microsoft's Graph Explorer or PowerShell commands.
Nonetheless a nice little tool.
👤carrots32
🎖@malwr
🗣digicat
Hey can't click on link yet but can I use this officially instead of powershell for azure administration?
👤TwixPoe
Nice tool, seems well built and nice that it uses MS Graph rather than PowerShell, but not sure what the use case for something like this would be rather than something like AzureHound that can map out paths of attack, or just interacting with Microsoft's Graph Explorer or PowerShell commands.
Nonetheless a nice little tool.
👤carrots32
🎖@malwr
GitHub
GitHub - JoelGMSec/AzureGraph: Azure AD enumeration over MS Graph
Azure AD enumeration over MS Graph. Contribute to JoelGMSec/AzureGraph development by creating an account on GitHub.
A Detailed Analysis of The Last Version of REvil Ransomware [PDF](https://securityscorecard.pathfactory.com/research/detailed-analysis-revil)
🗣CyberMasterV
🎖@malwr
🗣CyberMasterV
🎖@malwr
Security Scorecard
A Detailed Analysis Of The Last Version Of R Evil Ransomware
Reko decompiler 0.11.2 released
🗣jkl_uxmal
NuGet will be available at https://www.nuget.org/packages/Reko.Decompiler.Runtime. It's taking a while for the new package to get verified.
👤jkl_uxmal
🎖@malwr
🗣jkl_uxmal
NuGet will be available at https://www.nuget.org/packages/Reko.Decompiler.Runtime. It's taking a while for the new package to get verified.
👤jkl_uxmal
🎖@malwr
GitHub
Release Version 0.11.2 · uxmal/reko
My, has it been that long already since last release? Here's an overview of what's happened since.
The Reko solution was moved to .NET 6. As expected, performance and memory footprint was i...
The Reko solution was moved to .NET 6. As expected, performance and memory footprint was i...
CVE / NVD doesn’t work for open source and supply chain security - part one, what's wrong
🗣jnazario
🎖@malwr
🗣jnazario
🎖@malwr
Linkedin
CVE / NVD doesn’t work for open source and supply chain security - part one, what's wrong
I had to split this article into two parts. Part one describes what I think is wrong and part two, which is coming next week, is a proposed architecture to improve it.
Hooking System Calls in Windows 11 22H2 like Avast Antivirus. Research, analysis and bypass
🗣jnazario
🎖@malwr
🗣jnazario
🎖@malwr
the-deniss.github.io
Hooking System Calls in Windows 11 22H2 like Avast Antivirus. Research, analysis and bypass
In this post I’ll show Avast self-defense bypass: how I discovered a new undocumented way to intercept all system calls without a hypervisor and PatchGuard triggered BSOD, and, finally, based on the knowledge gained, implemented a bypass
ChatGPT shows promise of using AI to write Malware
🗣simpletonsavant
Can’t we just use AI to save the planet? Ah what am I thinking, of course it will be used to trash it even faster.
👤spamzauberer
What about CoPilot tho??
👤doubleAdLover
The recent news keeps me up at night. I will not use it as an excuse to stop learning cybersecurity though.
👤RemediateRemediate
🎖@malwr
🗣simpletonsavant
Can’t we just use AI to save the planet? Ah what am I thinking, of course it will be used to trash it even faster.
👤spamzauberer
What about CoPilot tho??
👤doubleAdLover
The recent news keeps me up at night. I will not use it as an excuse to stop learning cybersecurity though.
👤RemediateRemediate
🎖@malwr
CyberScoop
ChatGPT shows promise of using AI to write malware
Large language models pose a major cybersecurity risk, both from the vulnerabilities they risk introducing and the malware they could produce.
Foreign Information Manipulation Interference (FIMI) and Cybersecurity - The EU Agency for Cybersecurity (ENISA) and the European External Action Service (EEAS) have joined forces to study and analyse the threat landscape concerning Foreign Information Manipulation and Interference (FIMI) & disinfo
🗣digicat
Good, we need more acronyms in this field.
👤Wellidk182
🎖@malwr
🗣digicat
Good, we need more acronyms in this field.
👤Wellidk182
🎖@malwr
www.enisa.europa.eu
Foreign Information Manipulation Interference (FIMI) and Cybersecurity - Threat Landscape | ENISA
ENISA is the EU agency dedicated to enhancing cybersecurity in Europe. They offer guidance, tools, and resources to safeguard citizens and businesses from cyber threats.
Hooking System Calls in Windows 11 22H2 like Avast Antivirus. Research, analysis and bypass
🗣Gallus
🎖@malwr
🗣Gallus
🎖@malwr
the-deniss.github.io
Hooking System Calls in Windows 11 22H2 like Avast Antivirus. Research, analysis and bypass
In this post I’ll show Avast self-defense bypass: how I discovered a new undocumented way to intercept all system calls without a hypervisor and PatchGuard triggered BSOD, and, finally, based on the knowledge gained, implemented a bypass
wafme0w: A new fast Web Firewall fingerprinting tool.
🗣Due_Criticism_2326
I am not Golang developer, but code is ugly.
It has a lot of nested loops. Is it normal?
👤Hot-Vegetable-3507
Can you provide data to back your claims that this is more performant than wafw00f?
👤wntrmut
Hello, I made this fast and concurrent Web Application Firewall fingerprinting tool. Written in Go, it's based on wafw00f. Performance gains are huge.
Any advice is welcome.
Thank you!
👤Due_Criticism_2326
🎖@malwr
🗣Due_Criticism_2326
I am not Golang developer, but code is ugly.
It has a lot of nested loops. Is it normal?
👤Hot-Vegetable-3507
Can you provide data to back your claims that this is more performant than wafw00f?
👤wntrmut
Hello, I made this fast and concurrent Web Application Firewall fingerprinting tool. Written in Go, it's based on wafw00f. Performance gains are huge.
Any advice is welcome.
Thank you!
👤Due_Criticism_2326
🎖@malwr
GitHub
GitHub - Lu1sDV/wafme0w: Fast and lightweight Web Application Firewall Fingerprinting tool
Fast and lightweight Web Application Firewall Fingerprinting tool - Lu1sDV/wafme0w
kleiton0x00/RedditC2: Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic look legit.
🗣jnazario
🎖@malwr
🗣jnazario
🎖@malwr
GitHub
GitHub - kleiton0x00/RedditC2: Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might…
Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic look legit. - GitHub - kleiton0x00/RedditC2: Abusing Reddit A...