CVE / NVD doesn’t work for open source and supply chain security - part one, what's wrong
🗣jnazario
🎖@malwr
🗣jnazario
🎖@malwr
Linkedin
CVE / NVD doesn’t work for open source and supply chain security - part one, what's wrong
I had to split this article into two parts. Part one describes what I think is wrong and part two, which is coming next week, is a proposed architecture to improve it.
Hooking System Calls in Windows 11 22H2 like Avast Antivirus. Research, analysis and bypass
🗣jnazario
🎖@malwr
🗣jnazario
🎖@malwr
the-deniss.github.io
Hooking System Calls in Windows 11 22H2 like Avast Antivirus. Research, analysis and bypass
In this post I’ll show Avast self-defense bypass: how I discovered a new undocumented way to intercept all system calls without a hypervisor and PatchGuard triggered BSOD, and, finally, based on the knowledge gained, implemented a bypass
ChatGPT shows promise of using AI to write Malware
🗣simpletonsavant
Can’t we just use AI to save the planet? Ah what am I thinking, of course it will be used to trash it even faster.
👤spamzauberer
What about CoPilot tho??
👤doubleAdLover
The recent news keeps me up at night. I will not use it as an excuse to stop learning cybersecurity though.
👤RemediateRemediate
🎖@malwr
🗣simpletonsavant
Can’t we just use AI to save the planet? Ah what am I thinking, of course it will be used to trash it even faster.
👤spamzauberer
What about CoPilot tho??
👤doubleAdLover
The recent news keeps me up at night. I will not use it as an excuse to stop learning cybersecurity though.
👤RemediateRemediate
🎖@malwr
CyberScoop
ChatGPT shows promise of using AI to write malware
Large language models pose a major cybersecurity risk, both from the vulnerabilities they risk introducing and the malware they could produce.
Foreign Information Manipulation Interference (FIMI) and Cybersecurity - The EU Agency for Cybersecurity (ENISA) and the European External Action Service (EEAS) have joined forces to study and analyse the threat landscape concerning Foreign Information Manipulation and Interference (FIMI) & disinfo
🗣digicat
Good, we need more acronyms in this field.
👤Wellidk182
🎖@malwr
🗣digicat
Good, we need more acronyms in this field.
👤Wellidk182
🎖@malwr
www.enisa.europa.eu
Foreign Information Manipulation Interference (FIMI) and Cybersecurity - Threat Landscape | ENISA
ENISA is the EU agency dedicated to enhancing cybersecurity in Europe. They offer guidance, tools, and resources to safeguard citizens and businesses from cyber threats.
Hooking System Calls in Windows 11 22H2 like Avast Antivirus. Research, analysis and bypass
🗣Gallus
🎖@malwr
🗣Gallus
🎖@malwr
the-deniss.github.io
Hooking System Calls in Windows 11 22H2 like Avast Antivirus. Research, analysis and bypass
In this post I’ll show Avast self-defense bypass: how I discovered a new undocumented way to intercept all system calls without a hypervisor and PatchGuard triggered BSOD, and, finally, based on the knowledge gained, implemented a bypass
wafme0w: A new fast Web Firewall fingerprinting tool.
🗣Due_Criticism_2326
I am not Golang developer, but code is ugly.
It has a lot of nested loops. Is it normal?
👤Hot-Vegetable-3507
Can you provide data to back your claims that this is more performant than wafw00f?
👤wntrmut
Hello, I made this fast and concurrent Web Application Firewall fingerprinting tool. Written in Go, it's based on wafw00f. Performance gains are huge.
Any advice is welcome.
Thank you!
👤Due_Criticism_2326
🎖@malwr
🗣Due_Criticism_2326
I am not Golang developer, but code is ugly.
It has a lot of nested loops. Is it normal?
👤Hot-Vegetable-3507
Can you provide data to back your claims that this is more performant than wafw00f?
👤wntrmut
Hello, I made this fast and concurrent Web Application Firewall fingerprinting tool. Written in Go, it's based on wafw00f. Performance gains are huge.
Any advice is welcome.
Thank you!
👤Due_Criticism_2326
🎖@malwr
GitHub
GitHub - Lu1sDV/wafme0w: Fast and lightweight Web Application Firewall Fingerprinting tool
Fast and lightweight Web Application Firewall Fingerprinting tool - Lu1sDV/wafme0w
kleiton0x00/RedditC2: Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic look legit.
🗣jnazario
🎖@malwr
🗣jnazario
🎖@malwr
GitHub
GitHub - kleiton0x00/RedditC2: Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might…
Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic look legit. - GitHub - kleiton0x00/RedditC2: Abusing Reddit A...