Try these to check bugs in PDF uploads:-

https://github.com/luigigubello/PayloadsAllThePDFs
🗣ManasH4rsh


🎖@malwr

Freaky Leaky SMS: Extracting User Locations by Analyzing SMS Timings
🗣nangaparbat

This is why I come to the sub. Thanks for posting!
👤One-Fan7214

> Due to the way cellular networks are designed, it is difficult to prevent Delivery Reports from being returned to the originator making it challenging to thwart this covert attack without making fundamental changes to the network architecture.

Bollocks. Our network blocks them by default. Source: guy that built it.

EDIT: And furthermore, enabling SMS Home Routing in non-Transparent mode will protect against timing attacks since the target's home SMS-R will respond to the incoming SRI-SM and FSM messages immediately no matter where the subscriber is located. It will also foil the delivery receipt by lying and reporting successful delivery regardless.
👤ExParrot1337

before you all freak out, the accuracy is pretty good but at the granularity of countries. Still a problem in many circumstances.
👤vjeuss


🎖@malwr

Driver-Based Privilege Escalation and How to Catch This Threat
In this video, I show a driver-based privilege escalation. This can be used to stop protected processes or do other actions requiring kernel access. I will also show you how to detect this using the loldrivers.io feed MISP and Elastic SIEM.

Driver Installation Privilege Escalation and Detection
🗣Infosecsamurai


🎖@malwr

Analysis of CVE-2023-29336 Win32k Privilege Escalation
🗣wolfcod

Great thanks! Needs to be more of this stuff, would love to learn more about taking a CVE/Patch Tuesday vulnerability to a PoC. Not much around about it, obviously because it's fairly difficult.
👤jahwni


🎖@malwr

Ghidra 10.3.1 released!
🗣ryanmkurtz

Fun fact, if you use Windows 10's built-in LZX compression, you can reduce the program size down from 981MB to 371MB. It's absurd.
👤Dwedit


🎖@malwr

Google Ads: An effective phishing delivery mechanism for over a decade.
🗣Seaerkin2

They got me the other day through sponsored search results. Fake Amazon game link. At least I had 2fa on the account. Was an annoying hour or so while the scammers kept hammering the account.
👤routerg0d

Dang. Glad I use an ad blocker routinely now. :O
👤alvarkresh

I’ve seen drive by malware attacks served up by ad networks more than once.
👤vabello


🎖@malwr

Can we use large language models (LLMs) with IDA? Let's cover ChatGPT, Bard, the Gepetto plugin and the upcoming ask_ida plugin! https://youtu.be/bK80Bt9uRvo
🗣allthingsida


🎖@malwr

Team Cymru's S2 Research Team present a short update report providing insight into the operation of Vidar, demonstrating the evolution of its management infrastructure and evidence of steps taken by the threat actors to potentially cover their tracks. https://www.team-cymru.com/post/darth-vidar-the-aesir-strike-back
🗣virusbtn


🎖@malwr

Forensia - Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase http://www.kitploit.com/2023/06/forensia-anti-forensics-tool-for-red.html
🗣Dinosn


🎖@malwr

List of awesome reverse engineering resources

https://github.com/wtsxDev/reverse-engineering
🗣Dinosn


🎖@malwr

"Run in Sandbox: a quick way to run/extract files in Windows Sandbox from a right-click":

https://github.com/damienvanrobaeys/Run-in-Sandbox
🗣VessOnSecurity


🎖@malwr

Cado Security researchers look into an attack pattern that could be attributed to the threat actor Diicot (formerly “Mexals”), targeting SSH servers exposed to the internet with password authentication enabled. https://www.cadosecurity.com/tracking-diicot-an-emerging-romanian-threat-actor/
🗣virusbtn


🎖@malwr

AhnLab ASEC researchers analyse some cases of the document files used by Kimsuky during May to distribute malicious code. Malicious CHM files were used, with various topics including coins, taxation & contracts. https://asec.ahnlab.com/ko/53426/
🗣virusbtn


🎖@malwr

Android App Reverse Engineering 101

https://www.ragingrock.com/AndroidAppRE/

#CyberSecurity #malware
🗣0xAsm0d3us


🎖@malwr

Windows Triaging with PowerShell:

Part 1: Parsing Event Logs:

https://aditya-pratap9557.medium.com/windows-triaging-with-powershell-part-1-parsing-event-logs-a6748657d150

Part 2: Artifacts Collection:

https://aditya-pratap9557.medium.com/windows-triaging-with-powershell-part-2-artifacts-collection-d28a8a9010cd
🗣VessOnSecurity


🎖@malwr