ModelScan: Open Source Protection Against Model Serialization Attacks - Support for Pickle, H5, and SavedModel formats.
🗣wolfticketsai

I lead product at Protect AI and we just released ModelScan. It is open source project that scans models to determine if they contain unsafe code. It is the first model scanning tool to support multiple model formats. ModelScan currently supports: H5, Pickle, and SavedModel formats. This protects you when using PyTorch, TensorFlow, Keras, Sklearn, XGBoost, with more on the way.

This attack surface is incredibly easy to target and this tool can be loaded locally and scans your models quickly to check for any unsafe code before you use them.


Happy to answer any questions!
👤wolfticketsai


🎖@malwr

[Article] Some university researchers trained a machine learning model that can predict your password with an accuracy of 95% based on the sound of your keyboard strokes.
I've always noticed that my full name has a unique pattern of sound when clicking the keyboard strokes while typing it. I could also recognize which of my passwords I typed judging only by the sound of the keystrokes. This might be very dangerous!

Here's the article.
🗣_iamhamza_

Cool hax, bro
👤dnc_1981

Not with new "Infinitely Variable Click" keyboards that randomly cycle from Gateron Greens to Cherry Reds to MX Blacks and everything in between! Confuse the FUCK out of your fingers but protect against this very specific edge case! DOD approved. $10,000 per unit.
👤zyzzogeton

Trained on MacBook Pro, good luck with thousands of various mechanical keys and keyboards!
👤boopboopboopers


🎖@malwr

[Hard Disk Forensics] I just published my Hard Disk Forensics video notes in the form of a free Udemy course.
Hi! I recorded some video notes last month and I thought of publishing them in the form of a free Udemy course just to understand how Udemy course creation works. Would appreciate your feedback!

https://www.udemy.com/course/hard-disk-forensics-a-learning-guide/

Thanks!
🗣untitledusername445

I've purchased the course, how much hour is this, I'll give the feedback when i complete it.
👤mutuno

Very cool. Thanks for this!
👤v_rocco


🎖@malwr

📍📍📍Forward posts to the other groups 📍📍📍

Github - ZygiskFrida: Injecting frida gadget via Zygisk
🗣Lico_

This is a little tool I have been working on. It is an alternative way to inject frida into android processes. Instead of embedding the gadget into the APK or frida-server injecting it via ptrace, this module loads the gadget via Zygisk. I found it useful as it is sometimes able to bypass simple checks out of the box and decided to open source it.

Didn‘t have much opportunity to work with C/C++ before and used this to learn a bit about zygisk modules and the language. So any feedback, contributions and suggestions are welcome.
👤Lico_


🎖@malwr

Introduction to Command and Control Servers | TryHackMe Red Team Track
In this video walk-through, we covered an introduction to C2 servers. We explained C2 agents, payloads and their types (staged vs stageless), Droppers, beacons in addition to C2 agents obfuscation methods. We also covered some of the popular C2 servers including but not limited to Metasploit, Powershell Empire, Armitage and Cobalt Strike. This was part of the TryHackMe red team pathway.

Video is here
🗣MotasemHa

Thanks for the video! but I don't get why people still use Metasploit or Armitage in their red team engagements or to simulate attacks, these couple of frameworks are flagged by modern EDRs and mostly used by script kids IMHO. It would be much better if you switch them up with Covenant, Mythic, or Cobalt Strike.
👤KeyPrompt4278


🎖@malwr