VM Detection Tricks, Part 2: Driver Thread Fingerprinting https://labs.nettitude.com/blog/vm-detection-tricks-part-2-driver-thread-fingerprinting/
LRQA Nettitude Labs
VM Detection Tricks, Part 2: Driver Thread Fingerprinting
This year we're documenting a series of new and as-yet undocumented VM detection tricks. These detection tricks will be focused on 64-bit Windows 10 or Windows Server 2019 guests, targeting a variety of VM platforms.
In the first article we investigated…
In the first article we investigated…
1day exploit for chrome CVE-2020-16040 (includes a typer hardening bypass, works for chrome version <= 87.0.4280.88) https://github.com/r4j0x00/exploits/tree/master/CVE-2020-16040
GitHub
exploits/CVE-2020-16040 at master · r4j0x00/exploits
Contribute to r4j0x00/exploits development by creating an account on GitHub.
TryHackMe: DNS Manipulation Walkthrough https://infosecwriteups.com/tryhackme-dns-manipulation-walkthrough-5944bf60f10f
Playing in the (Windows) Sandbox https://research.checkpoint.com/2021/playing-in-the-windows-sandbox/
Check Point Research
Playing in the (Windows) Sandbox - Check Point Research
Research By: Alex Ilgayev Introduction Two years ago, Microsoft released a new feature as a part of the Insiders build 18305 – Windows Sandbox. This sandbox has some useful specifications: Integrated part of Windows 10 (Pro/Enterprise). Runs on top of Hyper…
Exploiting remote DoS vulnerability in my not-so-smart TV https://vavkamil.cz/2021/03/11/exploiting-remote-dos-vulnerability-in-my-not-so-smart-tv/
Kamil Vavra @vavkamil
Exploiting remote DoS vulnerability in my not-so-smart TV
tl;dr: I found a remotely exploitable DoS vulnerability in my “smart” TV in less than two hours after unboxing. I have released full details, including a 0-day PoC exploit.
New steganography attack targets Azerbaijan https://blog.malwarebytes.com/threat-analysis/2021/03/new-steganography-attack-targets-azerbaijan/
Malwarebytes Labs
New steganography attack targets Azerbaijan
A lure document targeting Azerbaijan uses steganography to conceal a remote administration Trojan.
iOS pentesting guide from a n00bs perspective https://payatu.com/blog/abhilashnigam/ios-pentesing-guide-from-a-n00bs-perspective.1
Attack Surface Analysis - Part 2 - Custom Protocol Handlers https://parsiya.net/blog/2021-03-17-attack-surface-analysis-part-2-custom-protocol-handlers/
parsiya.net
Attack Surface Analysis - Part 2 - Custom Protocol Handlers
Custom protocol handlers are an obscure attack surface. They allow us to convert
local attacks into remote ones and are an alternative way to
jump the browser sandbox without 0days).
Similar to the…
local attacks into remote ones and are an alternative way to
jump the browser sandbox without 0days).
Similar to the…
New macOS malware XcodeSpy Targets Xcode Developers with EggShell Backdoor https://labs.sentinelone.com/new-macos-malware-xcodespy-targets-xcode-developers-with-eggshell-backdoor/
SentinelOne
New macOS Malware XcodeSpy Targets Xcode Developers with EggShell Backdoor - SentinelLabs
Targeting software developers is one route to a successful supply chain attack. Now threat actors are going after Apple developers through the Xcode IDE.
How we found and fixed a rare race condition in our session handling https://github.blog/2021-03-18-how-we-found-and-fixed-a-rare-race-condition-in-our-session-handling/
The GitHub Blog
How we found and fixed a rare race condition in our session handling
On March 8, out of an abundance of caution, we logged all users out of GitHub.com. In this post we share technical details of the vulnerability and steps we're taking to ensure it doesn't happen again.
Lsass Memory Dumps are Stealthier than Ever Before – Part 2 https://www.deepinstinct.com/2021/02/16/lsass-memory-dumps-are-stealthier-than-ever-before-part-2/
Deep Instinct
LSASS Memory Dumps: New Method for Dumping LSASS [Part 2] | Deep Instinct
In this article, we show a new way to dump LSASS memory without dropping any new tool on the endpoint that is highly evasive.
ZHtrap, la nueva amenaza que convierte routers y otros equipos en honeypots https://blog.underc0de.org/zhtrap-la-nueva-amenaza-que-convierte-routers-y-otros-equipos-en-honeypots/
Underc0de Blog
ZHtrap, la nueva amenaza que convierte routers y otros equipos en honeypots - Underc0de Blog
Los dispositivos de redes, como por ejemplo un router, pueden sufrir muchos ataques. Son muchas las variedades de malware que de una u otra forma pueden
CVE-2018–8414: A Case Study in Responsible Disclosure https://posts.specterops.io/cve-2018-8414-a-case-study-in-responsible-disclosure-ff74c39615ba
Medium
CVE-2018–8414: A Case Study in Responsible Disclosure
The process of vulnerability disclosure can be riddled with frustrations, concerns about ethics, and communication failure. I have had…
CVE-2021-3156 (Sudo Baron Samedit) PoC https://github.com/worawit/CVE-2021-3156 and writeup https://datafarm-cybersecurity.medium.com/exploit-writeup-for-cve-2021-3156-sudo-baron-samedit-7a9a4282cb31
GitHub
GitHub - worawit/CVE-2021-3156: Sudo Baron Samedit Exploit
Sudo Baron Samedit Exploit. Contribute to worawit/CVE-2021-3156 development by creating an account on GitHub.
CVE-2021-27076: A Replay-Style Deserialization Attack Against SharePoint https://www.zerodayinitiative.com/blog/2021/3/17/cve-2021-27076-a-replay-style-deserialization-attack-against-sharepoint
Zero Day Initiative
Zero Day Initiative — CVE-2021-27076: A Replay-Style Deserialization Attack Against SharePoint
An attacker is frequently in the position of having to find a technique to evade some data integrity measure implemented by a target. One instructive example of a data integrity measure is a message authentication check. Generally, message authentication…
50 years of malware? Not really. 50 years of computer worms? That's a different story... https://isc.sans.edu/diary/27208
SANS Internet Storm Center
50 years of malware? Not really. 50 years of computer worms? That's a different story...
50 years of malware? Not really. 50 years of computer worms? That's a different story..., Author: Jan Kopriva
mmm 🤔🤔 » It’s time to stop using SMS for anything. https://lucky225.medium.com/its-time-to-stop-using-sms-for-anything-203c41361c80
Medium
It’s time to stop using SMS for anything.
By now most infosec professionals are aware of various ways SMS text messaging can be hijacked. For example so-called “SIM Swap” attacks…
fpicker: Fuzzing with Frida https://insinuator.net/2021/03/fpicker-fuzzing-with-frida/