A Second Look at CVE-2019-19781 (Citrix NetScaler / ADC) https://blog.fox-it.com/2020/07/01/a-second-look-at-cve-2019-19781-citrix-netscaler-adc
Fox-IT International blog
A Second Look at CVE-2019-19781 (Citrix NetScaler / ADC)
Authors: Rich Warren of NCC Group FSAS & Yun Zheng Hu of Fox-IT, in close collaboration with Fox-IT’s RIFT. About the Research and Intelligence Fusion Team (RIFT): RIFT leverages our strategic …
Android App Source code Extraction and Bypassing Root and SSL Pinning checks https://vj0shii.info/android-app-testing-initial-steps/
vj0shii.info
Android App Source code Extraction and Bypassing Root and SSL Pinning checks
In this blog I will be describing the pre-requesty steps I followed for one of the android application penetration testing
CVE-2020-1300: Remote Code Execution Through Microsoft Windows CAB Files https://www.zerodayinitiative.com/blog/2020/7/8/cve-2020-1300-remote-code-execution-through-microsoft-windows-cab-files
Zero Day Initiative
Zero Day Initiative — CVE-2020-1300: Remote Code Execution Through Microsoft Windows CAB Files
In this excerpt of a Trend Micro Vulnerability Research Service vulnerability report, Pengsu Cheng and Yazhi Wang of the Trend Micro Research Team detail a recent code execution vulnerability in Microsoft Windows. The bug was originally discovered and reported…
Breaking HTTPS in the IoT: Practical Attacks For Reverse Engineers https://labs.bishopfox.com/tech-blog/breaking-https-in-the-iot
Bishop Fox
Breaking HTTPS in the IoT: Practical Attacks For Reverse Engineers
Bishop Fox's Nathan Elendt discusses three attack techniques for performing Man-in-the Middle attacks against production-grade, HTTPS-protected Things.
CVE-2020-14947 The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947 https://github.com/mhaskar/CVE-2020-14947
GitHub
GitHub - mhaskar/CVE-2020-14947: The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947
The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947 - mhaskar/CVE-2020-14947
US Local Government Services Targeted by New Magecart Credit Card Skimming Attack https://blog.trendmicro.com/trendlabs-security-intelligence/us-local-government-services-targeted-by-new-magecart-credit-card-skimming-attack
.net core evasion detection https://pentestlaboratories.com/2020/07/02/net-core-evasion-detection/
Pentest Laboratories
.NET Core Evasion Detection
Environments that have installed the .NET Core (version 3.11) are affected by a directory traversal vulnerability since the environment variable doesn’t sanitize user input and therefore cust…
Securing Critical Infrastructure: 4 Steps for Reducing Cyber Risk https://www.tenable.com/blog/securing-critical-infrastructure-four-steps-for-reducing-cyber-risk
Tenable®
Securing Critical Infrastructure: 4 Steps for Reducing Cyber Risk
For critical infrastructure organizations, the gains of automation and IoT technology have also meant heightened threats.
Would you like some RCE with your Guacamole? https://research.checkpoint.com/2020/apache-guacamole-rce/
Check Point Research
Would you like some RCE with your Guacamole? - Check Point Research
Research by: Eyal Itkin Overview In many companies, the daily routine involves coming to the office each day to work on your company computer, safely inside the corporate network. Once in a while, a worker may need special offsite access and will connect…
Remote Code Execution Vulnerability in Zoom Client for Windows (0day) https://blog.0patch.com/2020/07/remote-code-execution-vulnerability-in.html
0Patch
Remote Code Execution Vulnerability in Zoom Client for Windows (0day)
by Mitja Kolsek, the 0patch Team [Update 7/13/2020: Zoom only took one (!) day to issue a new version of Client for Windows that fixes this...
PhishINvite with Malicious ICS Files https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/phishinvite-with-malicious-ics-files/
Trustwave
PhishINvite with Malicious ICS Files | Trustwave
Employing a popular type of file as an attachment to malicious emails is a common trick by cybercriminals to boost the success rate of their cyber-attacks. As iCalendars files are not included in the list of automatically blocked attachments by email clients…
Hardware breakpoints and exceptions on Windows https://ling.re/hardware-breakpoints/
LingSec
Hardware breakpoints and exceptions on Windows
Hardware breakpoints on Windows and common detection vectors
Combinig LUAFV PostLuafvPostReadWrite Race Condition PE with DiagHub collector exploit -> from standard user to SYSTEM https://decoder.cloud/2019/04/29/combinig-luafv-postluafvpostreadwrite-race-condition-pe-with-diaghub-collector-exploit-from-standard-user-to-system/
Decoder's Blog
Combinig LUAFV PostLuafvPostReadWrite Race Condition PE with DiagHub collector exploit -> from standard user to SYSTEM
In this short post I will show you how to combine Forshaw’s Microsoft Windows 10 1809 – LUAFV PostLuafvPostReadWrite SECTION_OBJECT_POINTERS Race Condition Privilege Escalation with F…
Great contribution --> Introducing Kernel Data Protection, a new platform security technology for preventing data corruption https://www.microsoft.com/security/blog/2020/07/08/introducing-kernel-data-protection-a-new-platform-security-technology-for-preventing-data-corruption/
Microsoft News
Introducing Kernel Data Protection, a new platform security technology for preventing data corruption
Kernel Data Protection (KDP) is a set of APIs that provide the ability to mark some kernel memory as read-only, preventing attackers from ever modifying protected memory.
A Comprehensive Guide to JAVA Serialization Vulnerability https://medium.com/bugbountywriteup/a-comprehensive-guide-to-java-serialization-vulnerability-18fad6e37b64
Medium
A Comprehensive Guide to JAVA Serialization Vulnerability
TLDR
Understanding the root cause of F5 Networks K52145254: TMUI RCE vulnerability CVE-2020-5902
https://research.nccgroup.com/2020/07/12/understanding-the-root-cause-of-f5-networks-k52145254-tmui-rce-vulnerability-cve-2020-5902/
https://research.nccgroup.com/2020/07/12/understanding-the-root-cause-of-f5-networks-k52145254-tmui-rce-vulnerability-cve-2020-5902/
Nccgroup
Cyber Security Research
Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.