Detecting and decrypting Sliver C2 – a threat hunter’s guide https://www.immersivelabs.com/blog/detecting-and-decrypting-sliver-c2-a-threat-hunters-guide/
Immersivelabs
Detecting and decrypting Sliver C2 – a threat hunter's guide
Originating from the Bishop Fox team, Sliver is an open-source, cross-platform, and extensible C2 framework. It’s written primarily in Go, making it fast, portable, and easy to customize.
CVE-2023-0339 — Technical Analysis https://attackerkb.com/topics/BYpdQRJKJd/cve-2023-0339/rapid7-analysis
AttackerKB
CVE-2023-0339 | AttackerKB
Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent allows Authentication Bypass. This issue affects Access Management Web Po…
The Fuzzing Guide to the Galaxy: An Attempt with Android System Services https://blog.thalium.re/posts/fuzzing-samsung-system-services/
THALIUM
The Fuzzing Guide to the Galaxy: An Attempt with Android System Services
Although the Android base is open source, many different constructors customize it with their own UIs and APIs. All these additions represent an extra attack surface that can change from one phone model to another. We tried to automatically fuzz the closed…
The Fuzzing Guide to the Galaxy: An Attempt with Android System Services https://blog.thalium.re/posts/fuzzing-samsung-system-services/
THALIUM
The Fuzzing Guide to the Galaxy: An Attempt with Android System Services
Although the Android base is open source, many different constructors customize it with their own UIs and APIs. All these additions represent an extra attack surface that can change from one phone model to another. We tried to automatically fuzz the closed…
Everything-is-wrong writeup: Reverse engineering Haskell like a masochist https://medium.com/@acheron2302/everything-is-wrong-writeup-reverse-engineering-haskell-like-a-masochist-9586f033d397
Medium
Everything-is-wrong writeup: Reverse engineering Haskell like a masochist
Disclaimer: My understanding about haskell reverse engineering is still limited so if I am wrong about anything feel free to ping me on my…
CVE-2023-29084 Command injection in ManageEngine ADManager Plus https://hnd3884.github.io/posts/CVE-2023-29084-Command-injection-in-ManageEngine-ADManager-plus/
HoangND
CVE-2023-29084 Command injection in ManageEngine ADManager Plus
CVE-2023-29084 analysis
A Journey Through the Secrets of Firmware: Exploring the Foundations https://medium.com/@tristejoursoir/a-journey-through-the-secrets-of-firmware-exploring-the-foundations-6d0d288d5917
Medium
A Journey Through the Secrets of Firmware: Exploring the Foundations
A lot of people are interested in how the computer starts up. This is where the magic begins and continues as long as the device is on. In…
nice blog series » mast1c0re: Introduction – Exploiting the PS4 and PS5 through a game save https://mccaulay.co.uk/mast1c0re-introduction-exploiting-the-ps4-and-ps5-through-a-gamesave/
Producing a POC for CVE-2022-42475 (Fortinet RCE) https://blog.scrt.ch/2023/03/14/producing-a-poc-for-cve-2022-42475-fortinet-rce/
CVE-2022-29844: A Classic Buffer Overflow on the Western Digital My Cloud Pro Series PR4100 https://www.zerodayinitiative.com/blog/2023/4/19/cve-2022-29844-a-classic-buffer-overflow-on-the-western-digital-my-cloud-pro-series-pr4100
Zero Day Initiative
Zero Day Initiative — CVE-2022-29844: A Classic Buffer Overflow on the Western Digital My Cloud Pro Series PR4100
This post covers an exploit chain demonstrated by Luca Moro ( @johncool__ ) during Pwn2Own Toronto 2022. At the contest, he used a classic buffer overflow to gain code execution on the My Cloud Pro Series PR4100 Network Attached Storage (NAS) device.…
Converting string to enum at the cost of 50 GB: let's analyze the CVE-2020-36620 vulnerability https://pvs-studio.com/en/blog/posts/csharp/1038/
PVS-Studio
Converting string to enum at the cost of 50 GB: let′s analyze the CVE-2020-36620 vulnerability
In this article, we′re going to discuss the CVE-2020-36620 vulnerability and see how a NuGet package for converting string to enum can make a C# application vulnerable to DoS attacks.
Analysis of VirtualBox CVE-2023-21987 and CVE-2023-21991 https://qriousec.github.io/post/vbox-pwn2own-2023/
Qrious Secure
Analysis of VirtualBox CVE-2023-21987 and CVE-2023-21991
Introduction Hi, I am Trung (xikhud). Last month, I joined Qrious Secure team as a new member, and my first target was to find and reproduce the security bugs that @bienpnn used at the Pwn2Own Vancouver 2023 to escape the VirtualBox VM.
Since VirtualBox is…
Since VirtualBox is…
PaperCut CVE-2023-27350 Deep Dive and Indicators of Compromise https://www.horizon3.ai/papercut-cve-2023-27350-deep-dive-and-indicators-of-compromise/
Horizon3.ai
CVE-2023-27350: PaperCut Deep Dive & IOCs
PaperCut CVE-2023-27350 Technical Deep-Dive, Indicators of Compromise, and Exploit Proof-of-Concept.
The Most Dangerous Codec in the World: Finding and Exploiting Vulnerabilities in H.264 Decoders https://www.usenix.org/conference/usenixsecurity23/presentation/vasquez
Odoo: Get your Content Type right, or else! https://www.sonarsource.com/blog/odoo-get-your-content-type-right-or-else/
Sonarsource
Odoo: Get your Content Type right, or else!
What do we need content types for anyway? Let's look into how an incorrect content type led to a real-world vulnerability in Odoo, CVE-2023-1434.
Android Deep Link issues and WebView Exploitation https://8ksec.io/android-deeplink-and-webview-exploitation-8ksec-blogs/
8kSec
Android Deep Links & WebView Exploitation | 8kSec
In this Blog post, learn about Android deep link and WebView issues, explaining their targets, exploitation and security measures. Read now
New Vulnerability: PaperCut MF/NG https://www.greynoise.io/blog/new-vulnerability-papercut-mf-ng
www.greynoise.io
New Vulnerability: PaperCut MF/NG | GreyNoise Blog
CISA added CVE-2023-27350 (a critical unauthenticated remote code execution vulnerability) impacting PaperCut MF and PaperCut NG to the Known Exploited Vulnerabilities (KEV) list. PaperCut MF and PaperCut NG are both enterprise printer management software.
Git Arbitrary Configuration Injection (CVE-2023-29007) https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007
Ethiack
Git Arbitrary Configuration Injection (CVE-2023-29007)
CVE-2023-29007 | Git’s implementation was used to rename or delete sections of a configuration file containing a logic error that resulted in improperly treating configuration values longer than a fixed length as containing new sections. When attempting to…
Spoofing Call Stacks To Confuse EDRs https://labs.withsecure.com/publications/spoofing-call-stacks-to-confuse-edrs
A Deep Learning Approach for Password Guessing (https://arxiv.org/abs/1709.00440) https://github.com/brannondorsey/PassGAN
GitHub
GitHub - brannondorsey/PassGAN: A Deep Learning Approach for Password Guessing (https://arxiv.org/abs/1709.00440)
A Deep Learning Approach for Password Guessing (https://arxiv.org/abs/1709.00440) - brannondorsey/PassGAN