strings2 - Extract strings from binary files and process memory https://github.com/glmcdona/strings2
GitHub
GitHub - glmcdona/strings2: strings2: An improved strings extraction tool.
strings2: An improved strings extraction tool. Contribute to glmcdona/strings2 development by creating an account on GitHub.
Finding 0-day vulnerabilities in apps using the Red Team approach(RTC0005) https://redteamrecipe.com/Finding-0-day-vulnerabilities-in-apps-using-the-Red-Team-approach/
ExpiredDomains.com
redteamrecipe.com is for sale! Check it out on ExpiredDomains.com
Buy redteamrecipe.com for 195 on GoDaddy via ExpiredDomains.com. This premium expired .com domain is ideal for establishing a strong online identity.
Ethereum Transactions: 101 Things You Need to Know https://medium.com/@sergiomazariego/ethereum-transactions-101-things-you-need-to-know-d2e39cc1b10
Medium
Ethereum Transactions: 101 Things You Need to Know
IntroductionIn this blog post, you will find explanations of the basic concepts, terminologies, and technicalities involved in…
Auditing the Home Assistant Pre-Auth Attack Surface https://www.elttam.com/blog/pwnassistant/
Elttam
PwnAssistant - Controlling /home's via a Home Assistant RCE - elttam
How we found a critical pre-authentication RCE in Home Assistant, exploring the attack surface and publishing advisories including CVE-2023-27482.
Vulnerability Analysis with Ghidra Scripting https://medium.com/@cy1337/vulnerability-analysis-with-ghidra-scripting-ccf416cfa56d
Medium
Vulnerability Analysis with Ghidra Scripting
As some of you may have seen, I posted a challenge to use Ghidra to identify a vulnerability in a WarGames themed game. There has been a…
The Art of Clipboard Forensics Recovering Deleted Data https://xret2pwn.github.io/The-Art-of-Clipboard-Forensics-Recovering-Deleted-Data/
RET2Pwn
The Art of Clipboard Forensics Recovering Deleted Data
Introduction
🔥1
GULoader Campaigns: A Deep Dive Analysis of a highly evasive Shellcode based loader https://www.mcafee.com/blogs/other-blogs/mcafee-labs/guloader-campaigns-a-deep-dive-analysis-of-a-highly-evasive-shellcode-based-loader/
McAfee Blog
GULoader Campaigns: A Deep Dive Analysis of a highly evasive Shellcode based loader | McAfee Blog
Authored by: Anandeshwar Unnikrishnan Stage 1: GULoader Shellcode Deployment In recent GULoader campaigns, we are seeing a rise in NSIS-based installers
Fantastic Rootkits: And Where to Find Them (Part 1) https://www.cyberark.com/resources/threat-research-blog/fantastic-rootkits-and-where-to-find-them-part-1
Cyberark
Fantastic Rootkits: And Where to Find Them (Part 1)
Introduction In this blog series, we will cover the topic of rootkits — how they are built and the basics of kernel driver analysis — specifically on the Windows platform. In this first part, we...
👍2
Analysis of DHCP Service Remote Code Execution Vulnerability CVE-2023–28231https://medium.com/numen-cyber-labs/analysis-of-dhcp-service-remote-code-execution-vulnerability-cve-2023-28231-a4ce9f3a3fd
Medium
Analysis of DHCP Service Remote Code Execution Vulnerability CVE-2023–28231
CVE-2023–28231 Patch Analysis, with PoC
👍1
BOF in Stockfish: interesting discussion (without being solved) https://github.com/official-stockfish/Stockfish/pull/4558
GitHub
Increase MAX_MOVES to prevent buffer overflow and stack corruption by ZealanL · Pull Request #4558 · official-stockfish/Stockfish
SF's move buffer ExtMove moveList[MAX_MOVES] assumes a maximum move count of 256, but there are many "impossible" positions in which more than 256 moves are generated.
Whe...
Whe...
Escaping Parallels Desktop with Plist Injection https://pwn.win/2023/05/08/parallels-escape.html
pwn.win
Escaping Parallels Desktop with Plist Injection
This post details two bugs I found, a plist injection (CVE-2023-27328) and a race condition (CVE-2023-27327), which could be used to escape from a guest Parallels Desktop virtual machine. In this post I’ll break down the findings.
Detecting and Evading Sandboxing through Time based evasion https://shubakki.github.io/posts/2022/12/detecting-and-evading-sandboxing-through-time-based-evasion/
A list of resources related to warez https://community.thecreed.xyz/c/warez/
On Ashton Kutcher and Secure Multi-Party Computation https://blog.cryptographyengineering.com/2023/05/11/on-ashton-kutcher-and-secure-multi-party-computation/
A Few Thoughts on Cryptographic Engineering
On Ashton Kutcher and Secure Multi-Party Computation
Back in March I was fortunate to spend several days visiting Brussels, where I had a chance to attend a panel on “chat control”: the new content scanning regime being considered by the …
Pwn2Own Toronto 22: Exploit Netgear Nighthawk RAX30 Routers https://claroty.com/team82/research/chaining-five-vulnerabilities-to-exploit-netgear-nighthawk-rax30-routers-at-pwn2own-toronto-2022
Claroty
Pwn2Own Toronto 22: Exploit Netgear Nighthawk RAX30 Routers
Unveiling IoT Vulnerabilities: A Deep Dive into Netgear RAX30 Router Research from Pwn2Own Competition | Discover the insights gained from our investigation into the security weaknesses of IoT devices, as we analyze the Netgear RAX30 router in the renowned…
Experts Detail New Zero-Click Windows Vulnerability for NTLM Credential Theft https://thehackernews.com/2023/05/experts-detail-new-zero-click-windows.html
RET2ASLR - Leaking ASLR from return instructions https://github.com/google/security-research/tree/master/pocs/cpus/ret2aslr
GitHub
security-research/pocs/cpus/ret2aslr at master · google/security-research
This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code. - google/security-research