Defense Evasion: Hide Artifacts https://www.hackingarticles.in/defense-evasion-hide-artifacts/
Hacking Articles
Defense Evasion: Hide Artifacts - Hacking Articles
Today, in this article, we will focus on various methods that are implemented by an attacker to evade their detection by hiding artifacts in the
Step-by-step macOS Setup for iOS Research (via @bizzybarney) https://www.mac4n6.com/blog/2020/8/13/step-by-step-macos-setup-for-ios-research-via-bizzybarney
mac4n6.com
Part 1: Step-by-step macOS Setup for iOS Research (via @bizzybarney) — mac4n6.com
CLI…WTF Command line interface (CLI) isn’t for everyone. Trust me; I get it. @iamevltwin forced me out of my comfort zone a few years ago and opened my eyes to the power of Terminal (command prompt on Mac). Now it is pinned to the Dock on every Mac…
Variantes del ataque KrØØk sobre redes WPA2 https://unaaldia.hispasec.com/2020/08/variantes-del-ataque-krook-sobre-redes-wpa2.html
Una al Día
Variantes del ataque KrØØk sobre redes WPA2
Hace unos meses investigadores de ESET descubrieron una vulnerabilidad en chips WI-FI Broadcom y Cypress, ésta fue catalogada como CVE-2019-15126. Lipovský y Svorenčík llamaron a esta vulnerabilidad KrØØk y permite a los atacantes descifrar algunos de los…
CnC communication of a fake Aarogya Setu COVID-19 app https://medium.com/@cryptax/cnc-communication-of-a-fake-aarogya-setu-covid-19-app-810817a36257
Medium
CnC communication of a fake Aarogya Setu COVID-19 app
Aarogya Setu is the Indian open source COVID-19 contact tracing app. Like many other COVID-19 tracing apps, it has many malicious…
Debugging DLL’s – 3 techniques to help you get started https://blog.nviso.eu/2020/08/04/debugging-dlls-3-techniques-to-help-you-get-started/#comments
NVISO Labs
Debugging DLL’s – 3 techniques to help you get started
During some redteam engagements, we find ourselves in the need of writing DLL’s. However, debugging DLL’s is not as easy as it seems, as a DLL isn’t built to run on its own.In thi…
EmoCrash: Exploiting a Vulnerability in Emotet Malware for Defense https://www.binarydefense.com/emocrash-exploiting-a-vulnerability-in-emotet-malware-for-defense/
Bypassing Antivirus with Golang – Gopher it! https://labs.jumpsec.com/2019/06/20/bypassing-antivirus-with-golang-gopher-it/
ReVoLTE attack can decrypt 4G (LTE) calls to eavesdrop on conversations https://www.zdnet.com/article/re-vol-te-attack-can-decrypt-4g-lte-calls-to-eavesdrop-on-conversations/
ZDNET
ReVoLTE attack can decrypt 4G (LTE) calls to eavesdrop on conversations
Academics detail a new attack on 4G encrypted calls. Attack works only when the attacker is on the same base station (mobile tower) as the victim.
Attack of the week: Voice calls in LTE https://blog.cryptographyengineering.com/2020/08/12/attack-of-the-week-voice-calls-in-lte/
A Few Thoughts on Cryptographic Engineering
Attack of the week: Voice calls in LTE
I haven’t written an “attack of the week” post in a while, and it’s been bumming me out. This is not because there’s been a lack of attacks, but mostly because there h…
CVE-2020-1571 Windows Setup Elevation of Privileges Bypass 0day https://github.com/klinix5/Windows-Setup-EoP
iOS security exploiting toolkit https://github.com/Soulghost/iblessing
GitHub
GitHub - Soulghost/iblessing: iblessing is an iOS security exploiting toolkit, it mainly includes application information gathering…
iblessing is an iOS security exploiting toolkit, it mainly includes application information gathering, static analysis and dynamic analysis. It can be used for reverse engineering, binary analysis ...
Raccoon attack allows hackers to break TLS encryption 'under certain conditions' https://www.zdnet.com/article/raccoon-attack-allows-hackers-to-break-tls-encryption-under-certain-conditions/
ZDNet
Raccoon attack allows hackers to break TLS encryption 'under certain conditions'
The Raccoon attack is described as "really hard to exploit" and its conditions as "rare."
Pyrogenic Infostealer static analysis – Part 0x1 https://www.securityinbits.com/malware-analysis/pyrogenic-infostealer-static-analysis-part-0x1/
Securityinbits
Qealler Infostealer static analysis - Part 0x1 - Securityinbits
Pyrogenic/Qealler is heavily obfuscated Java based Infostealer which is quiet active based on ANY.RUN and this post will focus on Pyrogenic Infostealer static analysis
Hacker101 CTF: Android Challenge Writeups https://medium.com/bugbountywriteup/hacker101-ctf-android-challenge-writeups-f830a382c3ce
Medium
Hacker101 CTF: Android Challenge Writeups
In this article, I will be demonstrating how to solve the Hacker101 CTF (Capture The Flag) challenges for the Android category. Hacker101…
MMS Exploit Part 5: Defeating Android ASLR, Getting RCE https://googleprojectzero.blogspot.com/2020/08/mms-exploit-part-5-defeating-aslr-getting-rce.html
Blogspot
MMS Exploit Part 5: Defeating Android ASLR, Getting RCE
Posted by Mateusz Jurczyk, Project Zero This post is the fifth and final of a multi-part series capturing my journey from discovering a ...
CVE-2020-10029: Buffer overflow in GNU libc trigonometry functions?!? https://securityboulevard.com/2020/08/cve-2020-10029-buffer-overflow-in-gnu-libc-trigonometry-functions/
Security Boulevard
CVE-2020-10029: Buffer overflow in GNU libc trigonometry functions?!?
Remember trigonometry, where you were given the length of two sides of a triangle and had to compute the third side? We remembered vaguely SOH CAH TOA, but not much more. One thing we would have bet $50 on: That there wouldn’t be a buffer overflow in basic…