Hacker101 CTF: Android Challenge Writeups https://medium.com/bugbountywriteup/hacker101-ctf-android-challenge-writeups-f830a382c3ce
Medium
Hacker101 CTF: Android Challenge Writeups
In this article, I will be demonstrating how to solve the Hacker101 CTF (Capture The Flag) challenges for the Android category. Hacker101…
MMS Exploit Part 5: Defeating Android ASLR, Getting RCE https://googleprojectzero.blogspot.com/2020/08/mms-exploit-part-5-defeating-aslr-getting-rce.html
Blogspot
MMS Exploit Part 5: Defeating Android ASLR, Getting RCE
Posted by Mateusz Jurczyk, Project Zero This post is the fifth and final of a multi-part series capturing my journey from discovering a ...
CVE-2020-10029: Buffer overflow in GNU libc trigonometry functions?!? https://securityboulevard.com/2020/08/cve-2020-10029-buffer-overflow-in-gnu-libc-trigonometry-functions/
Security Boulevard
CVE-2020-10029: Buffer overflow in GNU libc trigonometry functions?!?
Remember trigonometry, where you were given the length of two sides of a triangle and had to compute the third side? We remembered vaguely SOH CAH TOA, but not much more. One thing we would have bet $50 on: That there wouldn’t be a buffer overflow in basic…
UPX Anti-Unpacking Techniques in IoT Malware https://cujo.com/upx-anti-unpacking-techniques-in-iot-malware/
CUJO AI
UPX Anti-Unpacking Techniques in IoT Malware
Albert Zsigovits, IoT Malware Researcher, sheds some light on malicious binary packing and looks at recent UPX anti-unpacking techniques in IoT malware.
ACE to RCE https://sensepost.com/blog/2020/ace-to-rce/
Nice stego tool --> Hiding messages in x86 binaries using semantic duals https://blog.yossarian.net/2020/08/16/Hiding-messages-in-x86-binaries-using-semantic-duals
blog.yossarian.net
Hiding messages in x86 binaries using semantic duals
F5 BIG-IP hsqldb (CVE-2020-5902) Vulnerability Analysis https://paper.seebug.org/1272/
Bare Bones Banking malware coded for research & educational purposes https://github.com/1d8/Coqui
GitHub
GitHub - 1d8/Coqui: Bare Bones Banking malware coded for research & educational purposes
Bare Bones Banking malware coded for research & educational purposes - 1d8/Coqui
ATM makers Diebold and NCR deploy fixes for 'deposit forgery' attacks https://www.zdnet.com/article/atm-makers-diebold-and-ncr-deploy-fixes-for-deposit-forgery-attacks/
ZDNet
ATM makers Diebold and NCR deploy fixes for 'deposit forgery' attacks | ZDNet
ATMs from the two companies had bugs that could have allowed card fraudsters to modify the amount of money they deposited on their card, and then abuse the new account balance for illegal cash withdrawals.
TERRACOTTA Android Malware: A Technical Study https://www.whiteops.com/blog/terracotta-android-malware-a-technical-study
HUMAN Security
TERRACOTTA Android Malware: A Technical Study - HUMAN Security
The Satori Threat Intelligence & Research Team takes a deep dive into the TERRACOTTA ad fraud operation and its sophistication.
Interesting thread on Windows logon activty behind the curtain https://twitter.com/SteveSyfuhs/status/1297957799079510018?s=09
Twitter
Steve Syfuhs
Have you ever wondered what happens behind the scenes when you type your password into the Windows logon screen and hit enter? I'm waiting for a build to complete, so I'm gonna tell you.
An Interview With RedBear: A Hacker Training the Next Generation of Cybercriminals https://therecord.media/an-interview-with-redbear-a-hacker-training-the-next-generation-of-cybercriminals/
The Record
An Interview With RedBear: A Hacker Training the Next Generation of Cybercriminals
A security intelligence analyst interviews RedBear, a hacker and malware tester who is training the next generation of cybercriminals.
Transparent Tribe: Evolution analysis,
part 1 https://securelist.com/transparent-tribe-part-1/98127/
part 1 https://securelist.com/transparent-tribe-part-1/98127/
Malicious Apps Could Take Over Samsung Devices https://char49.com/articles/malicious-apps-could-take-over-samsung-devicesv
Nice description of Windows internals --> One Windows Kernel https://techcommunity.microsoft.com/t5/windows-kernel-internals/one-windows-kernel/ba-p/267142
TECHCOMMUNITY.MICROSOFT.COM
One Windows Kernel
Windows is one of the most versatile and flexible operating systems out there, running on a variety of machine architectures and available in multiple SKUs. It currently supports x86, x64, ARM and ARM64 architectures. Windows used to support Itanium, PowerPC…