Fuzzing the Linux kernel (x86) entry code, Part 2 of 3 https://blogs.oracle.com/linux/fuzzing-the-linux-kernel-x86-entry-code%2c-part-2-of-3
Oracle
Fuzzing the Linux kernel (x86) entry code, Part 2 of 3
Part two of a three-part series that explores how to write a fuzzer targeting the Linux kernel entry code on x86.
Nice tutorial! -> "From a C project, through assembly, to shellcode" https://vxug.fakedoma.in/papers/VXUG/Exclusive/FromaCprojectthroughassemblytoshellcodeHasherezade.pdf
CVE-2020-16875 Microsoft Exchange Server DlpUtils AddTenantDlpPolicy Remote Code Execution Vulnerability (with PoCs) https://srcincite.io/advisories/src-2020-0019/
Man-in-the-Browser in Google Chrome: Part 2 – Locating SSL_Write and SSL_Read https://plainsec.org/man-in-the-browser-in-google-chrome-part-2-locating-ssl-write-and-ssl-read/
How to compile Windows XP / Server 2003 code from the leak https://wink.messengergeek.com/t/how-to-compile-windows-xp-server-2003-code-from-the-leak/18252
MessengerGeek
How to compile Windows XP / Server 2003 code from the leak
I suppose a “Last Dance” of a thread should be appropriate. So, you’ve gotten your hand on that mighty XP SP1 / Server 2003 code from 4chan somehow and are wondering what you can do with it? well i may have some info for you. First off, this most of the…
The short story of 1 Linux Kernel Use-After-Free bug and 2 CVEs (CVE-2020-14356 and CVE-2020-25220) http://blog.pi3.com.pl/?p=720
MemFuck: Bypassing User-Mode Hooks https://winternl.com/memfuck/
Nice contribution --> Microsoft announces new Project OneFuzz framework, an open source developer tool to find and fix bugs at scale https://www.microsoft.com/security/blog/2020/09/15/microsoft-onefuzz-framework-open-source-developer-tool-fix-bugs/
Microsoft Security Blog
Microsoft announces new Project OneFuzz framework, an open source developer tool to find and fix bugs at scale | Microsoft Security…
We're excited to release a new tool called OneFuzz, an extensible fuzz testing framework for Azure.
Collaborative Reverse Engineering with Ghidra Server https://byte.how/posts/collaborative-reverse-engineering/
byte.how
Collaborative Reverse Engineering with Ghidra Server
How to use Ghidra's built-in "git" server for shared version control
ARM64 Reversing and Exploitation Part 1 - ARM Instruction Set + Simple Heap Overflow http://highaltitudehacks.com/2020/09/05/arm64-reversing-and-exploitation-part-1-arm-instruction-set-heap-overflow/
ARM64 Reversing and Exploitation Part 2 - Use After Free http://highaltitudehacks.com/2020/09/06/arm64-reversing-and-exploitation-part-2-use-after-free/
Attribution is in the object: using RTF object dimensions to track APT phishing weaponizers https://www.virusbulletin.com/conference/vb2019/abstracts/attribution-object-using-rtf-object-dimensions-track-apt-phishing-weaponizers
A tool to help malware analysts signature unique parts of RTF documents https://github.com/PwCUK-CTO/rtfsig
GitHub
GitHub - PwCUK-CTO/rtfsig: A tool to help malware analysts signature unique parts of RTF documents
A tool to help malware analysts signature unique parts of RTF documents - PwCUK-CTO/rtfsig
Nice quiz about C integers, specially for students of "Exploiting Software Vulnerabilities" course :) https://www.acepace.net/integerQuiz/
acepace.net
John Regehr's Integers in C
A restoration of John Regehrs famous quiz on integers in C
New Snort, ClamAV coverage strikes back against Cobalt Strike https://blog.talosintelligence.com/2020/09/coverage-strikes-back-cobalt-strike-paper.html
Cisco Talos Blog
New Snort, ClamAV coverage strikes back against Cobalt Strike
By Nick Mavis. Editing by Joe Marshall and Jon Munshaw.
Cisco Talos is releasing a new research paper called “The Art and Science of Detecting Cobalt Strike.”
We recently released a more granular set of updated SNORTⓇ and ClamAVⓇ detection signatures to…
Cisco Talos is releasing a new research paper called “The Art and Science of Detecting Cobalt Strike.”
We recently released a more granular set of updated SNORTⓇ and ClamAVⓇ detection signatures to…
OpenSSH 8.4 released. Attention: SHA-1 algorithm will be deprecated shortly. Alternatives provided in the notice https://marc.info/?l=openssh-unix-dev&m=160121534105667&w=2&mc_cid=ba5825adff&mc_eid=5a6384b5cb