CVE-2020-16875 Microsoft Exchange Server DlpUtils AddTenantDlpPolicy Remote Code Execution Vulnerability (with PoCs) https://srcincite.io/advisories/src-2020-0019/
Man-in-the-Browser in Google Chrome: Part 2 – Locating SSL_Write and SSL_Read https://plainsec.org/man-in-the-browser-in-google-chrome-part-2-locating-ssl-write-and-ssl-read/
How to compile Windows XP / Server 2003 code from the leak https://wink.messengergeek.com/t/how-to-compile-windows-xp-server-2003-code-from-the-leak/18252
MessengerGeek
How to compile Windows XP / Server 2003 code from the leak
I suppose a “Last Dance” of a thread should be appropriate. So, you’ve gotten your hand on that mighty XP SP1 / Server 2003 code from 4chan somehow and are wondering what you can do with it? well i may have some info for you. First off, this most of the…
The short story of 1 Linux Kernel Use-After-Free bug and 2 CVEs (CVE-2020-14356 and CVE-2020-25220) http://blog.pi3.com.pl/?p=720
MemFuck: Bypassing User-Mode Hooks https://winternl.com/memfuck/
Nice contribution --> Microsoft announces new Project OneFuzz framework, an open source developer tool to find and fix bugs at scale https://www.microsoft.com/security/blog/2020/09/15/microsoft-onefuzz-framework-open-source-developer-tool-fix-bugs/
Microsoft Security Blog
Microsoft announces new Project OneFuzz framework, an open source developer tool to find and fix bugs at scale | Microsoft Security…
We're excited to release a new tool called OneFuzz, an extensible fuzz testing framework for Azure.
Collaborative Reverse Engineering with Ghidra Server https://byte.how/posts/collaborative-reverse-engineering/
byte.how
Collaborative Reverse Engineering with Ghidra Server
How to use Ghidra's built-in "git" server for shared version control
ARM64 Reversing and Exploitation Part 1 - ARM Instruction Set + Simple Heap Overflow http://highaltitudehacks.com/2020/09/05/arm64-reversing-and-exploitation-part-1-arm-instruction-set-heap-overflow/
ARM64 Reversing and Exploitation Part 2 - Use After Free http://highaltitudehacks.com/2020/09/06/arm64-reversing-and-exploitation-part-2-use-after-free/
Attribution is in the object: using RTF object dimensions to track APT phishing weaponizers https://www.virusbulletin.com/conference/vb2019/abstracts/attribution-object-using-rtf-object-dimensions-track-apt-phishing-weaponizers
A tool to help malware analysts signature unique parts of RTF documents https://github.com/PwCUK-CTO/rtfsig
GitHub
GitHub - PwCUK-CTO/rtfsig: A tool to help malware analysts signature unique parts of RTF documents
A tool to help malware analysts signature unique parts of RTF documents - PwCUK-CTO/rtfsig
Nice quiz about C integers, specially for students of "Exploiting Software Vulnerabilities" course :) https://www.acepace.net/integerQuiz/
acepace.net
John Regehr's Integers in C
A restoration of John Regehrs famous quiz on integers in C
New Snort, ClamAV coverage strikes back against Cobalt Strike https://blog.talosintelligence.com/2020/09/coverage-strikes-back-cobalt-strike-paper.html
Cisco Talos Blog
New Snort, ClamAV coverage strikes back against Cobalt Strike
By Nick Mavis. Editing by Joe Marshall and Jon Munshaw.
Cisco Talos is releasing a new research paper called “The Art and Science of Detecting Cobalt Strike.”
We recently released a more granular set of updated SNORTⓇ and ClamAVⓇ detection signatures to…
Cisco Talos is releasing a new research paper called “The Art and Science of Detecting Cobalt Strike.”
We recently released a more granular set of updated SNORTⓇ and ClamAVⓇ detection signatures to…
OpenSSH 8.4 released. Attention: SHA-1 algorithm will be deprecated shortly. Alternatives provided in the notice https://marc.info/?l=openssh-unix-dev&m=160121534105667&w=2&mc_cid=ba5825adff&mc_eid=5a6384b5cb
Writing an x86 bootloader in Rust that can launch vmlinux https://vmm.dev/en/rust/krabs.md
vmm.dev
Writing an x86 bootloader in Rust that can launch vmlinux
I've been developping an x86 bootloader in Rust that can use Linux boot protocol. In this article, I'd like to write about my motivation, features of this project, and issues.
Good summary of (Patrik's) bug bounty tools https://blog.it-securityguard.com/pbbt.pdf
Evasive URLs in Spam https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/evasive-urls-in-spam/
Levelblue
Evasive URLs in Spam | Trustwave
Cybercriminals are continuously evolving their tools, tactics, and techniques to evade spam detection systems. We recently observed some spam campaigns that heavily relied on URL obfuscation in email messages.
MemFuck: Bypassing User-Mode Hooks https://winternl.com/memfuck/
winternl
MemFuck: Bypassing User-Mode Hooks
Dynamic malware analysis is the preferred way to determine the legitimacy of an application for many AVs/EDRs/MDSs. Unlike static analysis, dynamic analysis can capture and analyze Windows API calls…