Exploiting Android deep links and exported components (EkoParty'20 presentation) https://docs.google.com/presentation/d/1YnO_XF-iw2CvJa3rM-GdwYDV22SSzqVHQttXVedY3O4/edit#slide=id.p
Google Docs
B3nac - Exploiting Android deep links and exported components
Exploiting Android deep links and exported components By Kyle B3nac @b3nac
Customizing Wireshark for malware analysis https://paulcimino.com/customizing-wireshark-for-malware-analysis/
Paul Cimino
Customizing Wireshark for malware analysis
I recently watched a series of really good videos from Brad Duncan, the man behind malware-traffic-analysis.net, and my initial takeaway was that setting up Wireshark properly will lead to a much b…
CVE-2020-16938: Bypassing NTFS permissions to read any files as unprivileged user https://github.com/ioncodes/CVE-2020-16938
GitHub
GitHub - ioncodes/CVE-2020-16938: Bypassing NTFS permissions to read any files as unprivileged user.
Bypassing NTFS permissions to read any files as unprivileged user. - ioncodes/CVE-2020-16938
Let's talk macOS Authorization https://theevilbit.github.io/posts/macos_authorization/
theevilbit blog
Let's talk macOS Authorization
This is a blog post I wanted to write for a while now, but somehow never got the time for it, and I also knew that it will require lots of time, so I kept delaying it. I finally kicked my ass, sat down, and wrote it.
The goal of the post is to cover many…
The goal of the post is to cover many…
wsb-detect: library to detect if you are running in Windows Sandbox https://github.com/LloydLabs/wsb-detect
GitHub
GitHub - LloydLabs/wsb-detect: wsb-detect enables you to detect if you are running in Windows Sandbox ("WSB")
wsb-detect enables you to detect if you are running in Windows Sandbox ("WSB") - LloydLabs/wsb-detect
Bad Neighbors Can Break Windows (CVE-2020-16898) https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/bad-neighbors-can-break-windows-cve-2020-16898/
Trustwave
Bad Neighbors Can Break Windows (CVE-2020-16898)
The vulnerability, codenamed “Bad Neighbor”, is a bug in the IPv6 Neighbor Discovery Protocol, particularly it’s improper handling of ICMPv6 Router Advertisement Packets. While publicly available proof of concept (PoC) code results in a denial of service…
Pass-the-hash WiFi https://sensepost.com/blog/2020/pass-the-hash-wifi/
Using a PIE binary as a Shared Library — HCSC-2020 CTF Writeup https://medium.com/bugbountywriteup/using-a-pie-binary-as-a-shared-library-hcsc-2020-ctf-writeup-390a8a437f31
Medium
Using a PIE binary as a Shared Library — HCSC-2020 CTF Writeup
Writeup of a hard RE challenge hosted by the National Cyber-Security Center of Hungary featuring PIE binary to SO lib transformation.
Interception of Android implicit intents https://blog.oversecured.com/Interception-of-Android-implicit-intents/
News, Techniques & Guides
Interception of Android implicit intents
Explicit intents have a set receiver (the name of an app package and the class name of a handler component) and can be delivered only to a predetermined component (activity, receiver, service). With implicit intents, only certain
0day in Windows 7 and Server 2008 R2 Gets a Micropatch https://blog.0patch.com/2020/11/0day-in-windows-7-and-server-2008-r2.html
0Patch
0day in Windows 7 and Server 2008 R2 Gets a Micropatch
by Mitja Kolsek, the 0patch Team [Update 1/22/2021: This vulnerability did not get patched by December 2020 or January 2021 Extended Se...
Active Directory (AD) Attacks & Enumeration at the Network Layer https://www.lares.com/blog/active-directory-ad-attacks-enumeration-at-the-network-layer/
Lares
Active Directory (AD) Attacks & Enumeration at the Network Layer
Intro Defending an Active Directory environment, particularly a large one, is a daunting task. Telemetry generated by Active Directory itself as well as the hosts connected to it are critical…
A story of three CVE's in Ubuntu Desktop https://www.eyecontrol.nl/blog/the-story-of-3-cves-in-ubuntu-desktop.html
Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read https://github.com/0xricksanchez/paper_collection
GitHub
GitHub - 0xricksanchez/paper_collection: Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to…
Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read - 0xricksanchez/paper_collection
How the Pandemic is Reshaping the Bug-Bounty Landscape https://threatpost.com/pandemic-reshaping-bug-bounty-landscape/160644/
Threat Post
How the Pandemic is Reshaping the Bug-Bounty Landscape
Bugcrowd Founder Casey Ellis talks about COVID-19's impact on bug bounty hunters, bug bounty program adoption and more.
Russian Turla hackers breach European government organization https://www.bleepingcomputer.com/news/security/russian-turla-hackers-breach-european-government-organization/
BleepingComputer
Russian Turla hackers breach European government organization
Russian-speaking hacking group Turla has hacked into the systems of an undisclosed European government organization according to a new Accenture Cyber Threat Intelligence (ACTI) report.
Issue 2104: Windows Kernel cng.sys pool-based buffer overflow in IOCTL 0x390400 https://bugs.chromium.org/p/project-zero/issues/detail?id=2104
Vulnerabilities and tools for the PAX Payment Devices, including D200, S80, S300, S800, S900, S920 https://git.lsd.cat/g/pax-pwn
Gitea: Git with a cup of tea
pax-pwn
Vulnerabilities and tools for the PAX Payment Devices, including D200, S80, S300, S800, S900, S920
Malware analysis report: Abaddon RAT using Discord as a C2 https://github.com/MalPhobic/MalwareReports/blob/main/AbbadonRAT/Abbadon_RAT.pdf
GitHub
MalwareReports/AbbadonRAT/Abbadon_RAT.pdf at main · MalPhobic/MalwareReports
Contribute to MalPhobic/MalwareReports development by creating an account on GitHub.