Interception of Android implicit intents https://blog.oversecured.com/Interception-of-Android-implicit-intents/
News, Techniques & Guides
Interception of Android implicit intents
Explicit intents have a set receiver (the name of an app package and the class name of a handler component) and can be delivered only to a predetermined component (activity, receiver, service). With implicit intents, only certain
0day in Windows 7 and Server 2008 R2 Gets a Micropatch https://blog.0patch.com/2020/11/0day-in-windows-7-and-server-2008-r2.html
0Patch
0day in Windows 7 and Server 2008 R2 Gets a Micropatch
by Mitja Kolsek, the 0patch Team [Update 1/22/2021: This vulnerability did not get patched by December 2020 or January 2021 Extended Se...
Active Directory (AD) Attacks & Enumeration at the Network Layer https://www.lares.com/blog/active-directory-ad-attacks-enumeration-at-the-network-layer/
Lares
Active Directory (AD) Attacks & Enumeration at the Network Layer
Intro Defending an Active Directory environment, particularly a large one, is a daunting task. Telemetry generated by Active Directory itself as well as the hosts connected to it are critical…
A story of three CVE's in Ubuntu Desktop https://www.eyecontrol.nl/blog/the-story-of-3-cves-in-ubuntu-desktop.html
Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read https://github.com/0xricksanchez/paper_collection
GitHub
GitHub - 0xricksanchez/paper_collection: Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to…
Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read - 0xricksanchez/paper_collection
How the Pandemic is Reshaping the Bug-Bounty Landscape https://threatpost.com/pandemic-reshaping-bug-bounty-landscape/160644/
Threat Post
How the Pandemic is Reshaping the Bug-Bounty Landscape
Bugcrowd Founder Casey Ellis talks about COVID-19's impact on bug bounty hunters, bug bounty program adoption and more.
Russian Turla hackers breach European government organization https://www.bleepingcomputer.com/news/security/russian-turla-hackers-breach-european-government-organization/
BleepingComputer
Russian Turla hackers breach European government organization
Russian-speaking hacking group Turla has hacked into the systems of an undisclosed European government organization according to a new Accenture Cyber Threat Intelligence (ACTI) report.
Issue 2104: Windows Kernel cng.sys pool-based buffer overflow in IOCTL 0x390400 https://bugs.chromium.org/p/project-zero/issues/detail?id=2104
Vulnerabilities and tools for the PAX Payment Devices, including D200, S80, S300, S800, S900, S920 https://git.lsd.cat/g/pax-pwn
Gitea: Git with a cup of tea
pax-pwn
Vulnerabilities and tools for the PAX Payment Devices, including D200, S80, S300, S800, S900, S920
Malware analysis report: Abaddon RAT using Discord as a C2 https://github.com/MalPhobic/MalwareReports/blob/main/AbbadonRAT/Abbadon_RAT.pdf
GitHub
MalwareReports/AbbadonRAT/Abbadon_RAT.pdf at main · MalPhobic/MalwareReports
Contribute to MalPhobic/MalwareReports development by creating an account on GitHub.
paradoxiaRAT: Native Windows Remote Access Tool https://securityonline.info/paradoxiarat-native-windows-remote-access-tool/
Exploiting SIGRed (CVE-2020–1350) on Windows Server 2012/2016/2019 https://datafarm-cybersecurity.medium.com/exploiting-sigred-cve-2020-1350-on-windows-server-2012-2016-2019-80dd88594228
Medium
Exploiting SIGRed (CVE-2020–1350) on Windows Server 2012/2016/2019
by Worawit Wangwarunyoo , DATAFARM Research Team, Datafarm Company Limited
NAT Slipstreaming allows an attacker to remotely access any TCP/UDP service bound to a victim machine, bypassing the victim's NAT/firewall, just by the victim visiting a website https://samy.pl/slipstream/
samy.pl
samy kamkar - NAT Slipstreaming v2.0
exploit NAT/firewalls to access TCP/UDP services bound to any system behind victim's NAT
Exploiting HTTP Request Smuggling (with a real-world example) https://gupta-bless.medium.com/exploiting-http-request-smuggling-71a629e68dfe
Medium
Exploiting HTTP Request Smuggling
With a real-world example:
We have published a new blog post regarding how the heap works » "Digging into malloc" https://reversea.me/index.php/digging-into-malloc/ ; enjoy the (_not so light_) reading! :)
Debugging Bootloader and Application with one Debug Session https://mcuoneclipse.com/2020/11/03/debugging-bootloader-and-application-with-one-debug-session/
MCU on Eclipse
Debugging Bootloader and Application with one Debug Session
If having a boot loader running on a micro-controller, it is very useful if both the boot loader and the loaded application can be debugged together:
GDA Vulnerability Scanner https://github.com/charles2gan/GDA-android-reversing-Tool/wiki/GDA-Vulnerability-Scanner
GitHub
GDA Vulnerability Scanner
GDA is a new fast and powerful decompiler for the APK, DEX, ODEX, OAT, JAR, AAR and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path...
Leaked .git folder leads to RCE https://james-clee.com/2020/11/01/leaked-git-folder-leads-to-rce/
James Clee
Leaked .git folder leads to RCE
Today I wanted to share my first big success story from my bug bounty attempts. Although the issue has been fixed, the report has not been officially disclosed yet. Therefore, the target today will…
Life and Death of a Linux Process https://natanyellin.com/posts/life-and-death-of-a-linux-process/
Natanyellin
Life and Death of a Linux Process
This post contains a rough sketch of the life and death of a process on Linux. It is a first-order approximation only. A later post will refine this further and provide a more precise description, adding details about pid namespaces, obscure syscalls, and…