Very nice content here to learn about software exploitation » Offensive Software Exploitation (OSE) Course https://exploitation.ashemery.com/
exploitation-course
OFFENSIVE SECURITY & REVERSE ENGINEERING (OSRE) Course
Offensive Software Exploitation Course
Reverse Engineering a Flutter app by recompiling Flutter Engine
https://tinyhack.com/2021/03/07/reversing-a-flutter-app-by-recompiling-flutter-engine/
https://tinyhack.com/2021/03/07/reversing-a-flutter-app-by-recompiling-flutter-engine/
Tinyhack.com
Reverse Engineering a Flutter app by recompiling Flutter Engine
It is not easy to reverse engineer a release version of a flutter app because the tooling is not available and the flutter engine itself changes rapidly. As of now, if you are lucky, you can dump the classes and method names of a flutter app using darter…
Reverse-engineering Rosetta 2 part2: Analyzing other aspects of Rosetta 2 runtime and AOT shared cache files https://ffri.github.io/ProjectChampollion/part2/
Analyzing Attacks Against Microsoft Exchange Server With China Chopper Webshells https://unit42.paloaltonetworks.com/china-chopper-webshell/
Unit 42
Analyzing Attacks Against Microsoft Exchange Server With China Chopper Webshells
We analyze incidental artifacts of China Chopper webshell attacks against Microsoft Exchange Server, gaining insight into attackers' methodology.
Overview of dnsmasq Vulnerabilities: The Dangers of DNS Cache Poisoning https://unit42.paloaltonetworks.com/overview-of-dnsmasq-vulnerabilities-the-dangers-of-dns-cache-poisoning/
Unit 42
Overview of dnsmasq Vulnerabilities: The Dangers of DNS Cache Poisoning
Recently, security researchers discovered new issues that continue to make dnsmasq vulnerable. These vulnerabilities can lead to DNS cache poisoning, denial of service (DoS) and possibly remote code execution (RCE).
How to prevent SQL Injection vulnerabilities: How Prepared Statements Work https://medium.com/@jaredablon_31568/how-to-prevent-sql-injection-vulnerabilities-how-prepared-statements-work-f492c369614f
Medium
How to prevent SQL Injection vulnerabilities: How Prepared Statements Work
Read the full post here: https://blog.hackedu.com/how-to-prevent-sql-injection-vulnerabilities-how-prepared-statements-w
Database Hardening Best Practices https://security.berkeley.edu/education-awareness/best-practices-how-tos/system-application-security/database-hardening-best
SUPERNOVA Web Shell Deployment Linked to SPIRAL Threat Group https://www.secureworks.com/blog/supernova-web-shell-deployment-linked-to-spiral-threat-group
Secureworks
SUPERNOVA Web Shell Deployment Linked to SPIRAL Threat Group
Similarities between the SUPERNOVA activity and a previous compromise of the network suggest that SPIRAL was responsible for both intrusions and reveal information about the threat group.
Clast82 – A new Dropper on Google Play Dropping the AlienBot Banker and MRAT https://research.checkpoint.com/2021/clast82-a-new-dropper-on-google-play-dropping-the-alienbot-banker-and-mrat/
Check Point Research
Clast82 – A new Dropper on Google Play Dropping the AlienBot Banker and MRAT - Check Point Research
Research by: Aviran Hazum, Bohdan Melnykov, Israel Wernik Check Point Research (CPR) recently discovered a new Dropper spreading via the official Google Play store, which downloads and installs the AlienBot Banker and MRAT. This Dropper, dubbed Clast82, utilizes…
nice post » One day short of a full chain: Part 1 - Android Kernel arbitrary code execution https://securitylab.github.com/research/one_day_short_of_a_fullchain_android
Email forensics Analysis https://linuxhint.com/email_forensics_analysis/
Linuxhint
Email forensics Analysis
Email forensic Analysis is used to find the actual sender and receiver of an email, date and time it is received and the info about intermediate devices involved in the delivery of the message. The email has become a primary source of communication for organizations…
How to Perform Symbolic Execution of Mobile Apps with R2Frida & ESILSolve https://www.nowsecure.com/blog/2021/03/10/how-to-perform-symbolic-execution-of-mobile-apps-with-r2frida-esilsolve/
Nowsecure
Perform Symbolic Execution of Mobile Apps with R2Frida & ESILSolve
Learn about the many benefits of ESILSolve and how to harness symbolic execution in the the NowSecure tutorial.
Analysis of an active Telegram malvertising campaign https://suid.ch/research/Telegram_Malware_Analysis.html
Nice write-up of Not Beginners Stack (Zer0pts CTF 2021) » https://litios.github.io/2021/03/11/not-beginners-stack.html
Litios Blog
Not Beginners Stack
WNKKKNW WXxc'...':d0NW W0d:..'cxxdl,..'cx0N NOo;..,lOXW WKkl,..,cxKW WXkl'..;o0N NKxc,..,lkXW WKxc'..:xKW N0xc'..;okXW N0d;..'lkXW N0dc'..:oOXW NOo,..,oON WNOd:'.':xX Kl'..;d0N WXx' .dW Wo 'xX WKxc'..c0 Ko;..,cxKN W0d:..'ckXW WKkl,..,lxKW NOo,..,lON W0l.…
Implementing Direct Syscalls Using Hell’s Gate https://teamhydra.blog/2020/09/18/implementing-direct-syscalls-using-hells-gate/
Team Hydra
Implementing Direct Syscalls Using Hell’s Gate
I first encountered the concept of using direct system calls to bypass user-land API hooking a little more than a year ago when I read a blog post by Cornelis De Pla (@Cn33liz). It is an exce…
Shadrak: a script to generate decompression bomb in various formats https://gitlab.com/brn1337/shadrak
GitLab
prisma / Shadrak · GitLab
Shadrak is a script to generate decompression bomb in various formats.
Old, but gold » Writing a basic Windows debugger https://www.codeproject.com/Articles/43682/Writing-a-basic-Windows-debugger
Codeproject
For those who code