RME-DisCo @ UNIZAR [www.reversea.me]
@reverseame
3.4K subscribers
1 photo
5.55K links
Telegram channel of RME, part of the DisCo Research Group of the University of Zaragoza (Spain) focused on cybersecurity aspects. "It’s not that I have something to hide. I have nothing I want you to see"

Link to the channel: https://t.me/reverseame
Download Telegram
About
Blog
Apps
Platform
Join
RME-DisCo @ UNIZAR [www.reversea.me]
3.4K subscribers
RME-DisCo @ UNIZAR [www.reversea.me]
https://medium.com/@wabz/reverse-engineering-the-australian-governments-coronavirus-ios-application-c08790e895e9
Medium
Reverse Engineering the Australian Government’s Coronavirus iOS application
On the 29th of March, the Australian Government launched an iOS application on the AppStore. It’s a pretty neat little app with lots of…
78 views
RME-DisCo @ UNIZAR [www.reversea.me]
https://medium.com/@petergombos/lm-ntlm-net-ntlmv2-oh-my-a9b235c58ed4
Medium
LM, NTLM, Net-NTLMv2, oh my!
A Pentester’s Guide to Windows Hashes
64 views
RME-DisCo @ UNIZAR [www.reversea.me]
https://n4r1b.netlify.com/posts/2020/01/dissecting-the-windows-defender-driver-wdfilter-part-1/
61 views
RME-DisCo @ UNIZAR [www.reversea.me]
https://twitter.com/penma_/status/1247845597782126593?s=20
Twitter
Lars Stoltenow
So just in case anyone created an EncFS volume on Debian around 13 years ago and forgot their password: Now is the time to unlock it (nothing special, just that predictable PRNG thing)
55 views
RME-DisCo @ UNIZAR [www.reversea.me]
https://malwareunicorn.org/workshops/macos_dylib_injection.html#0
malwareunicorn.org
MacOS Dylib Injection through Mach-O Binary Manipulation
This workshop will cover macOS Mach-O executable header parsing, compiling Go dylibs, entrypoint manipulation, shellcode, and dynamically loading dylibs into memory.
57 views
RME-DisCo @ UNIZAR [www.reversea.me]
https://www.vkremez.com/2018/09/lets-learn-dissecting-dridex-banking.html
Vkremez
Let's Learn: Dissecting Dridex Banking Malware Part 1: Loader and Avast "snxk.dll" Hooking Lib
Goal : Reverse engineer and analyze the latest "Dridex" banking malware loader and its usage of Avast " snxk.dll" hooking library . Nice:...
52 views
RME-DisCo @ UNIZAR [www.reversea.me]
https://labs.bluefrostsecurity.de/blog/2020/04/08/cve-2020-0041-part-2-escalating-to-root/
labs.bluefrostsecurity.de
Exploiting CVE-2020-0041 - Part 2: Escalating to root | Bluefrostsecurity
55 views
RME-DisCo @ UNIZAR [www.reversea.me]
https://twitter.com/NtSetDefault/status/1248060477919428609?s=09
Twitter
NtRaiseException()
This project provides a collection of Microsoft Windows kernel structures, unions and enumerations. Most of them are not officially documented and cannot be found in Windows Driver Kit (WDK) headers. Github: https://t.co/eSb23Qk48g Source: https://t.co/zPk3ctPM5v
54 views
RME-DisCo @ UNIZAR [www.reversea.me]
https://ieeecs-media.computer.org/media/marketing/cedge_digital/ce-apr20-final.pdf
42 views
RME-DisCo @ UNIZAR [www.reversea.me]
This ComputingEdge issue opens with two articles from Computer that focus on the role of OSS in modern software development. In “The Innovations of Open Source,” the author discusses the important legal, process, tool, and business model innovations that the open source movement has produced in the
software industry and beyond. “How to Select Open Source Components” provides a practical guide for choosing the right open source projects to use in your work based on requirements such as functionality, licensing, documentation, and code quality.
41 views
RME-DisCo @ UNIZAR [www.reversea.me]
https://twitter.com/DIMVAConf/status/1248203912965959680?s=09
Twitter
DIMVA Conference
Considering the COVID-19 situation, a decision has been made to make DIMVA2020 a video-based digital conference. The dates will be the same and proceedings will be published as planned. Registration will not be required to attend the conference. More details…
39 views
RME-DisCo @ UNIZAR [www.reversea.me]
https://github.com/chrivers/samsung-firmware-magic
GitHub
GitHub - chrivers/samsung-firmware-magic: Tool for decrypting the firmware files for Samsung SSDs
Tool for decrypting the firmware files for Samsung SSDs - chrivers/samsung-firmware-magic
40 views
RME-DisCo @ UNIZAR [www.reversea.me]
https://www.kitploit.com/2020/04/lunar-lightweight-native-dll-mapping.html
KitPloit - PenTest & Hacking Tools
Lunar - A Lightweight Native DLL Mapping Library That Supports Mapping Directly From Memory
42 views
RME-DisCo @ UNIZAR [www.reversea.me]
https://twitter.com/dnsprincess/status/1248609052957052928?s=09
Twitter
alissa
Hey!! #DFIR friends!! People who love forensics! Autopsy is giving free training!! You get a certificate at the end too!! https://t.co/LVr1j14cYz I use Autopsy a lot because it's free, and therefore accessible, to teach with and to practice digital forensics.…
55 views
RME-DisCo @ UNIZAR [www.reversea.me]
https://parsiya.net/blog/2019-06-18-chaining-three-bugs-to-get-rce-in-microsoft-attacksurfaceanalyzer/
parsiya.net
Chaining Three Bugs to Get RCE in Microsoft AttackSurfaceAnalyzer
This is a blog post about how I found three vulns and chained them to get RCE in
the Microsoft
AttackSurfaceAnalyzer (ASA
moving forward) GUI version.

ASA uses Electron.NET which
binds the internal Kestrel web server to 0.0.0.0. If permission is given to…
52 views
RME-DisCo @ UNIZAR [www.reversea.me]
https://docs.microsoft.com/en-us/cpp/cpp/welcome-back-to-cpp-modern-cpp?view=vs-2019
Docs
Welcome back to C++ - Modern C++
Describes the new programming idioms in Modern C++ and their rationale.
41 views
RME-DisCo @ UNIZAR [www.reversea.me]
Sandboxie se vuelve Open Source -- Long life to open source! https://github.com/xanasoft/Sandboxie
GitHub
sandboxie-plus/Sandboxie
Sandboxie - Open Source. Contribute to sandboxie-plus/Sandboxie development by creating an account on GitHub.
40 views
RME-DisCo @ UNIZAR [www.reversea.me]
https://m.xkcd.com/2293/
xkcd
RIP John Conway
37 views
RME-DisCo @ UNIZAR [www.reversea.me]
https://www.fireeye.com/blog/threat-research/2019/07/finding-evil-in-windows-ten-compressed-memory-part-one.html
Mandiant
Finding Evil in Windows 10 Compressed Memory, Part One: Volatility and Rekall Tools | Mandiant
40 views
RME-DisCo @ UNIZAR [www.reversea.me]
https://twitter.com/IEEESSP/status/1250109969468256256?s=20
Twitter
IEEE S&P
Registration for #SP20 is once again open! Registration will only be $25. We hope that this will make it possible for many more people, including students to attend this year's conference. This fee will also cover attendance to the workshops as well! htt…
46 views