Source Byte
< Scam Alert > New Threat Actor steal famous "IrLeaks" support ID after their support account been inactive for a while ( their account deleted automatically ) , as i look at my archives this is previous accounts you can use to verify them : [ + ] Exploit[.]in…
be aware of scammers !
👍4👾3
Forwarded from CyberSecurityTechnologies
Kernel_Debugging_Filesystem_Minifilters.pdf
776.9 KB
#Whitepaper
#Kernel_Security
#Offensive_security
"Debugging Filesystem Minifilters with WinDbg", 2026.
// This technical reference poster explores Windows filesystem minifilters, kernel debugging, and filter communication ports from a red team perspective
#Kernel_Security
#Offensive_security
"Debugging Filesystem Minifilters with WinDbg", 2026.
// This technical reference poster explores Windows filesystem minifilters, kernel debugging, and filter communication ports from a red team perspective
🔥5
Forwarded from Infosec Fortress
Hacefresko
From breaking into my ISP router to finding a MediaTek kernel 0day
From breaking into my ISP router to finding a MediaTek kernel 0day
🔗 Link
#exploitation
#kernel
#linux
#mediatek
#zyxel
———
🆔 @Infosec_Fortress
🔗 Link
#exploitation
#kernel
#linux
#mediatek
#zyxel
———
🆔 @Infosec_Fortress
🔥7❤2
Infosec Fortress
From breaking into my ISP router to finding a MediaTek kernel 0day 🔗 Link #exploitation #kernel #linux #mediatek #zyxel ——— 🆔 @Infosec_Fortress
This media is not supported in your browser
VIEW IN TELEGRAM
Forwarded from OnHex
CSWF.pdf
1.2 MB
🔴 مرکز فرماندهی عملیات امنیت سایبری سندی با عنوان "چارچوب ملی سرمایه انسانی امنیت سایبری ایران" در کانال بله اشون منتشر کرده.
#ایران #مرکز_فرماندهی_عملیات_امنیت_سایبری
🆔 @onhex_ir
🌍 ONHEXGROUP (Official Links)
یکی از چالشهای عمده حوزه امنیت سایبری کشورها و به طور خاص ایران، کمبود نیروی متخصص و شکاف مهارتی در این حوزه و نیز فقدان نقشهراهی مدون در خصوص مسیرهای شغلی و مقتضیات آن میباشد. این چارچوب با در نظر گرفتن زیستبوم و نیازهای واقعی کشور و با هدف ایجاد یک زبان مشترک و ساختاری منسجم طراحی شده است.
در این چارچوب، مجموعاً ۱۳ عنوان شغلی اصلی که برای وضعیت کنونی کشور و نیاز کلیدی سازمانها و شرکتها مبتلابه هستند، استخراج و وظایف، دانش تخصصی و مهارتهای هر یک به طور شفاف تشریح شده است.
#ایران #مرکز_فرماندهی_عملیات_امنیت_سایبری
🆔 @onhex_ir
🌍 ONHEXGROUP (Official Links)
🗿5👎3❤1
Trend Micro Deep Security Agent Research: Forcing bmhook/tmhook Reloads to Open a Protection Bypass Window
https://matheuzsecurity.github.io/hacking/trendmicro-bmhook-tmhook-reload-bypass/
https://matheuzsecurity.github.io/hacking/trendmicro-bmhook-tmhook-reload-bypass/
❤4
Source Byte
be aware of scammers !
this scammer is trying to mimic original threat actor , now they own irleaks@tuta.io , how? cuz tuta will delete your account after 6 month of inactivity :)
Forwarded from Source Byte
< Scam Alert >
New Threat Actor steal famous "IrLeaks" telegram support ID & tuta mail after their support account been inactive for a while ( their accounts deleted automatically due to privacy policy ) , as i look at my archives this is previous accounts you can use to verify them :
[ + ] Exploit[.]in MemberID :
[ + ] BreachForums UserID :
[ + ] BreachForums Email address :
( Creation time:
[ + ] Telegram channel :
[ + ]Telegram Support : <deleted>
[ + ]Email address :
New Threat Actor steal famous "IrLeaks" telegram support ID & tuta mail after their support account been inactive for a while ( their accounts deleted automatically due to privacy policy ) , as i look at my archives this is previous accounts you can use to verify them :
[ + ] Exploit[.]in MemberID :
150525 ( Last visited : September 7, 2024 )[ + ] BreachForums UserID :
46196[ + ] BreachForums Email address :
irleaks@proton.me ( Creation time:
1696708552 , Last update: 1710784785 )[ + ] Telegram channel :
1948656476[ + ]
5128567513[ + ]
irleaks@tuta.io <deleted by tuta policy>❤9
Attack Classes & Bypass History
This page documents recurring attack classes that DOMPurify and other DOM-based HTML sanitizers have had to withstand: HTML parser mutation, namespace confusion, rawtext breakouts, depth-limit flattening, nesting-based mXSS, DOM clobbering, prototype pollution, template-expression reassembly, engine-deferred DOM mutation, and configuration foot-guns.
https://github.com/cure53/DOMPurify/wiki/Attack-Classes-&-Bypass-History
This page documents recurring attack classes that DOMPurify and other DOM-based HTML sanitizers have had to withstand: HTML parser mutation, namespace confusion, rawtext breakouts, depth-limit flattening, nesting-based mXSS, DOM clobbering, prototype pollution, template-expression reassembly, engine-deferred DOM mutation, and configuration foot-guns.
https://github.com/cure53/DOMPurify/wiki/Attack-Classes-&-Bypass-History
👍3❤1
Introducing usbliter8: A SecureROM Exploit for Apple A12 and A13
https://ps.tc/pages/blog-usbliter8.html?hl=en-US
https://ps.tc/pages/blog-usbliter8.html?hl=en-US
ps.tc
Paradigm Shift - Introducing usbliter8
This write-up details a novel iPhone BootROM vulnerability discovered and exploited by our team. It covers the underlying bug, the associated exploitation techniques, and the post-exploitation steps required...
❤4
Ai000 Cybernetics QLab
چرا در خاورمیانه همه کشورها در حال رشد، توسعه، مدرنشدن و سیستماتیکشدن هستند، ولی ما نه؟ واقعاً مشکل چیست؟
آیا توسعه یعنی پروژههای بیشتر، بودجههای بزرگتر و آمارهای درشتتر؟
یا یعنی امروز از دیروز بهتر باشیم؟
https://youtu.be/ZyFoGe93BDg
یا یعنی امروز از دیروز بهتر باشیم؟
https://youtu.be/ZyFoGe93BDg
👍8
OnHex
گروه باج افزاری RansomHouse، مدعی نفوذ به بخشی از مخزن سورس کد شرکت امنیت سایبری Trellix شده. شرکت این نفوذ رو تایید و اعلام کرده که در حال بررسی رخداد هستش و با مراجع قانونی در حال همکاری هستش. بر اساس تحقیقات شرکت تا به امروز، هیچ مدرکی مبنی بر تأثیرگذاری بر فرآیند انتشار یا توزیع سورس کدشون، یا اینکه سورش کدشون مورد سوء استفاده قرار گرفته، پیدا نکردن. Trellix یک شرکت بین المللی امنیت سایبری است که در نوامبر 2021، از ادغام McAfee Enterprise و FireEye تشکیل شده. این شرکت به بیش از ۵۰,۰۰۰ مشتری تجاری و دولتی در سراسر جهان خدمات ارائه میده.
lol , seems they payout them , they removed them as victim . anyone get sample they shared?
🗿5🥰1
Exploiting a “Simple” Vulnerability – Part 1.5 – The Info Leak
https://windows-internals.com/exploiting-a-simple-vulnerability-part-1-5-the-info-leak/
#CVE-2021-24107
https://windows-internals.com/exploiting-a-simple-vulnerability-part-1-5-the-info-leak/
#CVE-2021-24107
💘3
Forwarded from Go Library
The Go Compiler: A Deep Dive Into How Your Code Becomes a Binary
https://blog.gaborkoos.com/posts/2026-05-08-The-Go-Compiler-a-Deep-Dive-Into-How-Your-Code-Becomes-a-Binary
https://blog.gaborkoos.com/posts/2026-05-08-The-Go-Compiler-a-Deep-Dive-Into-How-Your-Code-Becomes-a-Binary
💘3
I made a useful MCP wrapper to help agents analyse multiple binaries in IDA in parallel, and easily switching them, check this out, if you will like it, it would be cool to get feedback and maybe a post in your channel 🙏
https://github.com/whoisqwerz/pocket_disasm
https://github.com/whoisqwerz/pocket_disasm
GitHub
GitHub - whoisqwerz/pocket_disasm: Multi-session IDALib MCP router for coding agents. Analyze multiple binaries in parallel with…
Multi-session IDALib MCP router for coding agents. Analyze multiple binaries in parallel with IDA-compatible reverse engineering tools. - whoisqwerz/pocket_disasm
👍6👎2
Source Byte
I made a useful MCP wrapper to help agents analyse multiple binaries in IDA in parallel, and easily switching them, check this out, if you will like it, it would be cool to get feedback and maybe a post in your channel 🙏 https://github.com/whoisqwerz/pocket_disasm
This media is not supported in your browser
VIEW IN TELEGRAM
👎5🥰5💅1💘1
👍5