tpx Security ⠠⠵

Pocos lugares para el curso Web Penetration Tester en #CDMX. !!

El 8 y 9 de Noviembre !!

Más información en :

https://tpx.mx/cursos/web-penetration-tester/cdmx

689 views04:31

tpx Security ⠠⠵

https://blog.xpnsec.com/cisco-amp-bypassing-self-protection/

XPN InfoSec Blog

@_xpn_ - Cisco AMP - Bypassing Self-Protection

Sometimes when you are in the middle of an engagement, you will come across a hurdle which requires a quick bit of research, coding, and a little bit of luck. This was the case with a recent engagement in which we came across Cisco AMP, an endpoint protection…

685 views06:01

tpx Security ⠠⠵

https://twitter.com/pyn3rd/status/1056193585987706882

Twitter

pyn3rd

#CVE-2018-3246 Weblogic XML External Entity (XXE). I utilized Weblogic 12.1.3.0.0 for the test. https://t.co/5yjGBafXBD

698 views06:02

tpx Security ⠠⠵

https://github.com/pyn3rd/CVE-2018-2893

GitHub

GitHub - pyn3rd/CVE-2018-2893: CVE-2018-2893-PoC

CVE-2018-2893-PoC. Contribute to pyn3rd/CVE-2018-2893 development by creating an account on GitHub.

700 views06:25

tpx Security ⠠⠵

https://danielmiessler.com/blog/building-your-own-dedicated-ipsec-vpn-in-less-than-10-minutes/

Daniel Miessler

Building Your Own Dedicated IPSEC VPN in Less Than 10 Minutes

There are tons of VPN options out there, and the field is confusing enough that I did a post on the topic a while back to help people pick one of the

752 views15:17

tpx Security ⠠⠵

MSF-Email - waiting for shells 😎

WriteUp

https://hansesecure.de/howto-msf-email/

Code

https://github.com/HanseSecure/metasploit-modules

GitHub

GitHub - HanseSecure/metasploit-modules

Contribute to HanseSecure/metasploit-modules development by creating an account on GitHub.

736 views16:08

tpx Security ⠠⠵

PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls.

https://github.com/ustayready/CasperStager

GitHub

GitHub - ustayready/CasperStager: PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low…

PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls. - ustayready/CasperStager

747 views17:00

tpx Security ⠠⠵

Channel name was changed to «「 tpx 」Security ⠠⠵»

17:02

tpx Security ⠠⠵

Bypassing AMSI and execute any malicious PowerShell code

https://0x00-0x00.github.io/research/2018/10/28/How-to-bypass-AMSI-and-Execute-ANY-malicious-powershell-code.html

zc00l blog

How to bypass AMSI and execute ANY malicious Powershell code

Hello again. In my previous posts I detailed how to manually get SYSTEM shell from Local Administrators users. That’s interesting but very late game during a penetration assessment as it is presumed that you already owned the target machine.

828 views17:03

tpx Security ⠠⠵

http://www.elfinanciero.com.mx/economia/hackers-de-axa-retiran-en-el-limite-y-evitan-dejar-rastro

El Financiero

Hackers de Axa retiran dinero en el límite y evitan dejar rastro

Los ciberdelincuentes decidieron reducir los montos para retirar el dinero, y así, tratar de evitar que se prendieran las alertas de la banca.

970 views20:34

tpx Security ⠠⠵

Ph33r d4 pr0n
https://www.nextgov.com/cio-briefing/2018/10/porn-watching-employee-infected-government-networks-russian-malware-ig-says/152307/

Nextgov.com

Porn-Watching Employee Infected Government Networks With Russian Malware, IG Says

Government auditors traced a malware infection back to a single porn-watching employee within the U.S. Geological Survey.

1.03K views00:47

tpx Security ⠠⠵

https://scholarcommons.usf.edu/cgi/viewcontent.cgi?article=1050&context=mca

780 views02:54

tpx Security ⠠⠵

Hyper -V explotation
https://www.youtube.com/watch?v=8RCH0vFxWT4

YouTube

BlueHat v18 || Hardening hyper-v through offensive security research

Jugal Parikh, Microsoft
Holly Stewart, Microsoft

Humans are susceptible to social engineering. Machines are susceptible to tampering. Machine learning is vulnerable to adversarial attacks. Singular machine learning models can be “gamed” leading to unexpected…

1.05K views02:56

tpx Security ⠠⠵

https://ubm.io/2SowtAq

Dark Reading

Windows Defender: First Full Antivirus Tool to Run in a Sandbox

Sandboxed version now available to Windows Insiders and anyone else who force-enables it in Windows 10 version 1703 and above.

867 views03:17

tpx Security ⠠⠵

hacker mexicano enseña a evitar ataques a sistemas de pagos digitales.

https://www.america-retail.com/ecommerce/ecommerce-hacker-mexicano-ensena-a-evitar-ataques-a-sistemas-de-pagos-digitales/

Te interesa un curso de seguridad NFC : https://tpx.mx/cursos/nfc-hacking

America-Retail

eCommerce: hacker mexicano enseña a evitar ataques a sistemas de pagos digitales | América Retail

833 views02:59

tpx Security ⠠⠵

Alguna vez pensaste en ser un profesional del League Of Legends? Te gustaría vivir la experiencia? vivir en una gaming house? ser entrenado por un coach profesional? Tu oportunidad ha llegado la escuadra del Team Ørdo Equitum te ofrece esto y mucho más. Se parte de nuestro BootCamp donde podrás aprender lo mejor de nuestros profesionales, conoce tus límites y superalos, un entrenamiento dinámico para mejorar tus técnicas y conocimientos en la práctica y teoría del juego. Cupo limitado. Para mayor información comunícate por : Teléfono móvil : +52 5526563983 Correo : esordoequitum@gmail.com #OrdoFighting #GoØrdo #GoOrdo Nuestras redes: https://www.facebook.com/TeamOrdoEquitum/ https://twitter.com/Ordo_Equitum https://www.instagram.com/ordo_equitum/ https://www.facebook.com/nasthalkwaii/

920 views15:07

tpx Security ⠠⠵

https://medium.com/@89berner/persistant-gcp-backdoors-with-googles-cloud-shell-2f75c83096ec

Medium

Persistent GCP backdoors with Google’s Cloud Shell

Cloud Shell GCP Google Cloud Security

1.68K views15:24

tpx Security ⠠⠵

Libro Blanco del CISO [PDF] es una iniciativa de la Asociación Española para el Fomento de la Seguridad de la Información (ISMS Forum Spain). En el documento han trabajado más de 20 directores de Seguridad de la Información.
Descarga: https://www.ismsforum.es/ficheros/descargas/ellibroblancodelciso1540377171.pdf

1.09K views18:42

tpx Security ⠠⠵

https://github.com/Hack-with-Github/Powerful-Plugins

GitHub

GitHub - Hack-with-Github/Powerful-Plugins: Powerful plugins and add-ons for hackers

Powerful plugins and add-ons for hackers. Contribute to Hack-with-Github/Powerful-Plugins development by creating an account on GitHub.

1.06K views05:01

tpx Security ⠠⠵

https://github.com/immunIT/CVE-2018-11759/

GitHub

GitHub - immunIT/CVE-2018-11759: Proof of concept showing how to exploit the CVE-2018-11759

Proof of concept showing how to exploit the CVE-2018-11759 - immunIT/CVE-2018-11759