📚 t.iss.one/Library_Sec

"This will only hurt for a moment": Code injection on Linux and macOS with LD_PRELOAD.

📚 t.iss.one/Library_Sec

#Mobile_Security

"Our fingerprints don't fade from the Apps we touch: Fingerprinting the Android WebView", 2022.

Browser fingerprinting is an effective method to identify individuals based on information accessible through browser settings without storing information locally, e.g., in cookies.

📚 t.iss.one/Library_Sec

Hacking the Cloud With SAML , Hexacon 2022.
#Cloud
📚 t.iss.one/Library_Sec

The Web Application
Hacker’s Handbook. Finding and Exploiting Security Flaws.
Dafydd Stuttard, Marcus Pinto
#BugBounty
📚 t.iss.one/Library_Sec

📚 t.iss.one/Library_Sec

📚 t.iss.one/Library_Sec

"Security Of The Domain Name System: An Introduction for Policy Makers", 2022.

Enhancing the digital security of communication networks is critical to strengthen trust in the ongoing digital transformation and to ensure the smooth functioning of our digitally dependent economies and societies.
The COVID-19 pandemic highlighted the crucial role played by communication networks in enabling economic and social resiliency, in particular as organisations in many OECD countries switched to teleworking to ensure business continuity during lock-down orders.

#DNS #DNSSEC
📚 t.iss.one/Library_Sec

Pre-hijacked accounts: An Empirical Study of Security Failures in User Account Creation on the Web , 2022.


User accounts have become a ubiquitous feature of websites
and other online services. Correspondingly, such accounts
have become valuable targets for attackers, and companies invest significant resources to prevent account hijacking at￾tacks, in which an attacker gains unauthorized access to the victim’s account. Previous work on this topic has studied various techniques that could be used for account hijacking, for example, the use of Cross-Site Request Forgery (CSRF) to trick victims into changing their account passwords to an attacker-controlled value .

📚 t.iss.one/Library_Sec

Securing name resolution in the IoT: DNS over CoAP , 2022.

#BlueTeam #soc #book

Blue Team Handbook Vol 2 SOC, SIEM & Threats Hunting Use Cases Notes

"SIAMHAN: IPv6 Address Correlation Attacks on TLS Encrypted Traffic via Siamese Heterogeneous Graph Attention Network", 2022.
https://github.com/CuiTianyu961030/SiamHAN

#reversing
"Very Pwnable Network: Cisco AnyConnect Security Analysis", 2022.

When corporations build an internal network, they often stick to the same vendor for all components due to compat￾ibility reasons. A vendor should offer a variety of solutions meeting all the customer’s needs. Creating and maintaining such a product range is a huge effort, and, thus, the corporate network landscape is dominated by very few vendors. Cisco’s market share including VPNs and other enterprise network equipment is around 50 % [1]. Thus, users connecting to corporate VPNs will likely face a setup that requires them to install the Cisco AnyConnect client.

📚

#Malware_analysis
"The Emperor’s New Autofill Framework: A Security Analysis of Autofill on iOS and Android", 2021.

Understanding a Payload's Life (Featuring Meterpreter & other guests)
#payload
📚 t.iss.one/library_Sec

SANS SEC573: Automating Information Security with Python
More ...

#Sans
📚 t.iss.one/Library_Sec

Learn Penetration Testing.


• Perform entry-level penetration tests by learning various concepts and techniques;
• Understand both common and not-so-common vulnerabilities from an attacker’s perspective;
• Get familiar with intermediate attack methods that can be used in real-world scenarios;
• Understand how vulnerabilities are created by developers and how to fix some of them at source code level;
• Become well versed with basic tools for ethical hacking purposes;
• Exploit known vulnerable services with tools such as Metasploit.

#Metasploit #hack #Kali #Linux
📚

#Offensive_security
"Device Tracking via Linux’s New TCP Source Port Selection Algorithm", 2022.

Online browser-based device tracking is a widespread prac￾tice, employed by many Internet websites and advertisers. It allows identifying users across multiple sessions and websites on the Internet.
]-> Repo: https://github.com/0xkol/rfc6056-device-tracker

📚 t.iss.one/Library_Sec

#Research
"Trace Oddity: Methodologies for Data-Driven Traffic Analysis on Tor", 2022.

Traffic analysis attacks against encrypted web traffic are a persisting problem. However, there is a large gap between the scientific estimate of attack threats and the real-world situation. As traffic analysis attacks de￾pend on very specific metadata information, they are sensitive to artificial changes in the transmission char￾acteristics.

]-> Repo: https://github.com/DistriNet/DLTC

📚 t.iss.one/Library_Sec

#Offensive_security
"Virtual Machine Detection In The Browser"
]-> https://bannedit.github.io/Virtual-Machine-Detection-In-The-Browser.html

Virtual Machine (VM) detection is nothing new. Malware has been doing it for over a decade now. Over time the techniques have advanced as defenders learned new ways of avoiding VM detection.

📚 t.iss.one/Library_Sec