Alaid TechThread
@offensive_thread
677 subscribers
6 photos
1 video
83 files
1.31K links
Vulnerability discovery, threat intelligence, reverse engineering, AppSec
Download Telegram
About
Blog
Apps
Platform
Join
Alaid TechThread
677 subscribers
Alaid TechThread
https://blog.talosintelligence.com/2018/02/group-123-goes-wild.html
Cisco Talos Blog
Flash 0-Day In The Wild: Group 123 At The Controls
This blog post is authored by Warren Mercer and Paul Rascagneres.


Executive Summary
The 1st of February, Adobe published an advisory concerning a Flash vulnerability (CVE-2018-4878). This vulnerability is a use after free that allows Remote Code Execute…
47 views
Alaid TechThread
Интересный доклад с RECON про реверс JS движка в Windows Defender https://recon.cx/2018/brussels/resources/slides/RECON-BRX-2018-Reverse-Engineering-Windows-Defender-s-JavaScript-Engine.pdf
52 views
Alaid TechThread
Проект на тему автоматической деобфускации https://github.com/JonathanSalwan/Tigress_protection#testing-our-approach-on-others-binaries
GitHub
GitHub - JonathanSalwan/Tigress_protection: Playing with the Tigress software protection. Break some of its protections and solve…
Playing with the Tigress software protection. Break some of its protections and solve their reverse engineering challenges. Automatic deobfuscation using symbolic execution, taint analysis and LLVM...
57 views
Alaid TechThread
https://blog.newskysecurity.com/doubledoor-iot-botnet-bypasses-firewall-as-well-as-modem-security-using-two-backdoor-exploits-88457627306d
NewSky Security
DoubleDoor: IoT Botnet bypasses firewall as well as modem security using two backdoor exploits
Within two years, IoT attacks have seen rapid evolution. We now see that IoT threats, which have already evolved from admin: admin…
61 views
Alaid TechThread
Советую почитать материалы работы (есть в репозитории) https://github.com/fabros/angr-antievasion
GitHub
fabros/angr-antievasion
Final project for the M.Sc. in Engineering in Computer Science at Università degli Studi di Roma "La Sapienza" (A.Y. 2016/2017). - fabros/angr-antievasion
54 views
Alaid TechThread
BAR 2018 materials https://panda.moyix.net/~moyix/NDSS2018_BAR_Keynote.pdf https://ruoyuwang.me/files/BAR_2018_papers_without_DOI.7z
47 views
Alaid TechThread
https://telegra.ph/Qtum-Foundation-zapustit-sistemu-sverhmalyh-kosmicheskih-sputnikov-dlya-PoS-majninga-02-19
Telegraph
Qtum Foundation запустит систему сверхмалых космических спутников для PoS-майнинга
Qtum Foundation и сингапурская компания SpaceChain Foundation объявили о партнерстве c целью запуска стандартизированных спутников-кубсатов, которые позволят пользователям Qtum добывать токены на устройствах Raspberry Pi. В Qtum Foundation считают, что алгоритм…
56 views
Alaid TechThread
Remote Code Execution in IDA by double clicking a string. Protocol handler abuse. https://riscy.business/2018/02/ida-remote-execution/
50 views
Alaid TechThread
https://rhinosecuritylabs.com/aws/hiding-cloudcobalt-strike-beacon-c2-using-amazon-apis/
Rhino Security Labs
Hiding in the Cloud:Cobalt Strike Beacon C2 using Amazon APIs
Rhino Security Labs shows how Amazon's AWS APIs can be used for malware C2, subverting blocking and monitoring with a malware channel that uses AWS APIs.
49 views
Alaid TechThread
concolic-testing-backup.pdf
796.7 KB
49 views
Alaid TechThread
https://telegra.ph/V-smart-kontraktah-na-blokchejne-Ethereum-obnaruzheno-svyshe-34-tysyach-uyazvimostej-02-23-5
Telegraph
В смарт-контрактах на блокчейне Ethereum обнаружено свыше 34 тысяч уязвимостей
В настоящее время в блокчейне Ethereum работают сотни тысяч смарт-контрактов, управляющих кошельками, токенами, приложениями или использующихся для хранения средств. Группа британских исследователей самостоятельно смогла идентифицировать 34 200 уязвимых смарт…
45 views
Alaid TechThread
https://github.com/zricethezav/gitleaks - открытый проект для поиска утечек приватных ключей в репозиториях
GitHub
GitHub - gitleaks/gitleaks: Find secrets with Gitleaks 🔑
Find secrets with Gitleaks 🔑. Contribute to gitleaks/gitleaks development by creating an account on GitHub.
40 views
Alaid TechThread
https://infocon.org/cons/ архив презентаций и видео с разных ИБ конференций
infocon.org
InfoCon.org is an archive of hacking and security conference videos, documentaries, rainbow tables, word lists and podcasts.
38 views
Alaid TechThread
https://github.com/SECFORCE/Tunna Заворачиваем TCP в HTTP
GitHub
GitHub - SECFORCE/Tunna: Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to…
Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments. - GitHub - SECFORCE/Tunna: Tunna...
42 views
Alaid TechThread
Вышла IDA PRO 7.1 https://hex-rays.com/products/ida/7.1/index.shtml
Несколько улучшений в отладчике и работе с ARM. Кроме того добавлено API для работы с микрокодом, что позволит быстрее автоматизировать процесс RE.
44 views
Alaid TechThread
https://www.evilsocket.net/2018/02/27/All-hail-bettercap-2-0-one-tool-to-rule-them-all/ вышел Bettercap 2.0
evilsocket
All Hail Bettercap 2.0, One Tool to Rule Them All.
It’s with immense pleasure that I announce the release of the second generation of bettercap, a complete reimplementation of the most complete and advanced Man-in-the-Middle attack framework. This rel
38 views
Alaid TechThread
https://pbs.twimg.com/media/DRA9x3_WkAAaohP.jpg
45 views
Alaid TechThread
https://www.meetup.com/OWASP-Russia/events/247958426/ любителям веба может быть интересно
Meetup
OWASP Russia Meetup #7
• What we'll doВ московском офисе Яндекса пройдёт очередной OWASP Russia Meetup — встреча российского отделения сообщества, на которой соберутся специалисты по информационной безопасности.OWASP (Open
48 views
Alaid TechThread
Forwarded from r0 Crew (Channel) (Bear0)
https://www.fidusinfosec.com/nomachine-road-code-execution-without-fuzzing-cve-2018-6947/ #exploit #dukeBarman
www.wavenet.co.uk
Fidus Information Security
2nd February 2023 - Wavenet announced the acquisition of Fidus Information Security Limited.
10 views
Alaid TechThread
"Атаки на человеческий мозг" https://spectrum.ieee.org/the-human-os/robotics/artificial-intelligence/hacking-the-brain-with-adversarial-images
49 views
Alaid TechThread
Mindmap - подсказка по повышению привелегий
44 views