Alaid TechThread
@offensive_thread
675 subscribers
6 photos
1 video
83 files
1.31K links
Vulnerability discovery, threat intelligence, reverse engineering, AppSec
Download Telegram
About
Blog
Apps
Platform
Join
Alaid TechThread
675 subscribers
Alaid TechThread
Forwarded from r0 Crew (Channel) (Bear0)
Packer-Complexity Analysis in PANDA https://webthesis.biblio.polito.it/7519/1/tesi.pdf #malware #dukeBarman
4 views
Alaid TechThread
https://github.com/AlessandroZ/BeRoot/blob/master/Windows/README.md
GitHub
AlessandroZ/BeRoot
Privilege Escalation Project - Windows / Linux / Mac - AlessandroZ/BeRoot
53 views
Alaid TechThread
https://bugs.chromium.org/p/chromium/issues/detail?id=386988
44 views
Alaid TechThread
https://blog.ret2.io/2018/07/25/pwn2own-2018-safari-sandbox/
RET2 Systems Blog
Cracking the Walls of the Safari Sandbox
When exploiting real world software or devices, achieving arbitrary code execution on a system may only be the first step towards total compromise. For high ...
38 views
Alaid TechThread
https://github.com/McGill-DMaS/Kam1n0-Plugin-IDA-Pro
GitHub
McGill-DMaS/Kam1n0-Plugin-IDA-Pro
Kam1n0-Plugin-IDA-Pro - The Kam1n0 Assembly Analysis Platform
44 views
Alaid TechThread
https://vimeo.com/273963786
Vimeo
Sophia d'Antoine — asm2vec: Binary Learning for Vulnerability Discovery
This talk will present a novel application of a machine learning model and a corresponding tool, asm2vec, for vulnerability discovery. Treating both program disassembly…
64 views
Alaid TechThread
https://www.usenix.org/system/files/conference/usenixsecurity17/sec17-banescu.pdf
53 views
Alaid TechThread
https://twitter.com/pythonarsenal/status/1027869357450375168?s=21
Twitter
PythonArsenal
Fuze - towards automating exploit generation for arbitrary types of kernel vulnerabilities. Based on Angr, capstone, pwntools, ropgadget, claripy, simuvex. https://t.co/lgjaA6TWDD
48 views
Alaid TechThread
https://github.com/trailofbits/manticore/blob/master/README.md
GitHub
manticore/README.md at master · trailofbits/manticore
Symbolic execution tool. Contribute to trailofbits/manticore development by creating an account on GitHub.
38 views
Alaid TechThread
https://github.com/xoreaxeaxeax/rosenbridge
GitHub
GitHub - xoreaxeaxeax/rosenbridge: Hardware backdoors in some x86 CPUs
Hardware backdoors in some x86 CPUs. Contribute to xoreaxeaxeax/rosenbridge development by creating an account on GitHub.
38 views
Alaid TechThread
https://twitter.com/j00ru/status/1029316938089078785?s=12
Twitter
j00ru//vx
Meet BrokenType – the font fuzzing toolset that helped me find 39 vulns in the Windows kernel and user-mode Uniscribe library in 2015-2017. It includes a font mutator, generator and loader. Now on GitHub: https://t.co/Z9aDlP7xvp
32 views
Alaid TechThread
https://twitter.com/benhawkes/status/1029412634007724032?s=12
Twitter
Ben Hawkes
Project Zero blog: "Windows Exploitation Tricks: Exploiting Arbitrary Object Directory Creation for Local Elevation of Privilege" by @tiraniddo - https://t.co/YxONKNlgc2
32 views
Alaid TechThread
https://twitter.com/pythonarsenal/status/1028899983444127745?s=12
Twitter
PythonArsenal
WindowsDefenderTools - scripts for reverse engineering of Windows Defender Antivirus' binary emulator. Based on IDAPython. https://t.co/kVW2WgHQEr
39 views
Alaid TechThread
https://twitter.com/thezdi/status/1029431405288275971?s=12
Twitter
Zero Day Initiative
A full analysis of the #Microsoft #Exchange code execution bug released today (CVE-2018-8302) is now available. Includes a video demo of the exploit in action. Read the details at https://t.co/evpdEBMP8G.
40 views
Alaid TechThread
https://www.fireeye.com/blog/threat-research/2018/08/announcing-the-fifth-annual-flare-on-challenge.html
FireEye
Announcing the Fifth Annual Flare-On Challenge
The FireEye Labs Advanced Reverse Engineering (FLARE) team’s annual reverse engineering challenge will start at 8:00 p.m. ET on Aug. 24, 2018.
53 views
Alaid TechThread
https://googleprojectzero.blogspot.com/2018/08/the-problems-and-promise-of-webassembly.html
Blogspot
The Problems and Promise of WebAssembly
Posted by Natalie Silvanovich, Project Zero WebAssembly is a format that allows code written in assembly-like instructions to be run from J...
47 views
Alaid TechThread
https://github.com/jimmy-sonny/YaYaGen
GitHub
GitHub - jimmy-sonny/YaYaGen: Yet Another YARA rule Generator
Yet Another YARA rule Generator. Contribute to jimmy-sonny/YaYaGen development by creating an account on GitHub.
53 views
Alaid TechThread
Презентации с Black Hat и Defcon будут заливаться сюда мо мере появления: https://cloud.mail.ru/public/J7Cp/wxZzwHu8w
Облако@Mail.Ru
Папка из Облака Mail.Ru
Облако Mail.Ru - это ваше персональное надежное хранилище в интернете. Все нужные файлы всегда под рукой, доступны в любой точке мира с компьютера или смартфона.
53 views
Alaid TechThread
google dork: inurl:i.blackhat.com/us-18/ -- https://www.google.com/?q=inurl:i.blackhat.com/us-18/
62 views
Alaid TechThread
https://github.com/infosecn1nja/Red-Teaming-Toolkit/blob/master/README.md
GitHub
Red-Teaming-Toolkit/README.md at master · infosecn1nja/Red-Teaming-Toolkit
This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter. - infosecn1nja/Red-Teaming-Toolkit
63 views
Alaid TechThread
https://portswigger.net/blog/burps-new-rest-api
PortSwigger Blog
Burp's new REST API
Burp is getting a brand new REST API, which can be used by other tools to integrate with Burp Suite: In the initial release, the REST API supports launching vulnerability scans and obtaining the resul
57 views