Alaid TechThread
@offensive_thread
676 subscribers
6 photos
1 video
82 files
1.31K links
Vulnerability discovery, threat intelligence, reverse engineering, AppSec
Download Telegram
About
Blog
Apps
Platform
Join
Alaid TechThread
676 subscribers
Alaid TechThread
Forwarded from Alexey Sintsov
Друзья, в эту СУББОТУ, в 11-30 по МСК будет запись подкаста @N0iSeBit! Тема: "О современных атаках на CPU и микроархитектуру". Гости подкаста: Дмитрий Олексюк aka Cr4sh (@d_olex), Никита Тараканов, Артем Шишкин (@honorary_bot), Макс Горячий (@h0t_max), Дмитрий Скляров (@_Dmit), Никита Абдуллин (@0xABD) и бессменный ведущий которому тож есть что сказать по теме - Александр Матросов (@matrosov). Запись будет "стримиться" на твич канал @defconrussia (https://www.twitch.tv/defconrussia), и именно там, можно будет проследить за дискуссией в реальном времени и позадавать вопросы гостям! (прям в чате стрима). Старые записи подкаста ищите тут: https://noisebit.podster.fm/
Twitch
defconrussia - Twitch
Russian hackers community - DEFCON Russia, DC#7812. https://defcon-russia.ru
51 views
Alaid TechThread
Все предложения по наполнению канала можно писать @Ziv00s3
55 views
Alaid TechThread
https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Min-Spark-Zheng-macOS-iOS-Kernel-Debugging-UPDATED.pdf
58 views
Alaid TechThread
https://blog.talosintelligence.com/2018/04/malware-monitor-pyrebox-for-analysis.html
Talosintelligence
Malware monitor - leveraging PyREBox for malware analysis
A blog from the world class Intelligence Group, Talos, Cisco's Intelligence Group
50 views
Alaid TechThread
PoC CVE-2018-0886 https://github.com/preempt/credssp
GitHub
GitHub - preempt/credssp: A code demonstrating CVE-2018-0886
A code demonstrating CVE-2018-0886. Contribute to preempt/credssp development by creating an account on GitHub.
56 views
Alaid TechThread
https://labs.nettitude.com/blog/windbg-using-pykd-to-dump-private-symbols/
LRQA Nettitude Labs
WinDbg: using pykd to dump private symbols
We’ve recently been conducting some reverse engineering and vulnerability analysis on an Anti Virus (AV) product and wanted to attach Rohitab API Monitor to one of the AV’s running processes so that I could log the Windows API function calls in order to better…
45 views
Alaid TechThread
Detecting Malicious PowerShell Commands using Deep Neural Networks https://arxiv.org/pdf/1804.04177.pdf
46 viewsedited  
Alaid TechThread
Ransomware Payments in the Bitcoin Ecosystem https://arxiv.org/pdf/1804.04080.pdf
51 viewsedited  
Alaid TechThread
IoTSense: Behavioral Fingerprinting of IoT Devices
https://arxiv.org/pdf/1804.03852.pdf
62 views
Alaid TechThread via @vote
Переезд в другой мессенджер?
anonymous poll

Нет ( у меня есть доступ в Telegram) – 9
👍👍👍👍👍👍👍 100%

Да (не хочу настраивать proxy/VPN)
▫️ 0%

👥 9 people voted so far.
56 views
Нет ( у меня есть доступ в Telegram) – 9
Да (не хочу настраивать proxy/VPN)
Alaid TechThread
Forwarded from cobaltstrike
Remote kernel debugging "lateral movement" via WMI. An example of one of the many use cases for new #PowerShell BCD module (still in very early stages).
https://github.com/mattifestation/BCD
5 views
Alaid TechThread
https://github.com/ga-ryo/idafuzzy
GitHub
GitHub - Ga-ryo/IDAFuzzy: Fuzzy search tool for IDA Pro.
Fuzzy search tool for IDA Pro. Contribute to Ga-ryo/IDAFuzzy development by creating an account on GitHub.
37 views
Alaid TechThread
https://twitter.com/j00ru/status/985894472478265344?s=21
Twitter
j00ru//vx
As promised last week, the details of the .PDB heap memory disclosure in Visual Studio (CVE-2018-1037) are now available at https://t.co/vgryBrNBc0. Infoleaks are a really special breed of bugs, be it in kernel or user-mode 🐛
42 views
Alaid TechThread
Интересный бот. У кого есть VPS/VDS на DO, Azure, AWS лучше задуматься о переносе. Один из моих IP попал под раздачу.
44 viewsedited  
Alaid TechThread
Forwarded from RKNSHOWTIME (rknbot)
🔥 +327,688 | Total 18,856,263 ▲ 1.769% 🔥
Percent of global IPs: ~0.509%

Blocked subnets:
18.204.0.0/14 - Amazon Technologies Inc.
91.121.0.0/16 - OVH SAS
—
According to https://usher2.club
5 views
Alaid TechThread
https://0xeb.net/2018/03/using-z3-with-ida-to-simplify-arithmetic-operations-in-functions/
Shortjump!
Using Z3 with IDA to simplify arithmetic operations in functions
I have been meaning to learn about SMT based program analysis for a long time and recently I started learning about the topic. There are so many frameworks, articles and tutorials out there that I …
57 views
Alaid TechThread
Побег из VMware https://keenlab.tencent.com/en/2018/04/23/A-bunch-of-Red-Pills-VMware-Escapes/
Keen Security Lab Blog
A bunch of Red Pills: VMware Escapes
BackgroundVMware is one of the leaders in virtualization nowadays. They offer VMware ESXi for cloud, and VMware Workstation and Fusion for Desktops (Windows, Linux, macOS).The technology is very well
47 views
Alaid TechThread
Forwarded from r0 Crew (Channel) (Bear0)
https://www.fireeye.com/blog/threat-research/2018/04/loading-kernel-shellcode.html #dukeBarman
Trellix
Research | Trellix Stories
Trellix Research, get the latest cybersecurity trends, best practices, security vulnerabilities, and more from industry leaders.
7 views
Alaid TechThread
https://sysadminconcombre.blogspot.ru/2018/04/run-system-commands-through-nvidia.html
Blogspot
Running system commands through Nvidia signed binaries
A while ago, when working on PowerMemory, I discovered a hidden account configured by Nvidia on one of my computers ( https://twitter.com/p...
52 views
Alaid TechThread
https://www.youtube.com/watch?v=dpG97TBR3Ys
YouTube
OffensiveCon18 - Alex Ionescu - Advancing the State of UEFI Bootkits
Persistence in the Age of PatchGuard and Windows 10
61 views