Alaid TechThread
@offensive_thread
677 subscribers
6 photos
1 video
83 files
1.31K links
Vulnerability discovery, threat intelligence, reverse engineering, AppSec
Download Telegram
About
Blog
Apps
Platform
Join
Alaid TechThread
677 subscribers
Alaid TechThread
https://twitter.com/PythonArsenal/status/1105188252137476097
Twitter
PythonArsenal
IDAnon - Auto remove license information from IDA Pro database. Based on IDAPython. https://t.co/HEvlTyWMFe
58 views
Alaid TechThread
#ARM Assembly Language https://bob.cs.sonoma.edu/IntroCompOrg-RPi/intro-co-rpi.html
59 viewsedited  
Alaid TechThread
A toolset to make a system look as if it was the victim of an APT attack
https://github.com/NextronSystems/APTSimulator
GitHub
GitHub - NextronSystems/APTSimulator: A toolset to make a system look as if it was the victim of an APT attack
A toolset to make a system look as if it was the victim of an APT attack - NextronSystems/APTSimulator
51 viewsedited  
Alaid TechThread
Scripts for the #Ghidra software reverse engineering suite.
https://github.com/ghidraninja/ghidra_scripts#swift_demanglerpy
GitHub
GitHub - ghidraninja/ghidra_scripts: Scripts for the Ghidra software reverse engineering suite.
Scripts for the Ghidra software reverse engineering suite. - ghidraninja/ghidra_scripts
47 views
Alaid TechThread
https://www.exploit-db.com/exploits/46536
Exploit Database
Microsoft Windows MSHTML Engine - 'Edit' Remote Code Execution
Microsoft Windows MSHTML Engine - 'Edit' Remote Code Execution. CVE-2019-0541 . local exploit for Windows platform
50 views
Alaid TechThread
Forwarded from r0 Crew (Channel)
pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team https://github.com/knownsec/pocsuite3 #exploit #dukeBarman
GitHub
GitHub - knownsec/pocsuite3: pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404…
pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team. - knownsec/pocsuite3
6 views
Alaid TechThread
Forwarded from r0 Crew (Channel)
Windows Kernel Logic Bug Class: Access Mode Mismatch in IO Manager

Article: https://googleprojectzero.blogspot.com/2019/03/windows-kernel-logic-bug-class-access.html

Another: https://blogs.technet.microsoft.com/srd/2019/03/14/local-privilege-escalation-via-the-windows-i-o-manager-a-variant-finding-collaboration/

#re #expdev #lpe #darw1n
Blogspot
Windows Kernel Logic Bug Class: Access Mode Mismatch in IO Manager
Posted by James Forshaw, Project Zero This blog post is an in-depth look at an interesting logic bug class in the Windows Kernel and wh...
6 views
Alaid TechThread
https://0ffset.net/reverse-engineering/malware-analysis/analysing-isfb-loader/
0ffset Training Solutions | Practical and Affordable Cyber Security Training
Analysing ISFB – The First Loader | 0ffset Training Solutions
I'm finally getting round to writing this post - for the past few months I have been analysing different versions of ISFB/Ursnif/Gozi to gain a deeper understanding in the functionality of this specific malware. In this post, I will be detailing how to unpack…
56 views
Alaid TechThread
Hunting_Cyber_Threat_Actors_with.pdf
4.7 MB
Применение информации из #SSL #TLS сертификатов
102 viewsedited  
Alaid TechThread
#OSINT Email-Enum searches mainstream websites and tells you if an #email is registered! https://github.com/Frint0/email-enum
72 views
Alaid TechThread
https://www.mdsec.co.uk/2019/03/silencing-cylance-a-case-study-in-modern-edrs/
MDSec
Silencing Cylance: A Case Study in Modern EDRs - MDSec
As red teamers regularly operating against mature organisations, we frequently come in to contact with a variety of Endpoint Detection & Response solutions. To better our chances of success in...
77 views
Alaid TechThread
🔥Выполнение кода при распаковке #WinRAR #RCE #1day https://github.com/WyAtu/CVE-2018-20250 🔥
GitHub
GitHub - WyAtu/CVE-2018-20250: exp for https://research.checkpoint.com/extracting-code-execution-from-winrar
exp for https://research.checkpoint.com/extracting-code-execution-from-winrar - WyAtu/CVE-2018-20250
73 viewsedited  
Alaid TechThread
2018-D-Plohmann-CodeCartographersDiary.pdf
2.1 MB
110 views
Alaid TechThread
Another link between Equation Group and Stuxnet? https://www.a12d404.net/security/2018/08/10/another-link-between-eqgrp-and-stuxnet.html
www.a12d404.net
Another link between Equation Group and Stuxnet?
... about security, reversing and other gimmicks.
71 views
Alaid TechThread
🇰🇵 https://research.checkpoint.com/silivaccine-a-look-inside-north-koreas-anti-virus/
57 views
Alaid TechThread
https://twitter.com/svblxyz/status/1110829354177712128?s=19
Twitter
svbl
Hey Red Teams! Wanna see physical security measures? Badges? Code snippets, applications used? Passwords typed and more? Then enjoy the trend of interns filming and sharing their daily routine of working in tech companies.
59 views
Alaid TechThread
1903.04717.pdf
898.5 KB
Activation Analysis of a Byte-Based Deep #NeuralNetwork for #Malware #Classification #FireEye
101 viewsedited  
Alaid TechThread
Forwarded from r0 Crew (Channel)
Ghidra Plugin Development for Vulnerability Research - Part-1 https://www.somersetrecon.com/blog/2019/ghidra-plugin-development-for-vulnerability-research-part-1 #ghidra #dukeBarman
Somerset Recon
Ghidra Plugin Development for Vulnerability Research - Part-1 — Somerset Recon
Overview On March 5th at the RSA security conference, the National Security Agency (NSA) released a reverse engineering tool called Ghidra. Similar to IDA Pro, Ghidra is a disassembler and decompiler with many powerful features (e.g., plugin support,…
5 views
Alaid TechThread
CVE-2019-0211 Apache Root Privilege Escalation
https://github.com/cfreal/exploits/tree/master/CVE-2019-0211-apache
GitHub
exploits/CVE-2019-0211-apache at master · cfreal/exploits
Some of my exploits. Contribute to cfreal/exploits development by creating an account on GitHub.
50 views
Alaid TechThread
A Pentester's Guide - Part 3 (OSINT, Breach Dumps, & Password Spraying)
https://delta.navisec.io/osint-for-pentesters-part-3-password-spraying-methodology/
56 views