Alaid TechThread
@offensive_thread
677 subscribers
6 photos
1 video
83 files
1.31K links
Vulnerability discovery, threat intelligence, reverse engineering, AppSec
Download Telegram
About
Blog
Apps
Platform
Join
Alaid TechThread
677 subscribers
Alaid TechThread
Forwarded from Записки админа
Ну что, Intel собрали в один список все (но это не точно) потенциальные проблемы безопасности в Intel ME, о которых сообщали различные исследователи. К списку подготовили обновление и утилиту для проверки, подвержена ли система уязвимостям.

Сам список доступен по ссылке:
https://goo.gl/BuLp6h

Информация об обновлениях:
https://goo.gl/GLijsg

Утилита для проверки наличия уязвимости (для Windows и Linux):
https://downloadcenter.intel.com/download/27150

Все ли бекдоры закрыли, завезли ли новые - история умалчивает.

#intel #security
Intel
Intel® Management Engine Critical Firmware Update (Intel-SA-00086)
Security Advisory (Intel-SA-00086), a critical firmware vulnerability in systems.
15 views
Alaid TechThread
Агрегатор различных анализаторов
https://thehive-project.org
StrangeBee
Creators of TheHive and Cortex, the software for advanced security case management and incident response trusted worldwide.
46 views
Alaid TechThread
Канал про С++ для юных вирусописателей:
https://www.youtube.com/user/HackVise/videos
41 views
Alaid TechThread
Ловим фишинговые домены:
https://github.com/x0rz/phishing_catcher
GitHub
GitHub - x0rz/phishing_catcher: Phishing catcher using Certstream
Phishing catcher using Certstream. Contribute to x0rz/phishing_catcher development by creating an account on GitHub.
45 views
Alaid TechThread
https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about
54 views
Alaid TechThread
Forwarded from r0 Crew (Channel) (Bear0)
Slides from talk "The Art of Fuzzing" with the demos (workflow with AFL&WinAFL, Taint Analysis, Reversing Tricks for Fuzzing, in-memory fuzzing, DynamoRio and much more!): https://sec-consult.com/en/blog/2017/11/the-art-of-fuzzing-slides-and-demos/index.html
#darw1n
19 views
Alaid TechThread
DeepSign: Deep Learning for Automatic Malware Signature Generation and Classification
https://arxiv.org/pdf/1711.08336.pdf
78 viewsedited  
Alaid TechThread
Потенциальные атаки на биткоин:
https://btc-hijack.ethz.ch
57 views
Alaid TechThread
https://www.bbc.com/future/story/20170607-why-printers-add-secret-tracking-dots
Bbc
Why printers add secret tracking dots
They’re almost invisible but contain a hidden code – and now their presence on a leaked document has sparked speculation about their usefulness to FBI investigators.
61 views
Alaid TechThread
Как (НЕ) надо писать Malware:
https://www2.fireeye.com/rs/848-DID-242/images/rpt-apt29-hammertoss.pdf
60 views
Alaid TechThread
https://resources.infosecinstitute.com/domain-fronting/
Infosec Resources
Domain Fronting
In this article, we are going to learn about a very interesting and powerful technique known as Domain Fronting which is a circumvention technique based
56 views
Alaid TechThread
https://devblogs.nvidia.com/parallelforall/malware-detection-neural-networks/
NVIDIA Technical Blog
Malware Detection in Executables Using Neural Networks
The detection of malicious software (malware) is an increasingly important cyber security problem for all of society. Single incidences of malware can cause millions of dollars in damage.
55 views
Alaid TechThread
ZeroNights 2017 Slides: https://2017.zeronights.ru/materials/
56 views
Alaid TechThread
https://link.springer.com/content/pdf/10.1007/978-981-10-0281-6_5.pdf
SpringerLink
Malware Similarity Analysis Based on Graph Similarity Flooding Algorit
Malware is a pervasive problem in computer security. The traditional signature-based detecting method is ineffective to recognize the dramatically increased malware. Researches show that many of the...
66 views
Alaid TechThread
978-981-10-0281-6_5.pdf
158.7 KB
55 views
Alaid TechThread
Для тех, у кого нет доступа
53 views
Alaid TechThread
RAND_RR1751.pdf
1.7 MB
48 views
Alaid TechThread
https://www.bleepingcomputer.com/news/security/-process-doppelg-nging-attack-works-on-all-windows-versions/
BleepingComputer
"Process Doppelgänging" Attack Works on All Windows Versions
Today, at the Black Hat Europe 2017 security conference in London, two security researchers from cyber-security firm enSilo have described a new code injection technique called "Process Doppelgänging."
41 views
Alaid TechThread
https://www.blackhat.com/docs/eu-17/materials/eu-17-Liberman-Lost-In-Transaction-Process-Doppelganging.pdf
44 views
Alaid TechThread
https://twitter.com/Kuwaddo/status/940288213314359296
Twitter
Quad
I want to shoot myself right now. Is humanity the dumbest thing on earth I just infected a bunch of servers with my ssh key and enabled root login via a shitty meme
49 views