Alaid TechThread

Facebook Messenger Worm
https://www.kernelmode.info/forum/viewtopic.php?p=32871

33 views13:43

Building a Passive IMSI Catcher

https://harrisonsand.com/imsi-catcher/

This post walks through the processes of building a passive IMSI catcher. The purpose of this post is to be educational - to highlight the ease of which these devices can be built, and to practically show how privacy is already being compromised today.

112 views20:51

Alaid TechThread

modDetective
modDetective is a small Python tool that chronologizes files based on modification time in order to investigate recent system activity.
https://github.com/itsKindred/modDetective

36 views11:04

Alaid TechThread

Awesome-Advanced-Windows-Exploitation-References
List of Awesome Advanced Windows Exploitation References
https://github.com/yeyintminthuhtut/Awesome-Advanced-Windows-Exploitation-References

GitHub

GitHub - yeyintminthuhtut/Awesome-Advanced-Windows-Exploitation-References: List of Awesome Advanced Windows Exploitation References

List of Awesome Advanced Windows Exploitation References - yeyintminthuhtut/Awesome-Advanced-Windows-Exploitation-References

43 views11:05

Alaid TechThread

Remote Code Execution on most Dell computers

https://d4stiny.github.io/Remote-Code-Execution-on-most-Dell-computers/

Bill Demirkapi's Blog

Remote Code Execution on most Dell computers

What computer do you use? Who made it? Have you ever thought about what came with your computer? When we think of Remote Code Execution (RCE) vulnerabilities in mass, we might think of vulnerabilities in the operating system, but another attack vector to…

29 views05:33

Alaid TechThread

The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)

https://github.com/jrentenaar/Office-365-Extractor

GitHub

GitHub - JoeyRentenaar/Office-365-Extractor: The Office 365 Extractor is a tool that allows for complete and reliable extraction…

The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL) - JoeyRentenaar/Office-365-Extractor

36 views09:47

Alaid TechThread

Обзор инструментов и описание подходов для кластеризации зловредов

https://docs.google.com/presentation/d/1g8_9SKSDYtCaJgRw_cJd8a88KPKShhPZRnBB39ZQEIM/edit#slide=id.g511833902d_0_153

Google Docs

All malwares are equals, but some malware are more equals than others

All malwares are equals, but some malware are more equals than others Joxean Koret

36 views15:21

Alaid TechThread

Forwarded from Noise Security Bit

А вот и полная версия слайдов https://github.com/0xAlexei/INFILTRATE2019/blob/master/INFILTRATE%20Ghidra%20Slides.pdf

GitHub

INFILTRATE2019/INFILTRATE Ghidra Slides.pdf at master · 0xAlexei/INFILTRATE2019

INFILTRATE 2019 Demo Materials. Contribute to 0xAlexei/INFILTRATE2019 development by creating an account on GitHub.

5 views10:50

Alaid TechThread

EE | Android App Reverse Engineering 101 | https://maddiestone.github.io/AndroidAppRE/

35 views18:33

Alaid TechThread

Throwing 500 vm's at your fuzzing target being an individual security researcher

https://kciredor.com/throwing-500-vms-fuzzing-target-individual-security-researcher.html

kciredor’s information security blog

Throwing 500 vm’s at your fuzzing target being an individual security researcher

Adobe Reader progress One year ago I blogged about my many attempts and failures at fuzzing Adobe Reader and finding exploitable security issues.

35 views05:23

Alaid TechThread

TALE OF A WORMABLE TWITTER XSS
https://www.virtuesecurity.com/tale-of-a-wormable-twitter-xss/

Virtue Security

Tale of a Wormable Twitter XSS

This is a tale of how we found a wormable XSS on Twitter, and how we managed to fully bypass its CSP policy.

36 views09:22

Alaid TechThread

PAC на iOS 12 и чипах A12

https://speakerdeck.com/marcograss/2pac-2furious-envisioning-an-ios-compromise-in-2019

Speaker Deck

2PAC 2Furious: Envisioning an iOS Compromise in 2019

Infiltrate 2019 talk slides

36 viewsedited 21:21

Alaid TechThread

Исследование на тему безопасности SAP

https://github.com/gelim/sap_ms/blob/master/README.md

GitHub

gelim/sap_ms

SAP Message Server research presented at OPCDE 2019 - gelim/sap_ms

36 views21:30

Alaid TechThread

Анонсирована вторая версия USB Armory

https://github.com/inversepath/usbarmory/wiki/Mk-II-Roadmap

GitHub

inversepath/usbarmory

USB armory: open source flash-drive-sized computer - inversepath/usbarmory

36 views11:27

Alaid TechThread

Армия обороны Израиля нанесла удар по зданию, откуда предположительно проводились кибер атаки со стороны ХАМАС.

https://twitter.com/idf/status/1125066395010699264?s=21

Twitter

Israel Defense Forces

CLEARED FOR RELEASE: We thwarted an attempted Hamas cyber offensive against Israeli targets. Following our successful cyber defensive operation, we targeted a building where the Hamas cyber operatives work. HamasCyberHQ.exe has been removed.

47 views21:20

Alaid TechThread

Это первый подобный случай принятия ответных мер на кибер атаку.

40 views21:23

Alaid TechThread

Книга по тестированию и фаззингу ПО:

https://www.fuzzingbook.org

www.fuzzingbook.org

The Fuzzing Book

Welcome to "The Fuzzing Book"! Software has bugs, and catching bugs can involve lots of effort. This book addresses this problem by automating software testing, specifically by generating tests automatically. Recent years have seen the development of novel…