Alaid TechThread

Fuzzing sockets: FTP servers

https://securitylab.github.com/research/fuzzing-sockets-FTP

Antonio shares findings and tips from his research on socket-based fuzzing. Let’s start with the audit of three widely-used FTP servers, with details on interesting CVEs found along the way.

45 views04:05

Alaid TechThread

0-click RCE in iOS Mail app!

https://blog.zecops.com/vulnerabilities/unassisted-ios-attacks-via-mobilemail-maild-in-the-wild/

Jamf

Jamf Threat Labs | Blog

116 viewsedited 04:08

Alaid TechThread

A practical guide to red team development and operations

https://redteam.guide/docs/

54 views22:11

Alaid TechThread

Polypyus learns to locate functions in raw binaries by extracting known functions from similar binaries. Thus, it is a firmware historian. Polypyus works without disassembling these binaries, which is an advantage for binaries that are complex to disassemble and where common tools miss functions. In addition, the binary-only approach makes it very fast and run within a few seconds.

https://github.com/seemoo-lab/polypyus

GitHub

GitHub - seemoo-lab/polypyus

Contribute to seemoo-lab/polypyus development by creating an account on GitHub.

66 views14:45

Alaid TechThread

Fuzzing ImageIO

https://googleprojectzero.blogspot.com/2020/04/fuzzing-imageio.html

Blogspot

Fuzzing ImageIO

Posted by Samuel Groß, Project Zero This blog post discusses an old type of issue, vulnerabilities in image format parsers, in a new(er)...

52 views05:31

Alaid TechThread

Elemental - An ATT&CK Threat Library

https://github.com/Elemental-attack/Elemental

GitHub

GitHub - Elemental-attack/Elemental: Elemental - An ATT&CK Threat Library

Elemental - An ATT&CK Threat Library. Contribute to Elemental-attack/Elemental development by creating an account on GitHub.

61 views22:14

Alaid TechThread

Offensive OSINT s01e04 - Intelligence gathering on critical infrastructure in Southeast Asia

https://www.offensiveosint.io/offensive-osint-s01e03-intelligence-gathering-on-critical-infrastructure-in-southeast-asia/

Offensive OSINT

Offensive OSINT s01e04 - Intelligence gathering on critical infrastructure in Southeast Asia

This is the second part of my investigation into critical infrastructure around
the world. This article should have been a presentation on ICS Conference in
Singapore, however due to Coronavirus it will be a virtual event. I'm not
interested in participating…

61 views08:15

Alaid TechThread

Defeating ASLR Part 1

https://bkaraceylan.github.io/hack/binary-exploitation/2020/05/01/defeating-aslr-part-1.html

Your awesome title

Defeating ASLR Part I

Second part of this series contains the exploitation process. This is the first post of a two part series. In this post we’re going to learn a bit about virtual memory, dynamic linking, position indepentend code, and ASLR protection. All of these topics are…

51 views13:53

Alaid TechThread

Splunk Attack Range in a virtualized Ubuntu Guest VM — Guide

https://medium.com/@julian.wieg/splunk-attack-range-in-a-virtualized-ubuntu-guest-vm-guide-c6587f43c15

Medium

Splunk Attack Range in a virtualized Ubuntu Guest VM — Guide

A quick helper to get this fantastic project running locally: https://github.com/splunk/attack_range

62 views10:38

Alaid TechThread

Privilege escalation (UAC bypass) in ChangePK

https://medium.com/@mattharr0ey/privilege-escalation-uac-bypass-in-changepk-c40b92818d1b

Medium

Privilege escalation (UAC bypass) in ChangePK

Introduction It’s been a long time since I decided to to be away from Twitter for a while for self-improvements reasons and finding…

56 views04:22

Alaid TechThread

Analyzing a trio of RCE bugs in Intel wireless adapters

https://www.thezdi.com/blog/2020/5/4/analyzing-a-trio-of-remote-code-execution-bugs-in-intel-wireless-adapters

Zero Day Initiative

Zero Day Initiative — Analyzing a Trio of Remote Code Execution Bugs in Intel Wireless Adapters

Earlier this month, we published three memory corruption bugs ( ZDI-20-494 , ZDI-20-495 , and ZDI-20-496 - collectively referred to as CVE-2020-0558) affecting two Windows Wi-Fi drivers for various Intel dual-band wireless adapters. According to the vendor…

62 views16:34

Alaid TechThread

Bugs on the Windshield: Fuzzing the Windows Kernel

https://research.checkpoint.com/2020/bugs-on-the-windshield-fuzzing-the-windows-kernel/

Check Point Research

Bugs on the Windshield: Fuzzing the Windows Kernel - Check Point Research

Research By: Netanel Ben-Simon and Yoav Alon Background: In our previous research, we used WinAFL to fuzz user-space applications running on Windows, and found over 50 vulnerabilities in Adobe Reader and Microsoft Edge. For our next challenge, we decided…

67 views09:09

Alaid TechThread

SharpC2 - .NET C2 Framework

https://rastamouse.me/2020/05/sharpc2/

54 views21:36

Alaid TechThread

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

https://github.com/outflanknl/RedELK

GitHub

GitHub - outflanknl/RedELK: Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well…

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations. - outflanknl/RedELK

53 views15:24

Alaid TechThread

Patch Diffing with Ghidra

https://ihack4falafel.github.io/Patch-Diffing-with-Ghidra/

Low-level Shenanigans

Patch Diffing with Ghidra

IntroductionThis blog post is intended for folks who are interested in reverse engineering security patches, but don’t have access to expensive tools such as IDA Pro to perform such tasks. First off, we will create a program that introduces a common bug class…

70 views18:29

Alaid TechThread

PrintDemon: Print Spooler Privilege Escalation, Persistence & Stealth (CVE-2020-1048 & more)

https://windows-internals.com/printdemon-cve-2020-1048/