Order of Six Angles
@orderofsixangles
4.24K subscribers
359 photos
27 videos
42 files
1.88K links
Х.Р.А.М Сатаны

www.orderofsixangles.com

Thatskriptkid
Download Telegram
About
Blog
Apps
Platform
Join
Order of Six Angles
4.24K subscribers
Order of Six Angles
An exploitation case study of CVE-2020-1062, a use-after-free vulnerability in IE11

https://www.accenture.com/us-en/blogs/cyber-defense/exploitation-case-study-cve-2020-1062-vulnerability-in-ie11
Accenture
Accenture | Security Solutions
Make every part of your business more resilient.
951 views
Order of Six Angles
Agamotto: Accelerating Kernel Driver Fuzzing with Lightweight Virtual Machine Checkpoints

https://github.com/securesystemslab/agamotto
GitHub
GitHub - securesystemslab/agamotto: Agamotto: Accelerating Kernel Driver Fuzzing with Lightweight Virtual Machine Checkpoints
Agamotto: Accelerating Kernel Driver Fuzzing with Lightweight Virtual Machine Checkpoints - securesystemslab/agamotto
934 views
Order of Six Angles
iBoot address space

https://re.alisa.sh/notes/iBoot-address-space.html
950 views
Order of Six Angles
Order of Six Angles
How to make a Kernel Driver - Setup & Hello World (Windows) https://www.youtube.com/watch?utm_campaign=buffer&utm_source=twitter.com&utm_content=buffer5a033&utm_medium=social&v=9h1FsOISwX0&app=desktop
Вторая часть появилась

Usermode Communication - IOCTL Tutorial

https://www.youtube.com/watch?v=eumG222Efzs&list=PLt9cUwGw6CYHWuMtGHSgdLUaTo7aa2lEr&index=2
YouTube
Kernel Cheat Tutorial - IOCTL Communication Tutorial - Kernel2
Support us on Patreon: https://bit.ly/38mnveC
Learn how to use PsSetLoadImageNotifyRoutine() to detect when a DLL is loaded, get it's base address from kernel mode, output it with DbgPrintEx() and then how to pass that variable to a usermode process using…
980 views
Order of Six Angles
The Windows Binaries Index

https://m417z.com/winbindex/
M417Z
Winbindex - The Windows Binaries Index
An index of Windows binaries, including download links for executables such as exe, dll and sys files
921 views
Order of Six Angles
cve-2020-5902 honeypot docker

https://hub.docker.com/r/muchilwal/cve-2020-5902honeypot
902 views
Order of Six Angles
https://www.youtube.com/watch?v=XFDHzSLGx7o
YouTube
DIFUZE: Android Kernel Driver Fuzzing
As the rest of the Android security infrastructure improves, the Android/Linux kernel is well on its way to becoming the "weakest link," being responsible for a higher and higher fraction of vulnerabilities [1]. Most of these vulnerabilities are in kernel…
990 views
Order of Six Angles
Чувака кинул майкрософт, обещает опубликовать все найденные уязвимости, оцениваемые 100к

https://twitter.com/jonasLyk/status/1282945750746509313?s=09
X (formerly Twitter)
Jonas L (@jonasLyk) on X
As Microsoft have no intensions of ever paying me for all my submitted vulnerabilities I am forced to do this.
Countdown starts today- then I will post them all public.
Ms is just trying to get time to patch them then never pay me.
I have for over 100.000$…
1.72K views
Order of Six Angles
GUSTAVE is a fuzzing platform for embedded OS kernels. It is based on QEMU and AFL (and all of its forkserver siblings). It allows to fuzz OS kernels like simple applications.

https://github.com/airbus-seclab/gustave
GitHub
GitHub - airbus-seclab/gustave: GUSTAVE is a fuzzing platform for embedded OS kernels. It is based on QEMU and AFL (and all of…
GUSTAVE is a fuzzing platform for embedded OS kernels. It is based on QEMU and AFL (and all of its forkserver siblings). It allows to fuzz OS kernels like simple applications. - airbus-seclab/gustave
879 views
Order of Six Angles
TEE Exploitation on Samsung Exynos devices (I/IV)

https://labs.bluefrostsecurity.de/blog/2019/05/27/tee-exploitation-on-samsung-exynos-devices-introduction/
labs.bluefrostsecurity.de
TEE Exploitation on Samsung Exynos devices (I/IV) : Introduction | Bluefrostsecurity
810 views
Order of Six Angles
Ten process injection techniques: A technical survey of common and trending process injection techniques

https://www.elastic.co/blog/ten-process-injection-techniques-technical-survey-common-and-trending-process
Elastic Blog
Ten process injection techniques: A technical survey of common and trending process injection techniques
Process injection is a widespread defense evasion technique employed often within malware and fileless adversary tradecraft, and entails running custom code within the address space of another process...
902 views
Order of Six Angles
SIGRed – Resolving Your Way into Domain Admin: Exploiting a 17 Year-old Bug in Windows DNS Servers

17-year-old vulnerability in all of Windows DNS Servers.
SIGRed (CVE-2020-1350) is a wormable, critical vulnerability that can be used to achieve full Domain Administrator privileges.

https://research.checkpoint.com/2020/resolving-your-way-into-domain-admin-exploiting-a-17-year-old-bug-in-windows-dns-servers/
Check Point Research
SIGRed - Resolving Your Way into Domain Admin: Exploiting a 17 Year-old Bug in Windows DNS Servers - Check Point Research
Research by: Sagi Tzadik Introduction DNS, which is often described as the “phonebook of the internet”, is a network protocol for translating human-friendly computer hostnames into IP addresses. Because it is such a core component of the internet, there are…
820 viewsedited  
Order of Six Angles
Malware Trends Tracker by any.run

https://any.run/malware-trends/
Malware Trends Tracker | ANY.RUN
Explore dynamic articles about various malware types. Look at latest analyzes and IOCs in real-time, track which malware is gaining popularity today.
778 views
Order of Six Angles
Ptrace based fuzzer for fuzzing binaries at high speeds

https://github.com/marcinguy/fuzzer
GitHub
GitHub - marcinguy/fuzzer: Ptrace fuzzer experiments
Ptrace fuzzer experiments. Contribute to marcinguy/fuzzer development by creating an account on GitHub.
790 views
Order of Six Angles
Order of Six Angles
В интернете и некоторых каналах появилась следующая ссылка Android Debug Bridge RCE exploit https://github.com/enty8080/r0pwn Я быстро побежал смотреть, думая, что это за такой эксплоит и думал, что нашли уязвимость в ADB. На деле имеем скрипт на питоне…
Автор удалил репозиторий(
748 views
Order of Six Angles
Vulnerability Spotlight: Multiple vulnerabilities in RemoteFX affects, AMD, Intel chips

https://blog.talosintelligence.com/2020/07/vuln-spotlight-intel-amd-microsoft-july-2020.html?m=1
Talosintelligence
Vulnerability Spotlight: Multiple vulnerabilities in RemoteFX affects, AMD, Intel chips
A blog from the world class Intelligence Group, Talos, Cisco's Intelligence Group
763 views
Order of Six Angles
Bug in New Function ExAllocatePoolZero Results in Security Vulnerability and Crashes

https://www.osr.com/blog/2020/07/14/bug-in-new-function-exallocatepoolzero-results-in-security-vulnerability-and-crashes/
OSR
Bug in New Function ExAllocatePoolZero Results in Security Vulnerability and Crashes
Update: Late in December 2020 Microsoft issued an update to the WDK/EWDK that includes mitigations for this security issue. See our blog post describing these updates. tl;dr Last week (week of 5 Ju…
777 views
Order of Six Angles
Structured fuzzing Android's NFC

https://securitylab.github.com/research/fuzzing_android_nfc
GitHub Security Lab
Structured fuzzing Android’s NFC
Man Yue Mo built and open sourced a fuzzer for the Android Near Field Communication (NFC) component. He shares here some design considerations when building the fuzzer.
777 views
Order of Six Angles
ParmeSan: Sanitizer-guided Greybox Fuzzing

https://github.com/vusec/parmesan
GitHub
GitHub - vusec/parmesan: ParmeSan: Sanitizer-guided Greybox Fuzzing
ParmeSan: Sanitizer-guided Greybox Fuzzing. Contribute to vusec/parmesan development by creating an account on GitHub.
770 views
Order of Six Angles
https://twitter.com/unrealchill/status/1283418136738496513?s=09
Twitter
yonder mitch
More OnlyFans preview content alert! Watch me take apart this Axon (formerly known as TASER) police body cam I bought on ebay and retrieve the unencrypted state evidence inside
773 views
Order of Six Angles
Exploit Development: Playing ROP’em COP’em Robots with WriteProcessMemory()

https://connormcgarr.github.io/ROP2/
Connor McGarr’s Blog
Exploit Development: Playing ROP’em COP’em Robots with WriteProcessMemory()
Gaining code execution with WriteProcessMemory() via ROP and outlining the occasional need for Call-Oriented Programming.
2.82K views