Racing against the clock -- hitting a tiny kernel race window https://googleprojectzero.blogspot.com/2022/03/racing-against-clock-hitting-tiny.html
projectzero.google
Racing against the clock -- hitting a tiny kernel race window - Project Zero
TL;DR: How to make a tiny kernel race window really large even on kernels without CONFIG_PREEMPT:use a cache miss to widen the race window a little bit...
Finding bugs to trigger Unauthenticated Command Injection in a NETGEAR router (PSV-2022–0044) https://flattsecurity.medium.com/finding-bugs-to-trigger-unauthenticated-command-injection-in-a-netgear-router-psv-2022-0044-2b394fb9edc
Medium
Finding bugs to trigger Unauthenticated Command Injection in a NETGEAR router (PSV-2022–0044)
How I found various vulnerabilities and chained some of the vulnerabilities into an unauthenticated command execution in NETGEAR WAC124.
What to look for when reviewing a company's infrastructure
https://www.marcolancini.it/2022/blog-cloud-security-infrastructure-review/
https://www.marcolancini.it/2022/blog-cloud-security-infrastructure-review/
Operation Dragon Castling: APT group targeting betting companies https://decoded.avast.io/luigicamastra/operation-dragon-castling-apt-group-targeting-betting-companies/
Gendigital
Operation Dragon Castling: APT group targeting betting companies
APT Targets Betting Firms Clandestinely
zer0pts ctf 2022 - Flag Checker https://suvaditya.one/blog/zer0pts-flag-checker/
x0r19x91
zer0pts ctf 2022 - Flag Checker
Writeup of reversing task Flag Checker
Cronos: Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation https://github.com/XaFF-XaFF/Cronos-Rootkit
GitHub
GitHub - XaFF-XaFF/Cronos-Rootkit: Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate…
Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation. - GitHub - XaFF-XaFF/Cronos-Rootkit: Cronos is Windows 10/11 x64 rin...
APT Attack Using Word Files About Cryptocurrency (Kimsuky) https://asec.ahnlab.com/en/32958/
ASEC
APT Attack Using Word Files About Cryptocurrency (Kimsuky) - ASEC
APT Attack Using Word Files About Cryptocurrency (Kimsuky) ASEC
Not So Lazarus: Mapping DPRK Cyber Threat Groups to Government Organizations https://www.mandiant.com/resources/mapping-dprk-groups-to-government
Google Cloud Blog
Not So Lazarus: Mapping DPRK Cyber Threat Groups to Government Organizations | Mandiant | Google Cloud Blog
Mandiant believes North Korea's cyber capability supports political and national security priorities, as well as financial goals.
SunCrypt Ransomware Gains New Capabilities in 2022 https://blog.minerva-labs.com/suncrypt-ransomware-gains-new-abilities-in-2022
Rapid7
Managed Threat Complete Solution - Rapid7
Rapid7’s Managed Threat Complete with unlimited incident response and vulnerability management. Contain costs and eliminate threats. Get Started Now.
Detect malicious activity in Okta logs with Falco and Sysdig okta-analyzer https://sysdig.com/blog/detect-okta-logs-falco-sysdig/
Sysdig
Detect malicious activity in Okta logs with Falco and Sysdig okta-analyzer
Sysdig has released the following binaries that will allow us to collect Okta events and using Falco OOTB rules to detect suspicious activity
Mining data from Cobalt Strike beacons https://research.nccgroup.com/2022/03/25/mining-data-from-cobalt-strike-beacons/
Nccgroup
Cyber Security Research
Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.
PHP filter_var shenanigans https://pwning.systems/posts/php_filter_var_shenanigans/
pwning.systems
PHP filter_var shenanigans
It is likely that we have all seen PHP filters that prevent us from encountering vulnerabilities. Here in this blog post, I'll walk you through my thought process for bypassing a filter by looking for a bug in the filter itself in order to reach a bug!
Introduction to CSRF: How can a cookie get you hacked? (1/2) https://systemweakness.com/introduction-to-csrf-how-can-a-cookie-get-you-hacked-1-2-d34e0a0e6319
Medium
Introduction to CSRF: How can a cookie get you hacked? (1/2)
“We use cookies to enhance your browsing experience, by clicking ACCEPT ALL you consent to our use of cookies”
Forensics tool for NTFS (parser, mft, bitlocker, deleted files) https://github.com/thewhiteninja/ntfstool
GitHub
GitHub - thewhiteninja/ntfstool: Forensics tool for NTFS (parser, mft, bitlocker, deleted files)
Forensics tool for NTFS (parser, mft, bitlocker, deleted files) - GitHub - thewhiteninja/ntfstool: Forensics tool for NTFS (parser, mft, bitlocker, deleted files)
From XSS to RCE (dompdf 0day) https://positive.security/blog/dompdf-rce
positive.security
From XSS to RCE (dompdf 0day) | Positive Security
Using a still unpatched vulnerability in the PHP library dompdf (used for rendering PDFs from HTML), we achieved RCE on a web server with merely a reflected XSS vulnerability as entry point.
C++ Memory Corruption (std::string) - part 4 https://blog.infosectcbr.com.au/2022/03/c-memory-corruption-stdstring-part-4.html
blog.infosectcbr.com.au
C++ Memory Corruption (std::string) - part 4
Summary This is the next part of the C++ memory corruption series*. In this post, we'll look at corrupting the std:string object in Linux...
GitHub Cache Poisoning https://scribesecurity.com/github-cache-poisoning/
CVE-2022-0995 exploit (heap out-of-bounds write in the watch_queue Linux kernel component) https://github.com/Bonfee/CVE-2022-0995
GitHub
GitHub - Bonfee/CVE-2022-0995: CVE-2022-0995 exploit
CVE-2022-0995 exploit. Contribute to Bonfee/CVE-2022-0995 development by creating an account on GitHub.
A Primer On Event Tracing For Windows (ETW) https://nasbench.medium.com/a-primer-on-event-tracing-for-windows-etw-997725c082bf
Medium
Medium
Medium
A Primer On Event Tracing For Windows (ETW)
The holy grail for defenders is being able to detect /stop every attack before / when it happens and to know exactly the how’s no matter the techniques or tools. Unfortunately, we’re still far from…
How to Build a Machine Learning Model https://towardsdatascience.com/how-to-build-a-machine-learning-model-439ab8fb3fb1
Towards Data Science
Building a Basic Machine Learning Model in Python | Towards Data Science
Extensive essay on how to pick the right problem and how to develop a basic classifier