newlog retweeted
Also, I'm working on a 4 part deep-dive series on the process I followed to find these vulnerabilities. Parts 1 and 2 are already published:
- Part 1, Laying the Ground: the-hyperbolic.com/posts/hac…
- Part 2, The Command Injections: the-hyperbolic.com/posts/hac…
newlog retweeted
CVE-2020-24297 and CVE-2020-28005, affecting TP-Link's TL-WPA4220, are out!! And so is my brand new blog the-hyperbolic.com!! 🥳
See the details at the-hyperbolic.com/posts/vul…. Feedback is more than welcome!
#infosec #cve #hacking
CVE-2020-24297 httpd on TP-Link TL-WPA4220 devices (versions 2 through 4) allows remote authenticated users to execute arbitrary OS commands by sending crafted POST requests to the endpoint /admin/powerline. Fixed version: TL-WPA4220(EU)_V4_201023 cve.mitre.org/cgi-bin/cvenam…
newlog retweeted
RED TEAM Operator: MalDev Intermediate course is finally out!
Over 6h of fun with debuggers, assembly/C code and troubleshooting all the moving parts on Windows 10.
And testing new skills with assigned tasks. Good stuff!
Enjoy!
institute.sektor7.net/rto-ma…
#redteam #onlinelearning
newlog retweeted
Happy Malloc Maleficarum anniversary! I’ll celebrate by completing a somewhat old Firefox/jemalloc exploit I left unfinished because the underlying UAF bug was fixed in a release.
seclists.org/bugtraq/2005/Oc…
newlog retweeted
Situational awareness in AD environments. Precise queries and targeted recon #redteam @xforcered github.com/dsnezhkov/Truffle…
newlog retweeted
[NEW BLOG]
Is it possible to take adversary EMULATION too far? I think it is. I propose an 80/20 rule & give an example story.
Threat Intel people will enjoy this topic as well.
Adversary Emulation vs. Bad Copycats
link.medium.com/NnxLg8B7X9
newlog retweeted
#GuLoader is one of the most widely used loaders to distribute #malware throughout 2020. Learn about the techniques that the loader uses to thwart the analysts and their virtual machines/sandboxes: buff.ly/2YTbCdy #ThreatHunting #ThreatIntel #sandbox #loader
newlog retweeted
We'll leave all #r2con2020 videos available until Sep 13th. Then we will take them out in order to edit and publish the final version!
🎞️ Wednesday youtu.be/sgNDYgLyAP4
🎞️ Thursday youtu.be/gUeL2JcCChM
🎞️ Friday youtu.be/A9wodVpSFds
🎞️ Saturday youtu.be/6VYYf5ut638
newlog retweeted
During the next 4 hours (with breaks) at #r2con2020 @as0ler @enovella_ & @hexploitable will be featuring a workshop about mobive reverse engineerings with r2frida /cc @oleavr @bezjaje Send your questions in the YouTube chat! youtube.com/watch?v=sgNDYgLy… We start at 18:40
newlog retweeted
Next weekend we will begin introducing pages dedicated to each APT threat actor + malware samples including:
-Fancy Bear
-Equation Group
-Ocean Lotus
-OILRIG
-Transparent Tribe
-Reaper Group
-APT-C-36
-APT-C-23
-and 27 more
1luv
-smelly
newlog retweeted
North Korea’s TTPs:
The includes military structure,organizational philosophy, and an introduction to functional tactics, and describes Korean People’s Army Ground Forces (KPAGF) offensive and defensive tactics in detail.
#APT #Lazarus #Andarial
report:
github.com/blackorbird/APT_R…
newlog retweeted
My bypass to the CVE-2020-1048 was assigned the CVE-2020-1337 (shared with @aionescu, @peleghd and @Void_Sec) :-)
github.com/neofito/CVE-2020-…
newlog retweeted
We are happy to announce the #r2con2020 conference schedule 💥💥💥and updated website right after closing the CFP! 🎉🎉🎉radare.org/con/2020/assets/r… <<< 📄 [PDF]
newlog retweeted
Part 3 of my blog series on WebRTC is out! Fully remote exploits in Duo, Signal and more
googleprojectzero.blogspot.c…
newlog retweeted
📆 The Call For Papers for r2CON2020 is open until this Sunday August 9th. If you want to present a talk, hurry up! con.rada.re/r2con-2020 #r2CON2020 ¡ƃuısɹǝʌǝɹ ʎbbɐH ɹ◁◁
newlog retweeted
📅August 29th-30th
Intensive Docker Workshop with @fwdays
fwdays.com/en/event/intensiv…
📅September 12th-13th
Intensive Kubernetes Workshop with @fwdays
fwdays.com/en/event/kubernet…
📅September 28th-October 1st
Advanced Kubernetes Concepts with @skillsmatter
skillsmatter.com/courses/700…
newlog retweeted
Introducing Telemetry Sourcerer, a tool to enumerate and disable kernel-mode callbacks, inline user-mode hooks, and ETW sessions used by AV/EDR on Windows. Thank you to @gentilkiwi, @fdiskyou, and @0x00dtm for their previous work this project builds on.
github.com/jthuraisamy/Telem…
newlog retweeted
Periodic reminder that Nmap 7.40 and newer have a super-fast UDP scan mode that gives similar results to masscan/unicornscan and other asynchronous scanners: nmap -sU --defeat-icmp-ratelimit
github.com/nmap/nmap/commit/…