Słówko na dziś:

ambimouseterous

Definicja:

Able to use a mouse with either hand

#angielskizhejto #angielski #informatyka

Fajny? Taki idealny do heroes3

#informatyka #serwery

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.03.13.md

Mixing up Public and Private Keys in OpenID Connect deployments - https://blog.hboeck.de/archives/909-Mixing-up-Public-and-Private-Keys-in-OpenID-Connect-deployments.html

Gayfemboy: A Botnet Deliver Through a Four-Faith Industrial Router 0-day Exploit - https://blog.xlab.qianxin.com/gayfemboy-en/

Catching Potential Indirect Syscalls - https://xacone.github.io/mitigate-indirect-syscalls.html

Unraveling the Many Stages and Techniques Used by RedCurl/EarthKapre APT - https://www.esentire.com/blog/unraveling-the-many-stages-and-techniques-used-by-redcurl-earthkapre-apt

Everyone knows your location: tracking myself down through in-app ads - https://timsh.org/tracking-myself-down-through-in-app-ads/

#informatyka

Linuxowcy potrzebuję pomocy. Wczoraj podczas oglądania serialu odtwarzanie się zawiesiło i komputer zapętlił się na odtwarzaniu jakichś 3 sekund dźwięku. Nie reagował na próby wyłączenia więc trzeba było go wyłączyć guzikiem. Po ponownym uruchomieniu nie było w ogóle dźwięku więc wyłączyłam kompa bo za późno było żeby się bawić w naprawianie i okazało się że komputer nie chce się wyłączyć. X-y się zamykają, monitor się wyłącza ale procesor pracuje. Znowu jak wyżej wyłączyłam go "siłą" no i dzisiaj problem dalej jest ten sam. W systemie brak dźwięku. Jako urządzenie wyjściowe pokazuje "głuche wyjście". Probowałam jakichś porad z internetu ale nic nie zadziałało. Dodatkowo komputer się nie wyłącza tylko tak jak wczoraj cały czas mieli. Natomiast działa "uruchom ponownie".

Po wpisaniu jakiejś komendy z neta wypluło mi "failed to find a working profile" "failed to load module-alsa-card"

Pomuszcie

#linux #informatyka #komputery

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.03.11.md

Diving Into AD CS: Exploring Some Common Error Messages - https://sensepost.com/blog/2025/diving-into-ad-cs-exploring-some-common-error-messages/

China-nexus Kivars Backdoor Uploaded from Taiwan - https://dmpdump.github.io/posts/Kivars/

Havoc: SharePoint with Microsoft Graph API turns into FUD C2 - https://www.fortinet.com/blog/threat-research/havoc-sharepoint-with-microsoft-graph-api-turns-into-fud-c2

360XSS: Mass Website Exploitation via Virtual Tour Framework for SEO Poisoning - https://olegzay.com/360xss/

CRLF injection via TryAddWithoutValidation in .NET - https://binarysecurity.no/posts/2025/01/tryaddwithoutvalidation

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.03.09.md

Streamlining vulnerability research with IDA Pro and Rust - https://security.humanativaspa.it/streamlining-vulnerability-research-with-ida-pro-and-rust/

Reversing the QardioArm - https://n0psn0ps.github.io/2025/02/13/Reversing-the-QardioArm/

Ragnar Loader - https://catalyst.prodaft.com/public/report/ragnar-loader/overview

Debugging SMM with JTAG: Part 1 - https://www.asset-intertech.com/resources/blog/2025/01/debugging-smm-with-jtag/

The Definitive Guide to Linux Process Injection - https://www.akamai.com/blog/security-research/the-definitive-guide-to-linux-process-injection

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.03.07.md

Declawing PUMAKIT - https://www.elastic.co/security-labs/declawing-pumakit

!exploitable Episode Two - Enter the Matrix - https://blog.doyensec.com/2025/03/04/exploitable-sshd.html

Bypassing AMSI and Evading AV Detection with SpecterInsight - https://practicalsecurityanalytics.com/bypassing-amsi-and-evading-av-detection-with-specterinsight/

Hacking the Xbox 360 Hypervisor Part 1: System Overview - https://icode4.coffee/?p=1047

Hybrid Analysis Deep Dive Into Allegedly AI-Generated FunkSec Ransomware - https://hybrid-analysis.blogspot.com/2025/03/hybrid-analysis-deep-dive-into.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.03.05.md

Hacking the Xbox 360 Hypervisor Part 1: System Overview - https://icode4.coffee/?p=1047

Exploring Heap Exploitation Mechanisms: Understanding the House of Force Technique - https://www.darkrelay.com/post/exploring-heap-exploitation-mechanisms-understanding-the-house-of-force-technique

The Pentium contains a complicated circuit to multiply by three - https://www.righto.com/2025/03/pentium-multiplier-adder-reverse-engineered.html

TP-Link Firmware Decryption - https://watchfulip.github.io/28-12-24/tp-link_c210_v2.html

ROPing our way to RCE - https://modzero.com/en/blog/roping-our-way-to-rce/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.03.03.md

A Missed Opportunity: Addressing Weak Password Hashing in VxWorks - https://sec-consult.com/blog/detail/a-missed-opportunity-addressing-weak-password-hashing-in-vxworks/

WMI Malware: The Complete Forensics Guide - https://www.cybertriage.com/blog/wmi-malware/

Reverse-engineering an encrypted IoT protocol - https://smlx.dev/posts/goodwe-sems-protocol-teardown/

Concealing Payloads: Hiding Shellcode in Image Files with Python and C/C++ - https://wafflesexploits.github.io/posts/Hide_a_Payload_in_Plain_Sight_Embedding_Shellcode_in_a_Image_file/

Advanced Initial Access Techniques - https://lorenzomeacci.com/advanced-initial-access-techniques

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.03.01.md

WinVisor – A hypervisor- based emulator for Windows x64 user- mode executables - https://www.elastic.co/security-labs/winvisor-hypervisor-based-emulator

MalDoc in PDF - Detection bypass by embedding a malicious Word file into a PDF file - https://blogs.jpcert.or.jp/en/2023/08/maldocinpdf.html

How We Cracked a 512-Bit DKIM Key for Less Than $8 in the Cloud - https://dmarcchecker.app/articles/crack-512-bit-dkim-rsa-key

Java Dynamic Reverse Engineering and Debugging Tool - https://github.com/roger1337/JDBG

Process Hollowing on Windows 11 24H2 - https://hshrzd.wordpress.com/2025/01/27/process-hollowing-on-windows-11-24h2/

#informatyka

#informatyka #windows #niebait #porada

Ta komenda sprawia że windows wyszukuje brakujące i uszkodzone pliki i naprawia je. Może pomóc z zacinkami systemu, spadkami wydajności i podobnymi problemami.

Link do strony Microsoftu, która wyjaśnia jak to działa.

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.02.27.md

Let’s talk about AI and end-to-end encryption - https://blog.cryptographyengineering.com/2025/01/17/lets-talk-about-ai-and-end-to-end-encryption/

From South America to Southeast Asia: The Fragile Web of REF7707 - https://www.elastic.co/security-labs/fragile-web-ref7707

Fast Real-time Object Detection with High-Res Output - https://github.com/SanshruthR/CCTV_YOLO

SSRF on Sliver C2 teamserver via spoofed implant callback (CVE-2025-27090) - https://blog.chebuya.com/posts/server-side-request-forgery-on-sliver-c2/

Disassembling a binary: linear sweep and recursive traversal - https://nicolo.dev/en/blog/disassembling-binary-linear-recursive/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.02.25.md

NaN Of Your Business - My Favorite Unintended CTF Solution - https://maxwelldulin.com/BlogPost/NaN-Of-Your-Business-My-Favorite-Unintended-CTF-Solution

I Found a Bug in Meta AI That Let Me Upload Explicit Content and Have AI Create More - https://philippeharewood.com/i-found-a-bug-in-meta-ai-that-let-me-upload-explicit-content-and-have-ai-create-more/

The Largest Crypto Heist of All Time - https://vxdb.sh/the-largest-crypto-heist-of-all-time/

Vulnerability Archeology: Stealing Passwords with IBM i Access Client Solutions - https://blog.silentsignal.eu/2025/01/21/ibm-acs-password-dump/

Best practices for key derivation - https://blog.trailofbits.com/2025/01/28/best-practices-for-key-derivation/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.02.23.md

Curious case of AD CS ESC15 vulnerable instance and its manual exploitation - https://www.mannulinux.org/2025/02/Curious-case-of-AD-CS-ESC15-vulnerable-instance-and-its-manual-exploitation.html

Next.js, cache, and chains: the stale elixir - https://zhero-web-sec.github.io/research-and-things/nextjs-cache-and-chains-the-stale-elixir

The Pangu Team—iOS Jailbreak and Vulnerability Research Giant: A Member of i-SOON’s Exploit-Sharing Network - https://nattothoughts.substack.com/p/the-pangu-teamios-jailbreak-and-vulnerability

Dropping a 0 day: Parallels Desktop Repack Root Privilege Escalation - https://jhftss.github.io/Parallels-0-day/

Signals of Trouble: Multiple Russia-Aligned Threat Actors Actively Targeting Signal Messenger - https://cloud.google.com/blog/topics/threat-intelligence/russia-targeting-signal-messenger

#informatyka

Jakby co, mam pół psa na sprzedaż. Dogadamy się!

#podatki #informatyka

https://pro.rp.pl/podatki/art41835271-informatyk-moze-rozliczyc-polowe-psa-w-kosztach-domowej-firmy

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.02.21.md

Investigating Anonymous VPS services used by Ransomware Gangs - https://blog.bushidotoken.net/2025/02/investigating-anonymous-vps-services.html

The Art of Linux Kernel Rootkits - https://inferi.club/post/the-art-of-linux-kernel-rootkits

Go Supply Chain Attack: Malicious Package Exploits Go Module Proxy Caching for Persistence - https://socket.dev/blog/malicious-package-exploits-go-module-proxy-caching-for-persistence

Intro to Embedded RE: UART Discovery and Firmware Extraction via UBoot - https://voidstarsec.com/blog/uart-uboot-and-usb

Analysis of attack activities of Moonstone sleet a division of APT-C-26 (Lazarus) group - https://blu3eye.gitbook.io/malware-insight/moonstone-sleet-trojaned-putty

#informatyka

2 tematy :

1. Jak zabezpieczyć i odzyskać postęp w grach ze Steam żeby móc później to po formacie i zainstalowaniu nowego systemu odaplić i działało?
   

2. Czy Linux Mint to najlepsze distro?
   

#informatyka #linux #steam