Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.26.md

A Journey From sudo iptables To Local Privilege Escalation - https://www.shielder.com/blog/2024/09/a-journey-from-sudo-iptables-to-local-privilege-escalation/

Extending Ghidra Part 1: Setting up a Development Environment - https://voidstarsec.com/blog/ghidra-dev-environment

CVE-2022-22265 Samsung npu driver - https://soez.github.io/posts/CVE-2022-22265-Samsung-npu-driver/

Open to Exploitation: The Security Risks of Unauthenticated Pager Networks - https://telescope.ac/petazzoni/kl9ki6zsn62bsb03l694dz

Iconv, set the charset to RCE: Exploiting the glibc to hack the PHP engine (part 1) - https://www.ambionics.io/blog/iconv-cve-2024-2961-p1

#informatyka

Poleci ktoś jakieś książki na temat budowy komputerów? Chodzi mi o rzeczy typu działanie i architektury procesorów, pamięć RAM, może jakieś podstawy asemblera itd.

#informatyka #komputery

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.24.md

Grand Theft Auto – RF Locks Hacking Flipper-Zero Edition Part 1 - https://kevin2600-cmd.github.io/2024/09/07/Grand-Theft-Auto-RF-Locks-Hacking-Flipper-Zero-Edition-Part1.html

Fixing an Elgato HD60 S HDMI capture device with the help of Ghidra - https://www.downtowndougbrown.com/2024/09/fixing-an-elgato-hd60-s-hdmi-capture-device-with-the-help-of-ghidra/

How to Break Out of Hyper-V and Compromise your Admins - https://www.truesec.com/hub/blog/how-to-break-out-of-hyper-v-and-compromise-your-admins

Three-Headed Potato Dog - https://blog.compass-security.com/2024/09/three-headed-potato-dog/

Reversing VMCrack - https://blog.deobfuscate.io/reversing-vmcrack

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.22.md

From Exploits to Forensics: Unraveling the Unitronics Attack - https://claroty.com/team82/research/from-exploits-to-forensics-unraveling-the-unitronics-attack

corCTF 2024: trojan-turtles writeup - https://zolutal.github.io/corctf-trojan-turtles/

Mixing watering hole attacks with history leak via CSS - https://adepts.of0x.cc/css-history-leaks/

At Home In Your Firmware: Analysis of CVE-2024-36877 - https://jjensn.com/at-home-in-your-firmware/

Extracting Credentials From Windows Logs - https://practicalsecurityanalytics.com/extracting-credentials-from-windows-logs/

#informatyka

Ciekawoska

Wiele poleceń linuxowych pozwala ignorować kolejność opcji.

np. ls -l -a = ls -a -la

ale okazuje się, że w find tak nie jest.

i jeżeli zrobisz tak: find -name nazwa_pliku -delete to usuniesz konkretny plik.

A jeżeli zrobisz tak: find -delete -name nazwa_pliku to usuniesz wszystkie pliki z katalogu

#informatyka #linux

Źródło:

https://qr.ae/p2PS6s

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.20.md

ImageIO, the infamous iOS Zero Click Attack Vector - https://r00tkitsmm.github.io/fuzzing/2024/03/29/iOSImageIO.html

Pwn2Own Automotive: CHARX Vulnerability Discovery - https://blog.ret2.io/2024/07/17/pwn2own-auto-2024-charx-bugs/

Exploiting Microsoft Kernel Applocker Driver (CVE-2024-38041) - https://csa.limited/blog/20240916-Exploiting-Microsoft-Kernel-Applocker-Driver.html

How Container Networking Works: a Docker Bridge Network From Scratch - https://labs.iximiuz.com/tutorials/container-networking-from-scratch

Pumping Iron on the Musl Heap – Real World CVE-2022-24834 Exploitation on an Alpine mallocng Heap - https://www.nccgroup.com/us/research-blog/pumping-iron-on-the-musl-heap-real-world-cve-2022-24834-exploitation-on-an-alpine-mallocng-heap/

#informatyka

Jest jakaś różnica między podkręconym RAM przez użytkownika a tak samo wydajnym modelem "z fabryki" o tych samych parametrach?

Wszyscy mówią "jak bierzesz 7800X3D to tylko RAM 6000 MHz CL 30! Nic innego!" Mam 2x16 GB 6000 MHz CL 36, gram w 4K, no i chyba psychologia tłumu działa - kręć te RAMy, kręć na CL 30! ( ͡° ʖ̯ ͡°)

#pcmasterrace #gry #komputery #informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.18.md

From Windows drivers to a almost fully working EDR - https://blog.whiteflag.io/blog/from-windows-drivers-to-a-almost-fully-working-edr/

Remote Session Enumeration via Undocumented Windows APIs - https://0xv1n.github.io/posts/sessionenumeration/

We Spent $20 To Achieve RCE And Accidentally Became The Admins Of .MOBI - https://labs.watchtowr.com/we-spent-20-to-achieve-rce-and-accidentally-became-the-admins-of-mobi/

Using Symbolic Execution to Devirtualise a Virtualised Binary - https://blog.deobfuscate.io/using-symbolic-execution-for-devirtualisation

Entra ID monitoring and alerting - are you doing the basics? - https://securediam.com/f/entra-id-monitoring-and-alerting---are-you-doing-the-basics

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.16.md

Exploring GNU extensions in the Linux kernel - https://maskray.me/blog/2024-05-12-exploring-gnu-extensions-in-linux-kernel

Jump Over Firewall Finding Origin IP - https://ott3rly.com/jump-over-firewall-finding-origin-ip/

Using Symbolic Execution to Devirtualise a Virtualised Binary - https://blog.deobfuscate.io/using-symbolic-execution-for-devirtualisation

Flipping Pages: An analysis of a new Linux vulnerability in nf_tables and hardened exploitation techniques - https://pwning.tech/nftables/

Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server! - https://blog.orange.tw/posts/2024-08-confusion-attacks-en/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.14.md

C++ Unwind Exception Metadata: A Hidden Reverse Engineering Bonanza - https://www.msreverseengineering.com/blog/2024/8/20/c-unwind-metadata-1

Hacking a 2014 tablet... in 2024! - https://blog.r0rt1z2.com/hacking-a-2014-tablet-in-2024.html

Rundll32.exe bomb - https://www.hexacorn.com/blog/2024/09/11/rundll32-exe-bomb/

Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources - https://www.aquasec.com/blog/bucket-monopoly-breaching-aws-accounts-through-shadow-resources/

Unauthenticated remote code execution on BYOB via arbitrary file write+command injection - https://blog.chebuya.com/posts/unauthenticated-remote-command-execution-on-byob/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.12.md

SSH Keystroke Obfuscation Bypass - https://crzphil.github.io/posts/ssh-obfuscation-bypass/

Introduction to Android Bytecode Exploitation (Part 1) - https://lolcads.github.io/posts/2024/09/bytecode_exploitation_0/

ROPing Routers from scratch: Step-by-step Tenda Ac8v4 Mips 0day Flow-control ROP -> RCE - https://0reg.dev/blog/tenda-ac8-rop

Linux Kernel Exploitation - Environment - https://scoding.de/linux-kernel-exploitation-environment

Getting code execution on Veeam through CVE-2023-27532 - https://blog.scrt.ch/2024/09/10/getting-code-execution-on-veeam-through-cve-2023-27532/

#informatyka

Zgłaszanie do CERT nic nie daje

Vol 2137

#wiadomoscipolska #polska #informatyka #beninscam

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.10.md

Bypass CSP Using WordPress By Abusing Same Origin Method Execution - https://octagon.net/blog/2022/05/29/bypass-csp-using-wordpress-by-abusing-same-origin-method-execution/

Designing Data Intensive Applications (DDIA) Book - https://muratbuffalo.blogspot.com/2024/08/designing-data-intensive-applications.html

A Practical Approach To Attacking IoT Embedded Designs (I) - https://labs.ioactive.com/2021/02/a-practical-approach-to-attacking-iot.html

PhysMem(e): When Kernel Drivers Peek into Memory CVE-2024-41498 - https://blog.reveng.ai/physmem-e-when-kernel-drivers-peek-into-memory/

Streaming vulnerabilities from Windows Kernel - Proxying to Kernel - Part I - https://devco.re/blog/2024/08/23/streaming-vulnerabilities-from-windows-kernel-proxying-to-kernel-part1-en/

#informatyka

pytanie informatyka ktoś poleci gdzie na allegro zdobyć win 10 pro 64 multi/engl ??

+ info ktoś robił upgrade na laptopie z preinstalowanym 10home ?

#informatyka #programowanie #programista15k

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.08.md

Cobalt Strike - CDN / Reverse Proxy Setup - https://redops.at/en/blog/cobalt-strike-cdn-reverse-proxy-setup

Writing a system call tracer using eBPF - https://sh4dy.com/2024/08/03/beetracer/

LoadLibrary Reloaded: Modification for loading executable files from memory - https://injectexp.dev/b/LoadLibraryReloaded

CVE-2020-27786 ( Race Condition + Use-After-Free ) - https://ii4gsp.github.io/cve-2020-27786/

Upgrading a Toshiba NAS HDD firmware on Linux - https://syscall.eu/blog/2024/08/28/toshiba_hdd_firmware/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.06.md

Vtiger CRM (<= 8.1.0) SQL Injection in MailManager module - https://www.shielder.com/advisories/vtiger-mailmanager-sqli/

Overview of GLIBC heap exploitation techniques - https://0x434b.dev/overview-of-glibc-heap-exploitation-techniques/

Peeling Back the Layers of an Onion - Syscalls & ASM - https://n0psn0ps.github.io/2024/08/31/Peeling-Back-the-Layers/

Breaking Down Barriers: Exploiting Pre-Auth SQL Injection in WhatsUp Gold CVE-2024-6670 - https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/

WiFi auth with OsmoHLR/SIM cards - https://kittenlabs.de/blog/2024/08/31/wifi-auth-with-osmohlr/sim-cards/

#informatyka

Potrzebuję zrobić nieskomplikowaną stronę www dla jednej ze spółek pro bono dla których świadczę support it dorywczo.

Dyrektor poprosił bym mu to ogarnął oczywiście nie za darmo.

Na stronie ma być kilka zdjęć i opis co i jak działają wraz ze statutem.

Domena i serwer mają na ovh, czy ktoś z Was podjąłby sie takiego mikrozlecenia?

#it #stronywww #programowanie #informatyka