Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.22.md

From Exploits to Forensics: Unraveling the Unitronics Attack - https://claroty.com/team82/research/from-exploits-to-forensics-unraveling-the-unitronics-attack

corCTF 2024: trojan-turtles writeup - https://zolutal.github.io/corctf-trojan-turtles/

Mixing watering hole attacks with history leak via CSS - https://adepts.of0x.cc/css-history-leaks/

At Home In Your Firmware: Analysis of CVE-2024-36877 - https://jjensn.com/at-home-in-your-firmware/

Extracting Credentials From Windows Logs - https://practicalsecurityanalytics.com/extracting-credentials-from-windows-logs/

#informatyka

Ciekawoska

Wiele poleceń linuxowych pozwala ignorować kolejność opcji.

np. ls -l -a = ls -a -la

ale okazuje się, że w find tak nie jest.

i jeżeli zrobisz tak: find -name nazwa_pliku -delete to usuniesz konkretny plik.

A jeżeli zrobisz tak: find -delete -name nazwa_pliku to usuniesz wszystkie pliki z katalogu

#informatyka #linux

Źródło:

https://qr.ae/p2PS6s

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.20.md

ImageIO, the infamous iOS Zero Click Attack Vector - https://r00tkitsmm.github.io/fuzzing/2024/03/29/iOSImageIO.html

Pwn2Own Automotive: CHARX Vulnerability Discovery - https://blog.ret2.io/2024/07/17/pwn2own-auto-2024-charx-bugs/

Exploiting Microsoft Kernel Applocker Driver (CVE-2024-38041) - https://csa.limited/blog/20240916-Exploiting-Microsoft-Kernel-Applocker-Driver.html

How Container Networking Works: a Docker Bridge Network From Scratch - https://labs.iximiuz.com/tutorials/container-networking-from-scratch

Pumping Iron on the Musl Heap – Real World CVE-2022-24834 Exploitation on an Alpine mallocng Heap - https://www.nccgroup.com/us/research-blog/pumping-iron-on-the-musl-heap-real-world-cve-2022-24834-exploitation-on-an-alpine-mallocng-heap/

#informatyka

Jest jakaś różnica między podkręconym RAM przez użytkownika a tak samo wydajnym modelem "z fabryki" o tych samych parametrach?

Wszyscy mówią "jak bierzesz 7800X3D to tylko RAM 6000 MHz CL 30! Nic innego!" Mam 2x16 GB 6000 MHz CL 36, gram w 4K, no i chyba psychologia tłumu działa - kręć te RAMy, kręć na CL 30! ( ͡° ʖ̯ ͡°)

#pcmasterrace #gry #komputery #informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.18.md

From Windows drivers to a almost fully working EDR - https://blog.whiteflag.io/blog/from-windows-drivers-to-a-almost-fully-working-edr/

Remote Session Enumeration via Undocumented Windows APIs - https://0xv1n.github.io/posts/sessionenumeration/

We Spent $20 To Achieve RCE And Accidentally Became The Admins Of .MOBI - https://labs.watchtowr.com/we-spent-20-to-achieve-rce-and-accidentally-became-the-admins-of-mobi/

Using Symbolic Execution to Devirtualise a Virtualised Binary - https://blog.deobfuscate.io/using-symbolic-execution-for-devirtualisation

Entra ID monitoring and alerting - are you doing the basics? - https://securediam.com/f/entra-id-monitoring-and-alerting---are-you-doing-the-basics

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.16.md

Exploring GNU extensions in the Linux kernel - https://maskray.me/blog/2024-05-12-exploring-gnu-extensions-in-linux-kernel

Jump Over Firewall Finding Origin IP - https://ott3rly.com/jump-over-firewall-finding-origin-ip/

Using Symbolic Execution to Devirtualise a Virtualised Binary - https://blog.deobfuscate.io/using-symbolic-execution-for-devirtualisation

Flipping Pages: An analysis of a new Linux vulnerability in nf_tables and hardened exploitation techniques - https://pwning.tech/nftables/

Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server! - https://blog.orange.tw/posts/2024-08-confusion-attacks-en/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.14.md

C++ Unwind Exception Metadata: A Hidden Reverse Engineering Bonanza - https://www.msreverseengineering.com/blog/2024/8/20/c-unwind-metadata-1

Hacking a 2014 tablet... in 2024! - https://blog.r0rt1z2.com/hacking-a-2014-tablet-in-2024.html

Rundll32.exe bomb - https://www.hexacorn.com/blog/2024/09/11/rundll32-exe-bomb/

Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources - https://www.aquasec.com/blog/bucket-monopoly-breaching-aws-accounts-through-shadow-resources/

Unauthenticated remote code execution on BYOB via arbitrary file write+command injection - https://blog.chebuya.com/posts/unauthenticated-remote-command-execution-on-byob/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.12.md

SSH Keystroke Obfuscation Bypass - https://crzphil.github.io/posts/ssh-obfuscation-bypass/

Introduction to Android Bytecode Exploitation (Part 1) - https://lolcads.github.io/posts/2024/09/bytecode_exploitation_0/

ROPing Routers from scratch: Step-by-step Tenda Ac8v4 Mips 0day Flow-control ROP -> RCE - https://0reg.dev/blog/tenda-ac8-rop

Linux Kernel Exploitation - Environment - https://scoding.de/linux-kernel-exploitation-environment

Getting code execution on Veeam through CVE-2023-27532 - https://blog.scrt.ch/2024/09/10/getting-code-execution-on-veeam-through-cve-2023-27532/

#informatyka

Zgłaszanie do CERT nic nie daje

Vol 2137

#wiadomoscipolska #polska #informatyka #beninscam

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.10.md

Bypass CSP Using WordPress By Abusing Same Origin Method Execution - https://octagon.net/blog/2022/05/29/bypass-csp-using-wordpress-by-abusing-same-origin-method-execution/

Designing Data Intensive Applications (DDIA) Book - https://muratbuffalo.blogspot.com/2024/08/designing-data-intensive-applications.html

A Practical Approach To Attacking IoT Embedded Designs (I) - https://labs.ioactive.com/2021/02/a-practical-approach-to-attacking-iot.html

PhysMem(e): When Kernel Drivers Peek into Memory CVE-2024-41498 - https://blog.reveng.ai/physmem-e-when-kernel-drivers-peek-into-memory/

Streaming vulnerabilities from Windows Kernel - Proxying to Kernel - Part I - https://devco.re/blog/2024/08/23/streaming-vulnerabilities-from-windows-kernel-proxying-to-kernel-part1-en/

#informatyka

pytanie informatyka ktoś poleci gdzie na allegro zdobyć win 10 pro 64 multi/engl ??

+ info ktoś robił upgrade na laptopie z preinstalowanym 10home ?

#informatyka #programowanie #programista15k

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.08.md

Cobalt Strike - CDN / Reverse Proxy Setup - https://redops.at/en/blog/cobalt-strike-cdn-reverse-proxy-setup

Writing a system call tracer using eBPF - https://sh4dy.com/2024/08/03/beetracer/

LoadLibrary Reloaded: Modification for loading executable files from memory - https://injectexp.dev/b/LoadLibraryReloaded

CVE-2020-27786 ( Race Condition + Use-After-Free ) - https://ii4gsp.github.io/cve-2020-27786/

Upgrading a Toshiba NAS HDD firmware on Linux - https://syscall.eu/blog/2024/08/28/toshiba_hdd_firmware/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.06.md

Vtiger CRM (<= 8.1.0) SQL Injection in MailManager module - https://www.shielder.com/advisories/vtiger-mailmanager-sqli/

Overview of GLIBC heap exploitation techniques - https://0x434b.dev/overview-of-glibc-heap-exploitation-techniques/

Peeling Back the Layers of an Onion - Syscalls & ASM - https://n0psn0ps.github.io/2024/08/31/Peeling-Back-the-Layers/

Breaking Down Barriers: Exploiting Pre-Auth SQL Injection in WhatsUp Gold CVE-2024-6670 - https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/

WiFi auth with OsmoHLR/SIM cards - https://kittenlabs.de/blog/2024/08/31/wifi-auth-with-osmohlr/sim-cards/

#informatyka

Potrzebuję zrobić nieskomplikowaną stronę www dla jednej ze spółek pro bono dla których świadczę support it dorywczo.

Dyrektor poprosił bym mu to ogarnął oczywiście nie za darmo.

Na stronie ma być kilka zdjęć i opis co i jak działają wraz ze statutem.

Domena i serwer mają na ovh, czy ktoś z Was podjąłby sie takiego mikrozlecenia?

#it #stronywww #programowanie #informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.04.md

An Introduction to Chrome Exploitation - Maglev Edition - https://www.matteomalvica.com/blog/2024/06/05/intro-v8-exploitation-maglev/

Process injection: breaking all macOS security layers with a single vulnerability - https://sector7.computest.nl/post/2022-08-process-injection-breaking-all-macos-security-layers-with-a-single-vulnerability/

The Wild West of Proof of Concept Exploit Code (PoC) - https://santandersecurityresearch.github.io/blog/sshing_the_masses.html

4 exploits, 1 bug: exploiting cve-2024-20017 4 different ways - https://blog.coffinsec.com/0day/2024/08/30/exploiting-CVE-2024-20017-four-different-ways.html

Exploiting Enterprise Backup Software For Privilege Escalation: Part One - https://northwave-cybersecurity.com/exploiting-enterprise-backup-software-for-privilege-escalation-part-one

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.02.md

Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws - https://memorycorruption.net/posts/rce-lua-factorio/

Pwning a Brother labelmaker, for fun and interop! - https://sdomi.pl/weblog/20-pwning-a-labelmaker/

SAME70 Emulator - https://www.0x01team.com/sw_security/same70-emulator/

CVE-2021-4440: A Linux CNA Case Study - https://www.hudsonrivertrading.com/hrtbeat/optimising-compiler-performance-a-case-for-devirtualisation/

ipcz TOCTOU Vulnerability - https://binarygecko.com/skys-the-limit-quick-analysis-and-exploitation-of-a-chrome-ipcz-toctou-vulnerability/

#informatyka