Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.16.md

Exploring GNU extensions in the Linux kernel - https://maskray.me/blog/2024-05-12-exploring-gnu-extensions-in-linux-kernel

Jump Over Firewall Finding Origin IP - https://ott3rly.com/jump-over-firewall-finding-origin-ip/

Using Symbolic Execution to Devirtualise a Virtualised Binary - https://blog.deobfuscate.io/using-symbolic-execution-for-devirtualisation

Flipping Pages: An analysis of a new Linux vulnerability in nf_tables and hardened exploitation techniques - https://pwning.tech/nftables/

Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server! - https://blog.orange.tw/posts/2024-08-confusion-attacks-en/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.14.md

C++ Unwind Exception Metadata: A Hidden Reverse Engineering Bonanza - https://www.msreverseengineering.com/blog/2024/8/20/c-unwind-metadata-1

Hacking a 2014 tablet... in 2024! - https://blog.r0rt1z2.com/hacking-a-2014-tablet-in-2024.html

Rundll32.exe bomb - https://www.hexacorn.com/blog/2024/09/11/rundll32-exe-bomb/

Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources - https://www.aquasec.com/blog/bucket-monopoly-breaching-aws-accounts-through-shadow-resources/

Unauthenticated remote code execution on BYOB via arbitrary file write+command injection - https://blog.chebuya.com/posts/unauthenticated-remote-command-execution-on-byob/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.12.md

SSH Keystroke Obfuscation Bypass - https://crzphil.github.io/posts/ssh-obfuscation-bypass/

Introduction to Android Bytecode Exploitation (Part 1) - https://lolcads.github.io/posts/2024/09/bytecode_exploitation_0/

ROPing Routers from scratch: Step-by-step Tenda Ac8v4 Mips 0day Flow-control ROP -> RCE - https://0reg.dev/blog/tenda-ac8-rop

Linux Kernel Exploitation - Environment - https://scoding.de/linux-kernel-exploitation-environment

Getting code execution on Veeam through CVE-2023-27532 - https://blog.scrt.ch/2024/09/10/getting-code-execution-on-veeam-through-cve-2023-27532/

#informatyka

Zgłaszanie do CERT nic nie daje

Vol 2137

#wiadomoscipolska #polska #informatyka #beninscam

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.10.md

Bypass CSP Using WordPress By Abusing Same Origin Method Execution - https://octagon.net/blog/2022/05/29/bypass-csp-using-wordpress-by-abusing-same-origin-method-execution/

Designing Data Intensive Applications (DDIA) Book - https://muratbuffalo.blogspot.com/2024/08/designing-data-intensive-applications.html

A Practical Approach To Attacking IoT Embedded Designs (I) - https://labs.ioactive.com/2021/02/a-practical-approach-to-attacking-iot.html

PhysMem(e): When Kernel Drivers Peek into Memory CVE-2024-41498 - https://blog.reveng.ai/physmem-e-when-kernel-drivers-peek-into-memory/

Streaming vulnerabilities from Windows Kernel - Proxying to Kernel - Part I - https://devco.re/blog/2024/08/23/streaming-vulnerabilities-from-windows-kernel-proxying-to-kernel-part1-en/

#informatyka

pytanie informatyka ktoś poleci gdzie na allegro zdobyć win 10 pro 64 multi/engl ??

+ info ktoś robił upgrade na laptopie z preinstalowanym 10home ?

#informatyka #programowanie #programista15k

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.08.md

Cobalt Strike - CDN / Reverse Proxy Setup - https://redops.at/en/blog/cobalt-strike-cdn-reverse-proxy-setup

Writing a system call tracer using eBPF - https://sh4dy.com/2024/08/03/beetracer/

LoadLibrary Reloaded: Modification for loading executable files from memory - https://injectexp.dev/b/LoadLibraryReloaded

CVE-2020-27786 ( Race Condition + Use-After-Free ) - https://ii4gsp.github.io/cve-2020-27786/

Upgrading a Toshiba NAS HDD firmware on Linux - https://syscall.eu/blog/2024/08/28/toshiba_hdd_firmware/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.06.md

Vtiger CRM (<= 8.1.0) SQL Injection in MailManager module - https://www.shielder.com/advisories/vtiger-mailmanager-sqli/

Overview of GLIBC heap exploitation techniques - https://0x434b.dev/overview-of-glibc-heap-exploitation-techniques/

Peeling Back the Layers of an Onion - Syscalls & ASM - https://n0psn0ps.github.io/2024/08/31/Peeling-Back-the-Layers/

Breaking Down Barriers: Exploiting Pre-Auth SQL Injection in WhatsUp Gold CVE-2024-6670 - https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/

WiFi auth with OsmoHLR/SIM cards - https://kittenlabs.de/blog/2024/08/31/wifi-auth-with-osmohlr/sim-cards/

#informatyka

Potrzebuję zrobić nieskomplikowaną stronę www dla jednej ze spółek pro bono dla których świadczę support it dorywczo.

Dyrektor poprosił bym mu to ogarnął oczywiście nie za darmo.

Na stronie ma być kilka zdjęć i opis co i jak działają wraz ze statutem.

Domena i serwer mają na ovh, czy ktoś z Was podjąłby sie takiego mikrozlecenia?

#it #stronywww #programowanie #informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.04.md

An Introduction to Chrome Exploitation - Maglev Edition - https://www.matteomalvica.com/blog/2024/06/05/intro-v8-exploitation-maglev/

Process injection: breaking all macOS security layers with a single vulnerability - https://sector7.computest.nl/post/2022-08-process-injection-breaking-all-macos-security-layers-with-a-single-vulnerability/

The Wild West of Proof of Concept Exploit Code (PoC) - https://santandersecurityresearch.github.io/blog/sshing_the_masses.html

4 exploits, 1 bug: exploiting cve-2024-20017 4 different ways - https://blog.coffinsec.com/0day/2024/08/30/exploiting-CVE-2024-20017-four-different-ways.html

Exploiting Enterprise Backup Software For Privilege Escalation: Part One - https://northwave-cybersecurity.com/exploiting-enterprise-backup-software-for-privilege-escalation-part-one

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.09.02.md

Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws - https://memorycorruption.net/posts/rce-lua-factorio/

Pwning a Brother labelmaker, for fun and interop! - https://sdomi.pl/weblog/20-pwning-a-labelmaker/

SAME70 Emulator - https://www.0x01team.com/sw_security/same70-emulator/

CVE-2021-4440: A Linux CNA Case Study - https://www.hudsonrivertrading.com/hrtbeat/optimising-compiler-performance-a-case-for-devirtualisation/

ipcz TOCTOU Vulnerability - https://binarygecko.com/skys-the-limit-quick-analysis-and-exploitation-of-a-chrome-ipcz-toctou-vulnerability/

#informatyka

https://www.youtube.com/watch?v=LLj-nDop5pc #informatyka #naprawy #komputery #pcmasterrace #technologia

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.31.md

GNU/Linux Sandboxing - A Brief Review - https://hardenedlinux.org/blog/2024-08-20-gnu/linux-sandboxing-a-brief-review/

WordPress GiveWP POP to RCE (CVE-2024-5932) - https://www.rcesecurity.com/2024/08/wordpress-givewp-pop-to-rce-cve-2024-5932/

Abusing RCU callbacks with a Use-After-Free read to defeat KASLR - https://anatomic.rip/abusing_rcu_callbacks_to_defeat_kaslr/

Creating Kernel Object Type (Part 1) - https://scorpiosoftware.net/2024/08/25/creating-kernel-object-type-part-1/

NO_WILDCARD: How I discovered the Organization ID of any AWS Account - https://tracebit.com/blog/no-wildcard-how-i-discovered-the-organization-id-of-any-aws-account

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.29.md

Streaming vulnerabilities from Windows Kernel - Proxying to Kernel - Part I - https://devco.re/blog/2024/08/23/streaming-vulnerabilities-from-windows-kernel-proxying-to-kernel-part1-en/

Threat Hunting Case Study: Tracking Down GootLoader - https://intel471.com/blog/threat-hunting-case-study-tracking-down-gootloader

Canary in the Kernel Mine: Exploiting and Defending Against Same-Type Object Reuse - https://grsecurity.net/exploiting_and_defending_against_same_type_object_reuse

Unveiling Mac Security: A Comprehensive Exploration of Sandboxing and AppData TCC - https://imlzq.com/apple/macos/2024/08/24/Unveiling-Mac-Security-A-Comprehensive-Exploration-of-TCC-Sandboxing-and-App-Data-TCC.html

How to Build a Switch Mode Power Supply - https://www.circuitbasics.com/what-is-a-switch-mode-power-supply/#google_vignette

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.27.md

Exploiting Steam: Usual and Unusual Ways in the CEF Framework - https://www.darknavy.org/blog/exploiting_steam_usual_and_unusual_ways_in_the_cef_framework/

Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources - https://www.aquasec.com/blog/bucket-monopoly-breaching-aws-accounts-through-shadow-resources/

CVE-2024-41660: A Critical Vulnerability in OpenBMC - https://tetrelsec.com/posts/cve-2024-41660-slpd-lite/

OpenSSH Backdoors - https://blog.isosceles.com/openssh-backdoors/

Code injection on Android without ptrace - https://erfur.dev/blog/dev/code-injection-without-ptrace

#informatyka

Co to znowu jest?! U Was tak samo "podświetla" w Chrome? Co najadę myszką na link to mi podświetla na niebiesko... wczoraj tego chyba nie było, czyżby Google wprowadziło kolejny "feature"?

#informatyka #komputery #gownowpis