Poradnik linux dla początkujących,

Nie jest krótko, ale jest bardzo treściwie, bez zbędnego paplania.

Linux Mint 22 - Wprowadzenie do systemu

https://www.youtube.com/watch?v=KesRJcHMlQY

#linux #informatyka

Ankieta: Która opcja jest lepsza, A czy B?

#ankieta #komputery #informatyka #pcmasterrace #gry

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.17.md

Driving forward in Android drivers - https://googleprojectzero.blogspot.com/2024/06/driving-forward-in-android-drivers.html

Durable Objects (DO) — Unlimited single-threaded servers spread across the world - https://www.lambrospetrou.com/articles/durable-objects-cloudflare/

Making cracked hackers in malaysia - https://zeynarz.github.io/posts/making_cracked_hackers/

CFG in Windows 11 24H2 - https://ynwarcs.github.io/Win11-24H2-CFG

ManageEngine ADAudit - Reverse engineering Windows RPC to find CVEs - part 1 / RPC - https://www.shelltrail.com/research/manageengine-adaudit-reverse-engineering-windows-rpc-to-find-cve-2024-36036-and-cve-2024-36037-part1/

#informatyka

Ciekawostki o tworzeniu windowsów, niecałe 9 minut, jednak dość treściwie.

Opowiada jeden z bardziej cenionych pracowników microsoft Dave Cutler.

Cutler otrzymał prestiżowy status Senior Technical Fellow w Microsoft.

Jak powstał współczesny Windows - opowiada Dave Cutler, twórca Windowsa [PL]

https://www.youtube.com/watch?v=JNV6EQONEqs

#informatyka #komputery #windows #ciekawostki #programowanie

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.15.md

Blackbox-Fuzzing of IoT Devices Using the Router TL-WR902AC as Example - https://tsmr.eu/blackbox-fuzzing.html

TrickDump - Dump lsass without generating a Minidump file - https://ricardojoserf.github.io/trickdump/

From Exploits to Forensics: Unraveling the Unitronics Attack - https://claroty.com/team82/research/from-exploits-to-forensics-unraveling-the-unitronics-attack

What’s in a Name? Writing custom DNS tunnelling protocol, exploiting unexpected AWS Lambda misconfiguration – in a web app Pen test (Part 1) - https://labs.jumpsec.com/whats-in-a-name-writing-custom-dns-tunnelling-protocol-on-the-fly-exploiting-unexpected-aws-lambda-misconfiguration-all-in-a-web-app-pen-test-part-1/

Digital Forensics Guide - https://github.com/mikeroyal/Digital-Forensics-Guide

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.13.md

Dive into PEB Walk in Malware Analysis - https://fareedfauzi.github.io/2024/07/13/PEB-Walk.html

Linux Kernel PWN | 05 ret2dir - https://blog.wohin.me/posts/linux-kernel-pwn-05/

Attacking the Android kernel using the Qualcomm TrustZone - https://tamirzb.com/attacking-android-kernel-using-qualcomm-trustzone

Overview of GLIBC heap exploitation techniques - https://0x434b.dev/overview-of-glibc-heap-exploitation-techniques/

Chaining Three Bugs to Access All Your ServiceNow Data - https://www.assetnote.io/resources/research/chaining-three-bugs-to-access-all-your-servicenow-data

#informatyka

Chcę odinstalować program. Na YouTube jest pokazane żeby wejść w Ustawienia -> Aplikacje -> Odinstaluj. Tylko że to kłamstwo. Bo jak to zrobisz to i tak zostanie sterta pozostałości po aplikacji. A gdzie foldery "AppData" i temu podobne? Gdzie usuwanie pozostałości z rejestru? Gdyby nie znajomość IT to może i bym się na to nabrał. A jak coś zrobić to porządnie a nie po łebkach.

No i M$ mógłby wziąć w końcu za mordę devów żeby ujednolicić ścieżki tak jak to ma miejsce w macOS gdzie doskonale wiadomo gdzie aplikacje zapisują pliki, zawsze w tych samych miejscach...

#programowanie #pcmasterrace #informatyka #komputery

Intel CPU 15gen nadciąga!

Wciąż socket LGA 1700, nie wiadomo jednak czy będzie wsparcie dla DDR4.

Wygląda na to że 15'sta generacja będzie "zdublowana".

Pierwsza kolumna: wygląda to na odświeżenie starszych procesorów.

Core i3 oraz "core" to tak naprawdę alder lake (gen 12), natomiast i5, i7 i i9 to raptor lake (gen 13 i 14).

Tak więc mamy do czynienia z odgrzewanym kotletem odgrzanego kotleta.

Druga kolumna, nowa generacja Bartlett Lake-S, wyłącznie P core, co wielu ucieszy.

źródło:

https://videocardz.com/newz/intel-to-launch-bartlett-s-die-with-12-p-cores-for-lga1700-platform-in-january-2025

#komputery #informatyka #programowanie #pcmasterrace #intel #procesory

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.11.md

CVE-2024-29510 – Exploiting Ghostscript using format strings - https://codeanlabs.com/blog/research/cve-2024-29510-ghostscript-format-string-exploitation/

Deep diving into F5 Secure Vault - https://offsec.almond.consulting/deep-diving-f5-secure-vault.html

Universal Code Execution by Chaining Messages in Browser Extensions - https://spaceraccoon.dev/universal-code-execution-browser-extensions/

Flatlined: Analyzing Pulse Secure Firmware and Bypassing Integrity Checking - https://eclypsium.com/blog/flatlined-analyzing-pulse-secure-firmware-and-bypassing-integrity-checking/

A LibAFL Introductory Workshop - https://www.atredis.com/blog/2023/12/4/a-libafl-introductory-workshop

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.09.md

Abusing RCU callbacks with a Use-After-Free read to defeat KASLR - https://anatomic.rip/abusing_rcu_callbacks_to_defeat_kaslr/

Code Execution in Chromium’s V8 Heap Sandbox - https://anvbis.au/posts/code-execution-in-chromiums-v8-heap-sandbox/

corCTF 2024 - corctf-challenge-dev - https://cor.team/posts/corctf-2024-corctf-challenge-dev/

Decompiling a JPHP Loader with binwalk and cfr - https://forensicitguy.github.io/decompiling-jphp-loader-binwalk-cfr/

Building Tactical Car Hacking Skills - https://www.youtube.com/watch?v=AF8sJti8IGI

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.07.md

Binance Smart Chain Token Bridge Hack - https://swarm.ptsecurity.com/binance-smart-chain-token-bridge-hack/

A Visual Guide to Pointer Analysis with cclyzer++: Part 1 - https://galois.com/blog/2022/08/cclyzer/

prctl anon_vma_name: An Amusing Linux Kernel Heap Spray - https://starlabs.sg/blog/2023/07-prctl-anon_vma_name-an-amusing-heap-spray/

Writing a system call tracer using eBPF - https://sh4dy.com/2024/08/03/beetracer/

Phishing Like a Pro: A Guide for Pentesters to Add SPF, DMARC, DKIM and MX records to Evilginx - https://fortbridge.co.uk/research/add-spf-dmarc-dkim-mx-records-evilginx/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.05.md

[BugTales] A Nerve-Racking Bug Collision in Samsung's NPU Driver https://labs.taszk.io/articles/post/bug_collision_in_samsungs_npu_driver/

SAME70 Emulator https://www.0x01team.com/sw_security/same70-emulator/

Finding the slab cache for each object in Linux kernel using static analysis https://albocoder.github.io/exploitation/linux%20kernel/2024/06/09/KernelStaticAnalysis.html

Thecus NAS Firmware Decryption https://starkeblog.com/cryptography/firmware/2024/06/11/thecus-nas-firmware-decrypt.html

Becoming any Android app via Zygote command injection https://rtx.meta.security/exploitation/2024/06/03/Android-Zygote-injection.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.03.md

SharpHound Detection - https://ipurple.team/2024/07/15/sharphound-detection/

Linux kernel heap feng shui in 2022 - https://duasynt.com/blog/linux-kernel-heap-feng-shui-2022

SRE deep dive into Linux Page Cache - https://biriukov.dev/docs/page-cache/0-linux-page-cache-for-sre/

corCTF 2024: trojan-turtles writeup - https://zolutal.github.io/corctf-trojan-turtles/

Malware and cryptography 31: CAST-128 payload encryption. Simple C example - https://cocomelonc.github.io/malware/2024/07/29/malware-cryptography-31.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.01.md

Attacking Android Binder: Analysis and Exploitation of CVE-2023-20938 https://androidoffsec.withgoogle.com/posts/attacking-android-binder-analysis-and-exploitation-of-cve-2023-20938/

CVE-2019-8805: Apple EndpointSecurity framework Privilege Escalation https://blog.securelayer7.net/applied-endpointsecurity-framework-previlege-escalation/

Co-Egraphs: Streams, Unification, PEGs, Rational Lambdas https://www.philipzucker.com/coegraph/

Iconv, set the charset to RCE: Exploiting the glibc to hack the PHP engine (part 1) https://www.ambionics.io/blog/iconv-cve-2024-2961-p1

Fixing more cheap Altera USB Blaster clones: CPLD adventures https://www.downtowndougbrown.com/2024/07/fixing-more-cheap-altera-usb-blaster-clones-cpld-adventures/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.07.30.md

Abstract interpretation in the Toy Optimizer - https://bernsteinbear.com/blog/toy-abstract-interpretation/

From Zero to Brainfuck in Zig (Part 1) - https://cachecrab.bearblog.dev/from-zero-to-brainfuck-in-zig-1/

The 'Invisibility Cloak' - Slash-Proc Magic - https://dfir.ch/posts/slash-proc/

Anyone can Access Deleted and Private Repository Data on GitHub - https://trufflesecurity.com/blog/anyone-can-access-deleted-and-private-repo-data-github

Exploiting CVE-2024-32002: RCE via git clone - https://amalmurali.me/posts/git-rce/

#informatyka