konik_polanowy

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.17.md

OpenBMC Remote OS Deployment: A Simplified Approach - https://hardenedvault.net/blog/2024-11-17-openbmc-remote-deployment/

Docker Containers vs. Kubernetes Pods - Taking a Deeper Look - https://labs.iximiuz.com/tutorials/containers-vs-pods

From NTAuthCertificates to “Silver” Certificate - https://decoder.cloud/2023/09/05/from-ntauthcertificates-to-silver-certificate/

Windows Sockets: From Registered I/O to SYSTEM Privileges - https://blog.exodusintel.com/2024/12/02/windows-sockets-from-registered-i-o-to-system-privileges/

A "Gau-Hack" from EuskalHack - https://gum3t.xyz/posts/a-gau-hack-from-euskalhack/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.15.md

Call stack spoofing explained using APT41 malware - https://cybergeeks.tech/call-stack-spoofing-explained-using-apt41-malware/

Upcoming hardening in PHP - https://dustri.org/b/upcoming-hardening-in-php.html

Attack Exploiting Legitimate Service by APT-C-60 - https://blogs.jpcert.or.jp/en/2024/12/APT-C-60.html

OpenBMC Remote OS Deployment: A Simplified Approach - https://hardenedvault.net/blog/2024-11-17-openbmc-remote-deployment/

Linux Privilege Escalation - https://tbhaxor.com/linux-privilege-escalation/

#informatyka

1094 + 1 = 1095

Tytuł: Vercellae 101 p.n.e.

Autor: Paweł Rochala

Kategoria: historia

Ocena: 8/10

Takim preludium przed większym okresem najazdów barbarzyńców na Rzym to byli Cymbrowie i Teutoni. Taki wstępniak, powiedzmy. Autor opiera tutaj się na wcześniejszych bitew, którzy Rzymianie przegrali. Na zasadzie sprzeczności i tym, co zrobił Mariusz, żeby zreformować armię i nadać jej odpowiedni kształt. Tutaj nie mam na myśli zmiany taktyki, a wysyłanie małych grup żołnierzy przed swoim obozem, tak żeby zobaczyli jak wróg wygląda. Takie urzeczywistnienie, raz, że powodowało wyparcie fantazji i wywołania paniki to jeszcze pomagało utrzymać dyscyplinę. Zmiany w uzbrojeniu również zaszły, ale już po bitwie z Teutonami, a przed z Cymbrami. Mowa o łamiącym pilum po wbiciu się w tarczę. Oczywiście jest rozbudowane wprowadzenie kim był Mariusz, czy Sula jak i stał się w tym okresie Rzym. Powody, dla których Cymbrowie i Teutoni zaczęli "iść" również znalazły swoje miejsce, podobnie jak wskazówka, że lepiej nie rozdzielać swojej armii niemalże "u wrót" wroga.

Prywatny licznik: 69/200

Wygenerowano za pomocą https://bookmeter.xyz

#bookmeter

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.13.md

Silencing the EDR Silencers - https://www.huntress.com/blog/silencing-the-edr-silencers

Windows Drivers Reverse Engineering Methodology - https://voidsec.com/windows-drivers-reverse-engineering-methodology/

Broken authentication: 7 Advanced ways of bypassing insecure 2-FA implementations - https://blog.intigriti.com/hacking-tools/broken-authentication-7-advanced-ways-of-bypassing-insecure-2-fa-implementations

Bypassing regulatory locks, Faraday cages and upgrading your hearing - https://lagrangepoint.substack.com/p/airpods-hearing-aid-hacking

Increase your stealth capabilities - part 1 - https://sokarepo.github.io/redteam/2024/01/04/increase-your-stealth-capabilities-part1.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.11.md

Disclosure of 7 Android and Google Pixel Vulnerabilities - https://blog.oversecured.com/Disclosure-of-7-Android-and-Google-Pixel-Vulnerabilities/

4.2 Frogstar - https://binary.ninja/2024/11/20/4.2-frogstar.html

Cobalt Strike Postex Kit - https://rastamouse.me/cobalt-strike-postex-kit/

Pinning User-space Pages in the Linux Kernel: Exploring get_user_pages, pin_user_pages, and Page Table Walking - https://blogs.oracle.com/linux/post/pinning-userspace-pages-in-the-linux-kernel

Section Order, MASM, and the .text$mn Subsection - https://wbenny.github.io/2024/12/08/section-order-masm-text-mn-subsection.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.09.md

Breaking Down Multipart Parsers: File upload validation bypass - https://blog.sicuranext.com/breaking-down-multipart-parsers-validation-bypass/

Ghidra nanoMIPS ISA module - https://www.nccgroup.com/us/research-blog/ghidra-nanomips-isa-module/

Unlocking Full Shell Functionality UART RX Mitigation Bypass on TL-WR841N - https://www.iotsrg.org/blog/unlocking-full-shell-functionality-uart-rx-mitigation-bypass-on-tl-wr841n

Game of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions - https://www.trendmicro.com/en_us/research/24/k/earth-estries.html

The capacitor that Apple soldered incorrectly at the factory - https://www.downtowndougbrown.com/2024/11/the-capacitor-that-apple-soldered-incorrectly-at-the-factory/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.07.md

Introduction to Fuzzing Android Native Components - https://blog.convisoappsec.com/en/introduction-to-fuzzing-android-native-components/

The fascinating security model of dark web marketplaces - https://boehs.org/node/dark-web-security

Reviving Exploits Against Cred Structs - Six Byte Cross Cache Overflow to Leakless Data-Oriented Kernel Pwnage -mhttps://www.willsroot.io/2022/08/reviving-exploits-against-cred-struct.html

Modern iOS Pentesting: No Jailbreak Needed - https://dvuln.com/blog/modern-ios-pentesting-no-jailbreak-needed

Fuzzing and Bypassing the AWS WAF - https://sysdig.com/blog/fuzzing-and-bypassing-the-aws-waf/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.05.md

NTLM Relaying – Making the Old New Again - https://labs.jumpsec.com/ntlm-relaying-making-the-old-new-again/

Hiding In PlainSight - Proxying DLL Loads To Hide From ETWTI Stack Tracing - https://0xdarkvortex.dev/proxying-dll-loads-for-hiding-etwti-stack-tracing/

NativeBypassCredGuard - Bypassing Credential Guard in 2024 - https://ricardojoserf.github.io/nativebypasscredguard/

0x00 - Introduction to Windows Kernel Exploitation - https://wetw0rk.github.io/posts/0x00-introduction-to-windows-kernel-exploitation/

Hacking Barcodes for Fun & Profit - https://blog.mantrainfosec.com/blog/16/hacking-barcodes-for-fun-profit

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.03.md

Patch Tuesday Diffing: CVE-2024-20696 - Windows Libarchive RCE - https://clearbluejar.github.io/posts/patch-tuesday-diffing-cve-2024-20696-windows-libarchive-rce/

Bootkitty: Analyzing the first UEFI bootkit for Linux - https://www.welivesecurity.com/en/eset-research/bootkitty-analyzing-first-uefi-bootkit-linux/

From XSS Vulnerability to Full Admin Access - https://haymiz.dev/security/2024/11/25/stored-xss-takeover/

Hacking a Smart Home Device - https://jmswrnr.com/blog/hacking-a-smart-home-device

Tales From The Crypt: Microsoft Unicode Collation Oddities Leading to Software Vulnerabilities - https://pulsesecurity.co.nz/articles/mssql-unicode-collation-bugs

#informatyka

1034 + 1 = 1035

Tytuł: Punkt przełomowy. O małych przyczynach wielkich zmian

Autor: Malcolm Gladwell

Kategoria: socjologia

Ocena: 8/10

Rządzą nami pewne prawidła. Tak jest było i będzie. Możemy spokojnie zarządzać grupą ludzi wynoszącą 150. Jednak dodanie chociaż jednej, sprawia, że zintegrowana grupa rozpada się niczym domek z kart. Podobnie ze zmianami, np. epidemiami, modą na coś, czy masowym zażywaniem narkotyków. Powszechnie sądzi się, że następują one falami w pewnych okresach czasów, gdzie idzie jakoś się przygotować. Tak nie jest. Zmiany te idą szybko. Również kwestia rozwiązania negatywnych skutków nie jest oczywista. Mało kto wpadł na pomysł, żeby ukrócić strzelaniny w nowojorskim metrze poprzez sprawdzanie biletów i ponowne palowanie pociągów, kiedy zostaną opatrzone jakimś graffiti. Kończąc, książka socjologiczna, pisana prostym językiem.

Prywatny licznik: 68/200

Wygenerowano za pomocą https://bookmeter.xyz

#bookmeter

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.01.md

Heap exploitation, glibc internals and nifty tricks - https://blog.quarkslab.com/heap-exploitation-glibc-internals-and-nifty-tricks.html

OtterRoot: Netfilter Universal Root 1-day - https://osec.io/blog/2024-11-25-netfilter-universal-root-1-day

GRUB LUKS Bypass and Dump - https://remyhax.xyz/posts/luks-vm-dump/

badmalloc (CVE-2023-32428) - a macOS LPE - https://gergelykalman.com/badmalloc-CVE-2023-32428-a-macos-lpe.html

The Curious Case of nltest and LmOwfPassword/NtOwfPassword - https://www.jonaslieb.de/blog/nltest-ntowfpassword/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.11.29.md

Spoofing Call Stacks To Confuse EDRs - https://labs.withsecure.com/publications/spoofing-call-stacks-to-confuse-edrs

ShadowHound: A SharpHound Alternative Using Native PowerShell - https://blog.fndsec.net/2024/11/25/shadowhound/

From Exploits to Forensics: Unraveling the Unitronics Attack - https://claroty.com/team82/research/from-exploits-to-forensics-unraveling-the-unitronics-attack

Create your own C2 using Python- Part 1 - https://g3tsyst3m.github.io/c2/python/Create-your-own-C2-using-Python-Part-1/

Salt Typhoon: Churning Up a Storm of Consternation - https://nattothoughts.substack.com/p/salt-typhoon-churning-up-a-storm

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.11.27.md

Reconnaissance: Scanning and DoSing with Scapy - https://en.iguru.gr/reconnaissance-scanning-kai-dosing-scapy/

DFIR Breakdown: Kerberoasting - https://www.cybertriage.com/blog/dfir-breakdown-kerberoasting/

How to Emulate a Ransomware Attack - https://practicalsecurityanalytics.com/how-to-emulate-a-ransomware-attack/

Increase your stealth capabilities - part 1 - https://sokarepo.github.io/redteam/2024/01/04/increase-your-stealth-capabilities-part1.html

Extracting Credentials From Windows Logs - https://practicalsecurityanalytics.com/extracting-credentials-from-windows-logs/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.11.25.md

WebVM 2.0: A complete Linux Desktop Environment in the browser via WebAssembly - https://labs.leaningtech.com/blog/webvm-20

GoMLX: ML in Go without Python - https://eli.thegreenplace.net/2024/gomlx-ml-in-go-without-python/

Obfuscating API Patches to Bypass New Windows Defender Behavior Signatures - https://practicalsecurityanalytics.com/obfuscating-api-patches-to-bypass-new-windows-defender-behavior-signatures/

How To Use MSSQL CLR Assembly To Bypass EDR - https://blog.pyn3rd.com/2024/11/22/How-to-use-MSSQL-CLR-assembly-to-bypass-EDR/

Breaking Down Multipart Parsers: File upload validation bypass - https://blog.sicuranext.com/breaking-down-multipart-parsers-validation-bypass/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.11.23.md

Unpatched Remote Code Execution in Gogs - https://fysac.github.io/posts/2024/11/unpatched-remote-code-execution-in-gogs/

A New Era of macOS Sandbox Escapes: Diving into an Overlooked Attack Surface and Uncovering 10+ New Vulnerabilities - https://jhftss.github.io/A-New-Era-of-macOS-Sandbox-Escapes/

Extracting Plaintext Credentials from Palo Alto Global Protect - https://shells.systems/extracting-plaintext-credentials-from-palo-alto-global-protect/

Helldown Ransomware: an overview of this emerging threat - https://blog.sekoia.io/helldown-ransomware-an-overview-of-this-emerging-threat/

Microsoft Bookings – Facilitating Impersonation - https://www.cyberis.com/article/microsoft-bookings-facilitating-impersonation

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.11.21.md

Hacking Kia: Remotely Controlling Cars With Just a License Plate - https://samcurry.net/hacking-kia

SELinux bypasses - https://klecko.github.io/posts/selinux-bypasses/

One weird trick to get the whole planet to send abuse complaints to your best friend(s) - https://delroth.net/posts/spoofed-mass-scan-abuse/

Parrot Anafi Drone Reverse Engineering - https://www.hardbreak.wiki/network-analysis/protocols/application-layer/proprietary-protocols/parrot-anafi-drone-reverse-engineering

CVE-2024-8956, CVE-2024-8957: How to Steal a 0-Day RCE (With a Little Help from an LLM) - https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.11.19.md

Autonomous Discovery of Critical Zero-Days - https://zeropath.com/blog/0day-discoveries

Inside Intelligence Center: Financially Motivated Chinese Threat Actor SilkSpecter Targeting Black Friday Shoppers - https://blog.eclecticiq.com/inside-intelligence-center-financially-motivated-chinese-threat-actor-silkspecter-targeting-black-friday-shoppers

UAL = Unaligned Activity Logs - https://kqlquery.com/posts/ual/

New Zero-Detection Variant of Melofee Backdoor from Winnti Strikes RHEL 7.9 - https://blog.xlab.qianxin.com/analysis_of_new_melofee_variant_en/

UEVR: An Exploration of Advanced Game Hacking Techniques - https://praydog.com/reverse-engineering/2023/07/03/uevr.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.11.17.md

Uncovering Apple Vulnerabilities: The diskarbitrationd and storagekitd Audit Story Part 1 - https://www.kandji.io/blog/macos-audit-story-part1

The 'Invisibility Cloak' - Slash-Proc Magic https://dfir.ch/posts/slash-proc/

LightSpy: APT41 Deploys Advanced DeepData Framework In Targeted Southern Asia Espionage Campaign - https://blogs.blackberry.com/en/2024/11/lightspy-apt41-deploys-advanced-deepdata-framework-in-targeted-southern-asia-espionage-campaign

Cobalt Strike over external C2 – beacon home in the most obscure ways - https://www.outflank.nl/blog/2017/09/17/blogpost-cobalt-strike-over-external-c2-beacon-home-in-the-most-obscure-ways/

32 vulnerabilities in IBM Security Verify Access - https://pierrekim.github.io/blog/2024-11-01-ibm-security-verify-access-32-vulnerabilities.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.11.15.md

Solving (and Pwning) Flare-On level 10 - https://jro.sg/flareon11/solving10.html

Can't trust any VPN these days - https://blog.orhun.dev/cant-trust-any-vpn/

Cross-Process Spectre Exploitation - https://grsecurity.net/cross_process_spectre_exploitation

EDR Internals for macOS and Linux - https://www.outflank.nl/blog/2024/06/03/edr-internals-macos-linux/

Unlocking Full Shell Functionality UART RX Mitigation Bypass on TL-WR841N - https://www.iotsrg.org/blog/unlocking-full-shell-functionality-uart-rx-mitigation-bypass-on-tl-wr841n

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.11.13.md

Flare-On 11 Write-Up - https://gmo-cybersecurity.com/blog/flare-on-11-write-up/

Multiple Vulnerabilities in the Mazda In-Vehicle Infotainment (IVI) System - https://www.zerodayinitiative.com/blog/2024/11/7/multiple-vulnerabilities-in-the-mazda-in-vehicle-infotainment-ivi-system

Using Nix to Fuzz Test a PDF Parser (Part One) - https://mtlynch.io/nix-fuzz-testing-1/

Beyond RCE: Autonomous Code Execution in Agentic AI - https://www.securityrunners.io/post/beyond-rce-autonomous-code-execution-in-agentic-ai

BlueNoroff Hidden Risk | Threat Actor Targets Macs with Fake Crypto News and Novel Persistence - https://www.sentinelone.com/labs/bluenoroff-hidden-risk-threat-actor-targets-macs-with-fake-crypto-news-and-novel-persistence/

#informatyka