konik_polanowy

710 + 1 = 711

Tytuł: Propaganda. Od dezinformacji i wpływu do operacji i wojny informacyjnej

Autor: Łukasz Olejnik

Kategoria: informatyka, matematyka

Ocena: 7/10

Z tematem propagandy miałem już do czynienia odnośnie twórczości Vladimira Volkoffa. Z tym że to dobra książka, co wprowadzenia i tego, co było w pierwszej połowie XX wieku. Czy jest coś nowego? Zwłaszcza zahaczającego o aktualną wojnę na wschodzie? Jest. Tytułowe składowe są ukazywane z czy to prawnego, czy ekonomicznego punktu widzenia i innych, a następnie przekładane na to co się dzieje dziś. Jak sam autor wspomina, nie jest podręcznik do tropienia dezinformacji, czy innych. Książka ma zadanie uświadomić, co gdzie jak i kiedy.

Prywatny licznik: 48/200

Wygenerowano za pomocą https://bookmeter.xyz

#bookmeter

709 + 1 = 710

Tytuł: Zawichost 1205

Autor: Artur Foryt

Kategoria: historia

Ocena: 7/10

Polska, kiedy to była rozbita na dzielnice to temat skomplikowany. Czy może być coś bardziej zagmatwanego? Zbiór polsko-węgiersko-ruskich sporów o Ruś Halicko-Włodzimierską. Faktem jest, że autor zaczął od początku, czyli od Bolesława Chrobrego a skończył na starciu pod Jarosławiem w 1245 roku. Ot, co. Trzeba czytać od deski do deski z uwagą.

Prywatny licznik: 47/200

#bookmeter

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.19.md

Inside the "3 Billion People" National Public Data Breach - https://www.troyhunt.com/inside-the-3-billion-people-national-public-data-breach/

LibIHT-Background Information - https://blog.thomasonzhao.cn/2024/08/12/LibIHT-Background-Information/

Understanding Delta Lake's consistency model - https://jack-vanlightly.com/analyses/2024/4/29/understanding-delta-lakes-consistency-model

Hardware Hacking 101: Identifying and Dumping eMMC Flash - https://riverloopsecurity.com/blog/2020/03/hw-101-emmc/

Fuzzing scripting languages' interpreters' native functions using AFL++ to find memory corruption and more - https://joshua.hu/aflplusplus-fuzzing-scripting-languages-natively

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.17.md

Driving forward in Android drivers - https://googleprojectzero.blogspot.com/2024/06/driving-forward-in-android-drivers.html

Durable Objects (DO) — Unlimited single-threaded servers spread across the world - https://www.lambrospetrou.com/articles/durable-objects-cloudflare/

Making cracked hackers in malaysia - https://zeynarz.github.io/posts/making_cracked_hackers/

CFG in Windows 11 24H2 - https://ynwarcs.github.io/Win11-24H2-CFG

ManageEngine ADAudit - Reverse engineering Windows RPC to find CVEs - part 1 / RPC - https://www.shelltrail.com/research/manageengine-adaudit-reverse-engineering-windows-rpc-to-find-cve-2024-36036-and-cve-2024-36037-part1/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.15.md

Blackbox-Fuzzing of IoT Devices Using the Router TL-WR902AC as Example - https://tsmr.eu/blackbox-fuzzing.html

TrickDump - Dump lsass without generating a Minidump file - https://ricardojoserf.github.io/trickdump/

From Exploits to Forensics: Unraveling the Unitronics Attack - https://claroty.com/team82/research/from-exploits-to-forensics-unraveling-the-unitronics-attack

What’s in a Name? Writing custom DNS tunnelling protocol, exploiting unexpected AWS Lambda misconfiguration – in a web app Pen test (Part 1) - https://labs.jumpsec.com/whats-in-a-name-writing-custom-dns-tunnelling-protocol-on-the-fly-exploiting-unexpected-aws-lambda-misconfiguration-all-in-a-web-app-pen-test-part-1/

Digital Forensics Guide - https://github.com/mikeroyal/Digital-Forensics-Guide

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.13.md

Dive into PEB Walk in Malware Analysis - https://fareedfauzi.github.io/2024/07/13/PEB-Walk.html

Linux Kernel PWN | 05 ret2dir - https://blog.wohin.me/posts/linux-kernel-pwn-05/

Attacking the Android kernel using the Qualcomm TrustZone - https://tamirzb.com/attacking-android-kernel-using-qualcomm-trustzone

Overview of GLIBC heap exploitation techniques - https://0x434b.dev/overview-of-glibc-heap-exploitation-techniques/

Chaining Three Bugs to Access All Your ServiceNow Data - https://www.assetnote.io/resources/research/chaining-three-bugs-to-access-all-your-servicenow-data

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.11.md

CVE-2024-29510 – Exploiting Ghostscript using format strings - https://codeanlabs.com/blog/research/cve-2024-29510-ghostscript-format-string-exploitation/

Deep diving into F5 Secure Vault - https://offsec.almond.consulting/deep-diving-f5-secure-vault.html

Universal Code Execution by Chaining Messages in Browser Extensions - https://spaceraccoon.dev/universal-code-execution-browser-extensions/

Flatlined: Analyzing Pulse Secure Firmware and Bypassing Integrity Checking - https://eclypsium.com/blog/flatlined-analyzing-pulse-secure-firmware-and-bypassing-integrity-checking/

A LibAFL Introductory Workshop - https://www.atredis.com/blog/2023/12/4/a-libafl-introductory-workshop

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.09.md

Abusing RCU callbacks with a Use-After-Free read to defeat KASLR - https://anatomic.rip/abusing_rcu_callbacks_to_defeat_kaslr/

Code Execution in Chromium’s V8 Heap Sandbox - https://anvbis.au/posts/code-execution-in-chromiums-v8-heap-sandbox/

corCTF 2024 - corctf-challenge-dev - https://cor.team/posts/corctf-2024-corctf-challenge-dev/

Decompiling a JPHP Loader with binwalk and cfr - https://forensicitguy.github.io/decompiling-jphp-loader-binwalk-cfr/

Building Tactical Car Hacking Skills - https://www.youtube.com/watch?v=AF8sJti8IGI

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.07.md

Binance Smart Chain Token Bridge Hack - https://swarm.ptsecurity.com/binance-smart-chain-token-bridge-hack/

A Visual Guide to Pointer Analysis with cclyzer++: Part 1 - https://galois.com/blog/2022/08/cclyzer/

prctl anon_vma_name: An Amusing Linux Kernel Heap Spray - https://starlabs.sg/blog/2023/07-prctl-anon_vma_name-an-amusing-heap-spray/

Writing a system call tracer using eBPF - https://sh4dy.com/2024/08/03/beetracer/

Phishing Like a Pro: A Guide for Pentesters to Add SPF, DMARC, DKIM and MX records to Evilginx - https://fortbridge.co.uk/research/add-spf-dmarc-dkim-mx-records-evilginx/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.05.md

[BugTales] A Nerve-Racking Bug Collision in Samsung's NPU Driver https://labs.taszk.io/articles/post/bug_collision_in_samsungs_npu_driver/

SAME70 Emulator https://www.0x01team.com/sw_security/same70-emulator/

Finding the slab cache for each object in Linux kernel using static analysis https://albocoder.github.io/exploitation/linux%20kernel/2024/06/09/KernelStaticAnalysis.html

Thecus NAS Firmware Decryption https://starkeblog.com/cryptography/firmware/2024/06/11/thecus-nas-firmware-decrypt.html

Becoming any Android app via Zygote command injection https://rtx.meta.security/exploitation/2024/06/03/Android-Zygote-injection.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.03.md

SharpHound Detection - https://ipurple.team/2024/07/15/sharphound-detection/

Linux kernel heap feng shui in 2022 - https://duasynt.com/blog/linux-kernel-heap-feng-shui-2022

SRE deep dive into Linux Page Cache - https://biriukov.dev/docs/page-cache/0-linux-page-cache-for-sre/

corCTF 2024: trojan-turtles writeup - https://zolutal.github.io/corctf-trojan-turtles/

Malware and cryptography 31: CAST-128 payload encryption. Simple C example - https://cocomelonc.github.io/malware/2024/07/29/malware-cryptography-31.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.08.01.md

Attacking Android Binder: Analysis and Exploitation of CVE-2023-20938 https://androidoffsec.withgoogle.com/posts/attacking-android-binder-analysis-and-exploitation-of-cve-2023-20938/

CVE-2019-8805: Apple EndpointSecurity framework Privilege Escalation https://blog.securelayer7.net/applied-endpointsecurity-framework-previlege-escalation/

Co-Egraphs: Streams, Unification, PEGs, Rational Lambdas https://www.philipzucker.com/coegraph/

Iconv, set the charset to RCE: Exploiting the glibc to hack the PHP engine (part 1) https://www.ambionics.io/blog/iconv-cve-2024-2961-p1

Fixing more cheap Altera USB Blaster clones: CPLD adventures https://www.downtowndougbrown.com/2024/07/fixing-more-cheap-altera-usb-blaster-clones-cpld-adventures/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.07.30.md

Abstract interpretation in the Toy Optimizer - https://bernsteinbear.com/blog/toy-abstract-interpretation/

From Zero to Brainfuck in Zig (Part 1) - https://cachecrab.bearblog.dev/from-zero-to-brainfuck-in-zig-1/

The 'Invisibility Cloak' - Slash-Proc Magic - https://dfir.ch/posts/slash-proc/

Anyone can Access Deleted and Private Repository Data on GitHub - https://trufflesecurity.com/blog/anyone-can-access-deleted-and-private-repo-data-github

Exploiting CVE-2024-32002: RCE via git clone - https://amalmurali.me/posts/git-rce/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.07.28.md

Hacking a 2014 tablet... in 2024! - https://blog.r0rt1z2.com/hacking-a-2014-tablet-in-2024.html

Malware and cryptography 30: Khufu payload encryption. Simple C example - https://cocomelonc.github.io/malware/2024/07/21/malware-cryptography-30.html

Iconv, set the charset to RCE: Exploiting the glibc to hack - https://www.ambionics.io/blog/iconv-cve-2024-2961-p1

Check Point - Wrong Check Point (CVE-2024-24919) - https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/

[Cracking Windows Kernel with HEVD] Chapter 0: Where do I start? - https://mdanilor.github.io/posts/hevd-0/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.07.26.md

Malware Transmutation! - Unveiling the Hidden Traces of BloodAlchemy - https://blog-en.itochuci.co.jp/entry/2024/05/23/090000

3 ways to get Remote Code Execution in Kafka UI - https://github.blog/2024-07-22-3-ways-to-get-remote-code-execution-in-kafka-ui/

Exploring GNU extensions in the Linux kernel - https://maskray.me/blog/2024-05-12-exploring-gnu-extensions-in-linux-kernel

Bus Pirate 5: The Swiss ARRRmy Knife of Hardware Hacking - https://eclypsium.com/blog/bus-pirate-5-the-swiss-arrrmy-knife-of-hardware-hacking/

Analysis of CVE-2023-39143 – PaperCut RCE - https://blog.securelayer7.net/analysis-of-papercut-rce/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.07.24.md

Remote Session Enumeration via Undocumented Windows APIs -https://0xv1n.github.io/posts/sessionenumeration/

Code injection on Android without ptrace - https://erfur.dev/blog/dev/code-injection-without-ptrace

Unveiling secrets of the ESP32: creating an open-source MAC Layer - https://zeus.ugent.be/blog/23-24/open-source-esp32-wifi-mac/

Reverse Engineering master0Fnone Class | Episode 1.1: x86 Assembly Demystified - https://www.youtube.com/watch?v=ZXoW5iqbFJE

Resurrecting a dead Dune RTS game - https://wheybags.com/blog/emperor.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.07.22.md

The 'Invisibility Cloak' - Slash-Proc Magic - https://dfir.ch/posts/slash-proc/

Injecting code into PPL processes without vulnerable drivers on Windows 11 - https://blog.slowerzs.net/posts/pplsystem/

Compiler Options Hardening Guide for C and C++ - https://best.openssf.org/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C++.html

Windows Installer, Exploiting Custom Actions - https://blog.doyensec.com/2024/07/18/custom-actions.html

Reverse-Engineering an IP camera - Part 1 - https://dalpix.com/reverse-engineering-ip-camera-part-1

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.07.20.md

CFG in Windows 11 24H2 - https://ynwarcs.github.io/Win11-24H2-CFG

Managed identities overview (Part1) - https://sapirxfed.com/2024/07/13/managed-identity-overview-part1/

SharpHound Detection - https://ipurple.team/2024/07/15/sharphound-detection/

Reading bits in far too many ways (part 1) - https://fgiesen.wordpress.com/2018/02/19/reading-bits-in-far-too-many-ways-part-1/

Emulating inline decryption for triaging C++ malware - https://viuleeenz.github.io/posts/2024/05/emulating-inline-decryption-for-triaging-c-malware/

#informatyka

620 + 1 = 621

Tytuł: Cissp for Dummies

Autor: Lawrence C Miller

Kategoria: informatyka

Liczba stron: 608

Ocena: 7/10

Zdecydowanie lepsza niż oficjalny podręcznik. Raz, że lekka to jeszcze z obrazkowym tłumaczeniem zagadnień. Pisana w 2021 roku.

Prywatny licznik: 46/200

Wygenerowano za pomocą https://bookmeter.xyz

#bookmeter

619 + 1 = 620

Tytuł: (ISC)2 CISSP Certified Information Systems Security Professional Official Study Guide (Sybex Study Guide) 9th Edition

Autor: Mike Chapple, Darril Gibson

Kategoria: informatyka

Liczba stron: 1248

Ocena: 6/10

9 wersja oficjalnego podręcznika do CISSP. Grube na ponad 1000 stron, gdzie ciężko szukać prostych wytłumaczeń. Raczej na pierwszy rzut tak, aby zaznajomić się z tematem.

Prywatny licznik: 45/200

Wygenerowano za pomocą https://bookmeter.xyz

#bookmeter