konik_polanowy

617 + 1 = 618

Tytuł: Sztuka wojenna w średniowieczu, t. III

Autor: Charles Oman

Kategoria: historia

Ocena: 7/10

Tom III. Zdecydowanie najlepszy niż pozostałe części. Jest bitwa po Crécy, czy Poitiers, angielskie łuki, najazdy Mongołów, pierwsze armaty, wojny husyckie i o dziwo, jesteśmy też my. Tylko w dość negatywnym stopniu, bo nie mieliśmy dość zamków porządnie obwarowanych zamków. Generalnie to książka pisana z okresu międzywojennego i nastawieniem pro anglosaskim.

Wygenerowano za pomocą https://bookmeter.xyz

#bookmeter

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.07.18.md

Supply-Chain Attacks in LLMs: From GGUF model format metadata RCE, to State-of-The-Art NLP Project RCEs https://0reg.dev/blog/from-gguf-model-format-metadata-rce-to-state-of-the-art-nlp-project-rces

How to install NetHunter on TicWatch Pro https://www.mobile-hacker.com/2024/07/15/how-to-install-nethunter-on-ticwatch-pro/

Malware Analysis Writeup | Amadey + Custom Dropper's with Redline Stealer with Net Reactor on shellcode's and mutant Avkiller English https://keowu.re/posts/Malware-Analysis-Writeup-Amadey-+-Custom-Dropper's-with-Redline-Stealer-with-Net-Reactor-on-shellcode's-and-mutant-Avkiller-English/

This Meeting Should Have Been an Email https://objective-see.org/blog/blog_0x7A.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.07.16.md

Fuzzing embedded systems - Part 1, Introduction - https://blog.sparrrgh.me/fuzzing/embedded/2024/06/05/fuzzing-embedded-systems-1.html

Getting Started with Exploit Development - https://dayzerosec.com/blog/2024/07/11/getting-started-2024.html

Return of the JIT - https://lampreylabs.com/posts/return-of-the-jit/

Pwntools 101 - Pwndbg & Buffer Overflows -  https://www.archcloudlabs.com/projects/pwntools-bof/

Hardware Hacking with a Raspberry Pi - Configuring the PiFex - https://voidstarsec.com/blog/pifex-config

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.07.14.md

Next.js and cache poisoning: a quest for the black hole - https://zhero-web-sec.github.io/research-and-things/nextjs-and-cache-poisoning-a-quest-for-the-black-hole

Bypassing 2FA with phishing and OTP bots - https://securelist.com/2fa-phishing/112805/

hCyRC analysis: CVE-2020-7958 biometric data extraction in Android devices - https://www.synopsys.com/blogs/software-security/cve-2020-7958-trustlet-tee-attack.html

MHL No Escape Solution - https://n0psn0ps.github.io/2024/07/03/MHL-No-Escape-Solution/

VBA: overwriting R/W/X memory in a reliable way - https://adepts.of0x.cc/vba-rwx-addendum/

#informatyka

605 + 1 = 606

Tytuł: Fallen Timbers 1794

Autor: Jarosław Wojtczak

Kategoria: historia

Ocena: 9/10

Wojna Amerykanów z Indianami była długa, wyboista i nawet po rozstrzygającej "bitwie" taka oczywista. Aby zrozumieć, o co chodzi w cudzysłowie, trzeba wiedzieć o dwóch amerykańskich kampaniach, które raz, że nie były nieprzygotowane należycie, co zakończyły się klęską i wielkimi stratami. Co gorsza, Indianie nabrali pewności i przekonania, że poradzą sobie z nie tylko z osadnikami jak i wojskiem, które przyjdzie im na pomoc. Dlatego trzecia kampania została powierzona generałowi Anthony Wayne, przystąpił do intensywnego szkolenia i wprowadzenia żelaznej dyscypliny. Taktyka została również całkowicie zmieniona. Wyprawiano się w głąb indiańskiego terytorium, a następnie budowano fort i załogą. Po prawie półtora roku takiego działania miała miejsce tytułowa bitwa. Tutaj tez Amerykanie wzięli na przeczekanie Indian po wykryciu ich pozycji. Krótki, ale intensywny bój zakończył się stratami i stornie Indian i śmiercią kilku wodzów. Skutki były gdzie indziej. W psychice. Brytyjczycy nie przyszli na pomoc Indianom, ci poczuli się zdradzeni. Cała wypracowana wcześniej pewność siebie, ulotniła się gdzieś.

Prywatny licznik: 43/200

Wygenerowano za pomocą https://bookmeter.xyz

#bookmeter

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.07.12.md

WhatsUp Gold Pre-Auth RCE GetFileWithoutZip Primitive CVE-2024-4885 - https://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/

Universal Code Execution by Chaining Messages in Browser Extensions - https://spaceraccoon.dev/universal-code-execution-browser-extensions//www.huntandhackett.com/blog/how-to-achieve-eternal-persistence

Reverse Engineering Protobuf Definitions From Compiled Binaries - https://arkadiyt.com/2024/03/03/reverse-engineering-protobuf-definitiions-from-compiled-binaries/

Digit Recognition with Rust and WASM - Part 1 - https://vaktibabat.github.io/posts/Rust_WASM_Digit_Recognition_1/

RISC-V Emulator for Sophgo SG2000 SoC (Pine64 Oz64 / Milk-V Duo S) - https://lupyuen.codeberg.page/articles/sg2000b.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.07.10.md

How the Nintendo Switch booting process was hacked http- s://blog.gistre.epita.fr/posts/victor-emmanuel.provost-2023-09-25-how_the_switch_was_hacked/

GitHub Copilot Chat: From Prompt Injection to Data Exfiltration - https://embracethered.com/blog/posts/2024/github-copilot-chat-prompt-injection-data-exfiltration/

Bypassing Okta’s Passwordless MFA: Technical Analysis and Detection - https://www.rezonate.io/blog/bypassing-oktas-passwordless-mfa-technical-analysis-and-detection/

Azure Attack Paths - https://cloudbrothers.info/en/azure-attack-paths/

Reverse Engineering a Restaurant Pager system - https://k3xec.com/td158/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.07.08.md

Ghidra nanoMIPS ISA module - https://research.nccgroup.com/2024/05/07/ghidra-nanomips-isa-module/

Raising Beacons without UDRLs and Teaching them How to Sleep - https://naksyn.com/cobalt%20strike/2024/07/02/raising-beacons-without-UDRLs-teaching-how-to-sleep.html

CVE-2024-29510 – Exploiting Ghostscript using format strings - https://codeanlabs.com/blog/research/cve-2024-29510-ghostscript-format-string-exploitation/

A Short Tale of Sysctl - https://n0psn0ps.github.io/2024/06/27/A-Short-Tale-of-Sysctl/

Finding memory bugs in random github projects Num. 1: codyebberson/vm  - https://numb3rs.re/posts/popping_shells_1/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.07.06.md

Project Naptime: Evaluating Offensive Security Capabilities of Large Language Models - https://googleprojectzero.blogspot.com/2024/06/project-naptime.html

BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution - https://google.github.io/security-research/pocs/linux/bleedingtooth/writeup.html

TPM2_GetRandom from UEFI - https://dev.to/machinehunter/accessing-tpm20-from-uefi-module-sending-tpm2getrandom-140b

Reconstructing Executables Part 1: Between Files and Memory - https://www.huntandhackett.com/blog/reconstructing-executables-part1

An unexpected journey into Microsoft Defender's signature World - https://retooling.io/blog/an-unexpected-journey-into-microsoft-defenders-signature-world

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.07.04.md StrelaStealer Resurgence: Tracking a JavaScript-Driven Credential Stealer Targeting Europe - https://blog.sonicwall.com/en-us/2024/06/strelastealer-resurgence-tracking-a-javascript-driven-credential-stealer-targeting-europe/ An unexpected journey into Microsoft Defender's signature World - https://retooling.io/blog/an-unexpected-journey-into-microsoft-defenders-signature-world Reversing C++, Qt based applications using Ghidra - https://ktln2.org/reversing-c%2B%2B-qt-applications-using-ghidra/ SECGlitcher (Part 1) - Reproducible Voltage Glitching on STM32 Microcontrollers - https://sec-consult.com/blog/detail/secglitcher-part-1-reproducible-voltage-glitching-on-stm32-microcontrollers/ Bypassing EDRs With EDR-Preloading - https://malwaretech.com/2024/02/bypassing-edrs-with-edr-preload.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.07.02.md

Zip Slip meets Artifactory: A Bug Bounty Story - https://karmainsecurity.com/zip-slip-meets-artifactory-a-bug-bounty-story

CVE-2024-20356: Jailbreaking a Cisco appliance to run DOOM - https://labs.nettitude.com/blog/cve-2024-20356-jailbreaking-a-cisco-appliance-to-run-doom/

IPv6 Security & Capability Testing, Part 1 - https://theinternetprotocolblog.wordpress.com/2020/05/24/ipv6-security-capability-testing-part-1/

Finding mispriced opcodes with fuzzing - https://blog.trailofbits.com/2024/06/17/finding-mispriced-opcodes-with-fuzzing/

Exploiting File Read Vulnerabilities in Gradio to Steal Secrets from Hugging Face Spaces - https://www.horizon3.ai/attack-research/disclosures/exploiting-file-read-vulnerabilities-in-gradio-to-steal-secrets-from-hugging-face-spaces/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.06.30.md

Creating a custom filesytem using FUSE - Part 1 - https://sh4dy.com/2024/06/24/fuse_01/

Your Phone's 5G Connection is Vulnerable to Bypass, DoS Attacks - https://www.darkreading.com/mobile-security/your-phone-s-5g-connection-is-exposed-to-bypass-dos-attacks

Bootkits and kernel patching - https://tulach.cc/bootkits-and-kernel-patching/

64 bytes and a ROP chain – A journey through nftables – Part 1 - https://betrusted.it/blog/64-bytes-and-a-rop-chain-part-1/

AD Recon – AS-REP Roasting Attacksv - https://juggernaut-sec.com/as-rep-roasting/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.06.28.md

CVE-2024-21378 — Remote Code Execution in Microsoft Outlook - https://www.netspi.com/blog/technical-blog/red-team-operations/microsoft-outlook-remote-code-execution-cve-2024-21378/

Route to Safety: Navigating Router Pitfalls - https://starlabs.sg/blog/2024/route-to-safety-navigating-router-pitfalls/

Part one of a series about ORM Leak vulnerabilities and attacking the Django ORM to leak sensitive data - https://www.elttam.com/blog/plormbing-your-django-orm/#content

A Trip Down Memory Lane - https://gatari.dev/posts/a-trip-down-memory-lane/

Windows Defender MP Logs - A Story of Artifacts - https://www.thedfirspot.com/post/windows-defender-mp-logs-a-story-of-artifacts

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.06.26.md

Dude, Where’s My Audit Logs? - https://ericonidentity.com/2023/08/29/dude-wheres-my-audit-logs/

1-click Exploit in South Korea's biggest mobile chat app - https://stulle123.github.io/posts/kakaotalk-account-takeover/

Retex : Pentest Wi-Fi WPA2-Enterprise - https://virtualsamuraii.github.io/network/retex-pentest-wifi-wpa2-enterprise/

DY Fuzzing: Formal Dolev-Yao Models Meet Cryptographic Protocol Fuzz Testing - https://eprint.iacr.org/2023/57

UEFI vulnerability for Intel processors opens the doors for a bootkit - https://www.threatdown.com/blog/uefi-vulnerability-for-intel-processors-opens-the-doors-for-a-bootkit/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.06.24.md

ROPing Routers from scratch: Step-by-step Tenda Ac8v4 Mips 0day Flow-control ROP -> RCE - https://0reg.dev/blog/tenda-ac8-rop

BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution - https://google.github.io/security-research/pocs/linux/bleedingtooth/writeup.html

Exploitation of a kernel pool overflow from a restrictive chunk size (CVE-2021-31969) - https://starlabs.sg/blog/2023/11-exploitation-of-a-kernel-pool-overflow-from-a-restrictive-chunk-size-cve-2021-31969/

Your NVMe Had Been Syz’ed: Fuzzing NVMe-oF/TCP Driver for Linux with Syzkaller - https://www.cyberark.com/resources/threat-research-blog/your-nvme-had-been-syzed-fuzzing-nvme-of-tcp-driver-for-linux-with-syzkaller

Analysis of CVE-2024-25065: Apache OFBiz Security bypass - https://blog.securelayer7.net/security-bypass-in-apache-ofbiz/

#informatyka

zapytam też tu

Czy ktoś jako dorosły diagnozował u specjalistów autyzm? Chciałbym się dowiedzieć ile to kosztuje i jakie były poszczególne kroki

można na priv

głupie komentarze usuwam

#psychologia #pytanie #autyzm

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.06.22.md

How I Found A 55 Year Old Bug In The First Lunar Lander Game - https://martincmartin.com/2024/06/14/how-i-found-a-55-year-old-bug-in-the-first-lunar-lander-game/

Incident Response PowerShell V2 - https://kqlquery.com/posts/incident-response-powershell-v2/

ManageEngine ADAudit - Reverse engineering Windows RPC to find CVEs - part 1 / RPC - https://www.shelltrail.com/research/manageengine-adaudit-reverse-engineering-windows-rpc-to-find-cve-2024-36036-and-cve-2024-36037-part1/

CVE-2024-22058 Ivanti Landesk LPE - https://mantodeasecurity.de/en/2024/05/cve-2024-22058-ivanti-landesk-lpe/

Puckungfu 2: Another NETGEAR WAN Command Injection - https://research.nccgroup.com/2024/02/09/puckungfu-2-another-netgear-wan-command-injection/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.06.20.md

io_uring subsystem - Part 1 - https://sh4dy.com/2024/04/03/io_uring_1/

Understanding Apple’s On-Device and Server Foundation Models release - https://blog.trailofbits.com/2024/06/14/understanding-apples-on-device-and-server-foundations-model-release/

Mind the Patch Gap: Exploiting an io_uring Vulnerability in Ubuntu - https://blog.exodusintel.com/2024/03/27/mind-the-patch-gap-exploiting-an-io_uring-vulnerability-in-ubuntu/

VBA: having fun with macros, overwritten pointers & R/W/X memory - https://adepts.of0x.cc/vba-hijack-pointers-rwa/

CVE-2023-51803 - Authenticated Arbitrary File Upload in LinuxServer.io Heimdall - https://rz.my/2024/06/cve-2023-51803-arbitrary-file-upload-in-linuxserverio-heimdall.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.06.18.md

An Introduction to Chrome Exploitation - Maglev Edition - https://www.matteomalvica.com/blog/2024/06/05/intro-v8-exploitation-maglev/

Attacking Android Binder: Analysis and Exploitation of CVE-2023-20938 - https://androidoffsec.withgoogle.com/posts/attacking-android-binder-analysis-and-exploitation-of-cve-2023-20938/

A Technical Deep Dive: Comparing Anti-Cheat Bypass and EDR Bypass - https://whiteknightlabs.com/2024/02/09/a-technical-deep-dive-comparing-anti-cheat-bypass-and-edr-bypass

Develop your own C# Obfuscator - https://www.ribbiting-sec.info/posts/2024-06-05_csharp_obfuscator/

Stepping Stones – A Red Team Activity Hub - https://research.nccgroup.com/2024/06/12/stepping-stones-a-red-team-activity-hub/

#informatyka

505 + 1 = 506

Tytuł: Macedonia. Epir. Albania 1912-1913

Autor: Robert Rabka

Kategoria: historia

Ocena: 8/10

Kocioł bałkański — początek. Tak bym w zasadzie opisał początek problemów, a głównie wzięły się z nieuregulowania stref wpływów podczas wojny z Turcją. Na przykład kwestia Salonik pomiędzy Bułgarią a Grecją. Byłoby nudno gdyby ówczesne mocarstwa nie włączyły się do tego. Serbia mająca poparcie Rosji i sukcesy na froncie była zagrożeniem dla wpływów Wielkiej Brytania, z tego powodu 28 listopada uznano niepodległość Albani. Autor pominął powody, uzbrojenie i inne przymioty ze względu, że jest to kontynuacja książki "Bałkany 1912-1913".

Prywatny licznik: 42/200

Wygenerowano za pomocą https://bookmeter.xyz

#bookmeter