konik_polanowy

To jest dobre. Właściwie to taka rozmowa, o tym co autorka napisała w swojej książce "O zmierzchu. Nowe myślenie na nowe czasy". Można by powiedzieć schematycznie, psycholog + Karol Paciorek no to będzie lipa, a tu po 1h gadają całkiem z sensem.

https://www.youtube.com/watch?v=0maH7qZrZ8c

Jaką linkę z karabińczykiem do kluczy polecacie?

#pytanie

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.23.md

Spyware Injection Into Your ChatGPT's Long-Term Memory (SpAIware) - https://embracethered.com/blog/posts/2024/chatgpt-macos-app-persistent-data-exfiltration/

OtterRoot: Netfilter Universal Root 1-day - https://osec.io/blog/2024-11-25-netfilter-universal-root-1-day

Windows Internals Crash Course - https://www.youtube.com/watch?v=I_nJltUokE0

TCL substitution of global parameter values in Gaia Portal - https://notes.zeronvll.com/grammelot/CheckPoint-CVE-2024-24914

Araneida Scanner: Cracked Acunetix Web App & API Scanner Discovered - https://blog.netmanageit.com/araneida-scanner-cracked-acunetix-web-app-api-scanner-discovered/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.21.md

Android's CVE-2020-0238 (AccountTypePreferenceLoader) - https://pwner.gg/blog/Android%27s-CVE-2020-0238

Hidden in Plain Sight: TA397’s New Attack Chain Delivers Espionage RATs - https://www.proofpoint.com/us/blog/threat-insight/hidden-plain-sight-ta397s-new-attack-chain-delivers-espionage-rats

The Curious Case of nltest and LmOwfPassword/NtOwfPassword - https://www.jonaslieb.de/blog/nltest-ntowfpassword/

Unveiling secrets of the ESP32: creating an open-source MAC Layer - https://zeus.ugent.be/blog/23-24/open-source-esp32-wifi-mac/

io_uring - new code, new bugs, and a new exploit technique - https://www.starlabs.sg/blog/2022/06-io_uring-new-code-new-bugs-and-a-new-exploit-technique/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.19.md

Prototype Pollution in NASAs Open MCT CVE-2023-45282 - https://visionspace.com/prototype-pollution-in-nasas-open-mct-cve-2023-45282/

Azure Detection Engineering: Log idiosyncrasies you should know about - https://tracebit.com/blog/azure-detection-engineering-log-idiosyncrasies-you-should-know-about

Reverse engineering the Sega Channel game image file format - https://www.infochunk.com/schannel/index.html

awesome-linux-attack-forensics-purplelabs - https://github.com/cr0nx/awesome-linux-attack-forensics-purplelabs

Beware of the Shadowbunny - Using virtual machines to persist and evade detections - https://embracethered.com/blog/shadowbunny.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.17.md

OpenBMC Remote OS Deployment: A Simplified Approach - https://hardenedvault.net/blog/2024-11-17-openbmc-remote-deployment/

Docker Containers vs. Kubernetes Pods - Taking a Deeper Look - https://labs.iximiuz.com/tutorials/containers-vs-pods

From NTAuthCertificates to “Silver” Certificate - https://decoder.cloud/2023/09/05/from-ntauthcertificates-to-silver-certificate/

Windows Sockets: From Registered I/O to SYSTEM Privileges - https://blog.exodusintel.com/2024/12/02/windows-sockets-from-registered-i-o-to-system-privileges/

A "Gau-Hack" from EuskalHack - https://gum3t.xyz/posts/a-gau-hack-from-euskalhack/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.15.md

Call stack spoofing explained using APT41 malware - https://cybergeeks.tech/call-stack-spoofing-explained-using-apt41-malware/

Upcoming hardening in PHP - https://dustri.org/b/upcoming-hardening-in-php.html

Attack Exploiting Legitimate Service by APT-C-60 - https://blogs.jpcert.or.jp/en/2024/12/APT-C-60.html

OpenBMC Remote OS Deployment: A Simplified Approach - https://hardenedvault.net/blog/2024-11-17-openbmc-remote-deployment/

Linux Privilege Escalation - https://tbhaxor.com/linux-privilege-escalation/

#informatyka

1094 + 1 = 1095

Tytuł: Vercellae 101 p.n.e.

Autor: Paweł Rochala

Kategoria: historia

Ocena: 8/10

Takim preludium przed większym okresem najazdów barbarzyńców na Rzym to byli Cymbrowie i Teutoni. Taki wstępniak, powiedzmy. Autor opiera tutaj się na wcześniejszych bitew, którzy Rzymianie przegrali. Na zasadzie sprzeczności i tym, co zrobił Mariusz, żeby zreformować armię i nadać jej odpowiedni kształt. Tutaj nie mam na myśli zmiany taktyki, a wysyłanie małych grup żołnierzy przed swoim obozem, tak żeby zobaczyli jak wróg wygląda. Takie urzeczywistnienie, raz, że powodowało wyparcie fantazji i wywołania paniki to jeszcze pomagało utrzymać dyscyplinę. Zmiany w uzbrojeniu również zaszły, ale już po bitwie z Teutonami, a przed z Cymbrami. Mowa o łamiącym pilum po wbiciu się w tarczę. Oczywiście jest rozbudowane wprowadzenie kim był Mariusz, czy Sula jak i stał się w tym okresie Rzym. Powody, dla których Cymbrowie i Teutoni zaczęli "iść" również znalazły swoje miejsce, podobnie jak wskazówka, że lepiej nie rozdzielać swojej armii niemalże "u wrót" wroga.

Prywatny licznik: 69/200

Wygenerowano za pomocą https://bookmeter.xyz

#bookmeter

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.13.md

Silencing the EDR Silencers - https://www.huntress.com/blog/silencing-the-edr-silencers

Windows Drivers Reverse Engineering Methodology - https://voidsec.com/windows-drivers-reverse-engineering-methodology/

Broken authentication: 7 Advanced ways of bypassing insecure 2-FA implementations - https://blog.intigriti.com/hacking-tools/broken-authentication-7-advanced-ways-of-bypassing-insecure-2-fa-implementations

Bypassing regulatory locks, Faraday cages and upgrading your hearing - https://lagrangepoint.substack.com/p/airpods-hearing-aid-hacking

Increase your stealth capabilities - part 1 - https://sokarepo.github.io/redteam/2024/01/04/increase-your-stealth-capabilities-part1.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.11.md

Disclosure of 7 Android and Google Pixel Vulnerabilities - https://blog.oversecured.com/Disclosure-of-7-Android-and-Google-Pixel-Vulnerabilities/

4.2 Frogstar - https://binary.ninja/2024/11/20/4.2-frogstar.html

Cobalt Strike Postex Kit - https://rastamouse.me/cobalt-strike-postex-kit/

Pinning User-space Pages in the Linux Kernel: Exploring get_user_pages, pin_user_pages, and Page Table Walking - https://blogs.oracle.com/linux/post/pinning-userspace-pages-in-the-linux-kernel

Section Order, MASM, and the .text$mn Subsection - https://wbenny.github.io/2024/12/08/section-order-masm-text-mn-subsection.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.09.md

Breaking Down Multipart Parsers: File upload validation bypass - https://blog.sicuranext.com/breaking-down-multipart-parsers-validation-bypass/

Ghidra nanoMIPS ISA module - https://www.nccgroup.com/us/research-blog/ghidra-nanomips-isa-module/

Unlocking Full Shell Functionality UART RX Mitigation Bypass on TL-WR841N - https://www.iotsrg.org/blog/unlocking-full-shell-functionality-uart-rx-mitigation-bypass-on-tl-wr841n

Game of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions - https://www.trendmicro.com/en_us/research/24/k/earth-estries.html

The capacitor that Apple soldered incorrectly at the factory - https://www.downtowndougbrown.com/2024/11/the-capacitor-that-apple-soldered-incorrectly-at-the-factory/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.07.md

Introduction to Fuzzing Android Native Components - https://blog.convisoappsec.com/en/introduction-to-fuzzing-android-native-components/

The fascinating security model of dark web marketplaces - https://boehs.org/node/dark-web-security

Reviving Exploits Against Cred Structs - Six Byte Cross Cache Overflow to Leakless Data-Oriented Kernel Pwnage -mhttps://www.willsroot.io/2022/08/reviving-exploits-against-cred-struct.html

Modern iOS Pentesting: No Jailbreak Needed - https://dvuln.com/blog/modern-ios-pentesting-no-jailbreak-needed

Fuzzing and Bypassing the AWS WAF - https://sysdig.com/blog/fuzzing-and-bypassing-the-aws-waf/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.05.md

NTLM Relaying – Making the Old New Again - https://labs.jumpsec.com/ntlm-relaying-making-the-old-new-again/

Hiding In PlainSight - Proxying DLL Loads To Hide From ETWTI Stack Tracing - https://0xdarkvortex.dev/proxying-dll-loads-for-hiding-etwti-stack-tracing/

NativeBypassCredGuard - Bypassing Credential Guard in 2024 - https://ricardojoserf.github.io/nativebypasscredguard/

0x00 - Introduction to Windows Kernel Exploitation - https://wetw0rk.github.io/posts/0x00-introduction-to-windows-kernel-exploitation/

Hacking Barcodes for Fun & Profit - https://blog.mantrainfosec.com/blog/16/hacking-barcodes-for-fun-profit

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.03.md

Patch Tuesday Diffing: CVE-2024-20696 - Windows Libarchive RCE - https://clearbluejar.github.io/posts/patch-tuesday-diffing-cve-2024-20696-windows-libarchive-rce/

Bootkitty: Analyzing the first UEFI bootkit for Linux - https://www.welivesecurity.com/en/eset-research/bootkitty-analyzing-first-uefi-bootkit-linux/

From XSS Vulnerability to Full Admin Access - https://haymiz.dev/security/2024/11/25/stored-xss-takeover/

Hacking a Smart Home Device - https://jmswrnr.com/blog/hacking-a-smart-home-device

Tales From The Crypt: Microsoft Unicode Collation Oddities Leading to Software Vulnerabilities - https://pulsesecurity.co.nz/articles/mssql-unicode-collation-bugs

#informatyka

1034 + 1 = 1035

Tytuł: Punkt przełomowy. O małych przyczynach wielkich zmian

Autor: Malcolm Gladwell

Kategoria: socjologia

Ocena: 8/10

Rządzą nami pewne prawidła. Tak jest było i będzie. Możemy spokojnie zarządzać grupą ludzi wynoszącą 150. Jednak dodanie chociaż jednej, sprawia, że zintegrowana grupa rozpada się niczym domek z kart. Podobnie ze zmianami, np. epidemiami, modą na coś, czy masowym zażywaniem narkotyków. Powszechnie sądzi się, że następują one falami w pewnych okresach czasów, gdzie idzie jakoś się przygotować. Tak nie jest. Zmiany te idą szybko. Również kwestia rozwiązania negatywnych skutków nie jest oczywista. Mało kto wpadł na pomysł, żeby ukrócić strzelaniny w nowojorskim metrze poprzez sprawdzanie biletów i ponowne palowanie pociągów, kiedy zostaną opatrzone jakimś graffiti. Kończąc, książka socjologiczna, pisana prostym językiem.

Prywatny licznik: 68/200

Wygenerowano za pomocą https://bookmeter.xyz

#bookmeter

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.12.01.md

Heap exploitation, glibc internals and nifty tricks - https://blog.quarkslab.com/heap-exploitation-glibc-internals-and-nifty-tricks.html

OtterRoot: Netfilter Universal Root 1-day - https://osec.io/blog/2024-11-25-netfilter-universal-root-1-day

GRUB LUKS Bypass and Dump - https://remyhax.xyz/posts/luks-vm-dump/

badmalloc (CVE-2023-32428) - a macOS LPE - https://gergelykalman.com/badmalloc-CVE-2023-32428-a-macos-lpe.html

The Curious Case of nltest and LmOwfPassword/NtOwfPassword - https://www.jonaslieb.de/blog/nltest-ntowfpassword/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.11.29.md

Spoofing Call Stacks To Confuse EDRs - https://labs.withsecure.com/publications/spoofing-call-stacks-to-confuse-edrs

ShadowHound: A SharpHound Alternative Using Native PowerShell - https://blog.fndsec.net/2024/11/25/shadowhound/

From Exploits to Forensics: Unraveling the Unitronics Attack - https://claroty.com/team82/research/from-exploits-to-forensics-unraveling-the-unitronics-attack

Create your own C2 using Python- Part 1 - https://g3tsyst3m.github.io/c2/python/Create-your-own-C2-using-Python-Part-1/

Salt Typhoon: Churning Up a Storm of Consternation - https://nattothoughts.substack.com/p/salt-typhoon-churning-up-a-storm

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.11.27.md

Reconnaissance: Scanning and DoSing with Scapy - https://en.iguru.gr/reconnaissance-scanning-kai-dosing-scapy/

DFIR Breakdown: Kerberoasting - https://www.cybertriage.com/blog/dfir-breakdown-kerberoasting/

How to Emulate a Ransomware Attack - https://practicalsecurityanalytics.com/how-to-emulate-a-ransomware-attack/

Increase your stealth capabilities - part 1 - https://sokarepo.github.io/redteam/2024/01/04/increase-your-stealth-capabilities-part1.html

Extracting Credentials From Windows Logs - https://practicalsecurityanalytics.com/extracting-credentials-from-windows-logs/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.11.25.md

WebVM 2.0: A complete Linux Desktop Environment in the browser via WebAssembly - https://labs.leaningtech.com/blog/webvm-20

GoMLX: ML in Go without Python - https://eli.thegreenplace.net/2024/gomlx-ml-in-go-without-python/

Obfuscating API Patches to Bypass New Windows Defender Behavior Signatures - https://practicalsecurityanalytics.com/obfuscating-api-patches-to-bypass-new-windows-defender-behavior-signatures/

How To Use MSSQL CLR Assembly To Bypass EDR - https://blog.pyn3rd.com/2024/11/22/How-to-use-MSSQL-CLR-assembly-to-bypass-EDR/

Breaking Down Multipart Parsers: File upload validation bypass - https://blog.sicuranext.com/breaking-down-multipart-parsers-validation-bypass/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.11.23.md

Unpatched Remote Code Execution in Gogs - https://fysac.github.io/posts/2024/11/unpatched-remote-code-execution-in-gogs/

A New Era of macOS Sandbox Escapes: Diving into an Overlooked Attack Surface and Uncovering 10+ New Vulnerabilities - https://jhftss.github.io/A-New-Era-of-macOS-Sandbox-Escapes/

Extracting Plaintext Credentials from Palo Alto Global Protect - https://shells.systems/extracting-plaintext-credentials-from-palo-alto-global-protect/

Helldown Ransomware: an overview of this emerging threat - https://blog.sekoia.io/helldown-ransomware-an-overview-of-this-emerging-threat/

Microsoft Bookings – Facilitating Impersonation - https://www.cyberis.com/article/microsoft-bookings-facilitating-impersonation

#informatyka