konik_polanowy

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.06.16.md

Going Native - Malicious Native Applications - https://www.protexity.com/post/going-native-malicious-native-applications

Stepping Stones – A Red Team Activity Hub - https://research.nccgroup.com/2024/06/12/stepping-stones-a-red-team-activity-hub/

Exploiting ML models with pickle file attacks: Part 1 - https://blog.trailofbits.com/2024/06/11/exploiting-ml-models-with-pickle-file-attacks-part-1/

Decompilation Debugging - https://clearbluejar.github.io/posts/decompilation-debugging-pretending-all-binaries-come-with-source-code/

AVSS Report: System Security Adversarial Capability Preliminary Evaluation of iOS, Android, and HarmonyOS - Kernel - https://www.darknavy.org/blog/avss_report_kernel/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.06.14.md

Replicant: Reproducing a Fault Injection Attack on the Trezor One - https://voidstarsec.com/blog/replicant-part-1

Windows Internals: Dissecting Secure Image Objects - Part 1 - https://connormcgarr.github.io/secure-images/

Nightmare: One Byte to ROP // Deep Dive Edition - https://hackmd.io/@pepsipu/ry-SK44pt?s=09

Evilginx Phishing Engagement Infrastructure Setup Guide - https://github.com/An0nUD4Y/Evilginx-Phishing-Infra-Setup

Phishing Engagement Infrastructure Setup Guide - https://github.com/An0nUD4Y/Evilginx-Phishing-Infra-Setup

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.06.12.md

A Practical Approach To Attacking IoT Embedded Designs (I) - https://labs.ioactive.com/2021/02/a-practical-approach-to-attacking-iot.html

Breaking through Defender's Gates - Disabling Tamper Protection and other Defender components - https://www.alteredsecurity.com/post/disabling-tamper-protection-and-other-defender-mde-components

GhostRace: CVE-2024-2193 - https://www.vusec.net/projects/ghostrace/

SMM isolation - SMI deprivileging (ISRD) - https://tandasat.github.io/blog/2024/02/29/ISRD.html

Hacking a Smart Home Device - https://jmswrnr.com/blog/hacking-a-smart-home-device

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.06.10.md

Hacking Millions of Modems (and Investigating Who Hacked My Modem) - https://samcurry.net/hacking-millions-of-modems

Stealing the Bitlocker key from a TPM - https://astralvx.com/stealing-the-bitlocker-key-from-a-tpm/

Attacking Android Binder: Analysis and Exploitation of CVE-2023-20938 - https://androidoffsec.withgoogle.com/posts/attacking-android-binder-analysis-and-exploitation-of-cve-2023-20938/

Security Alert: CVE-2024-4577 - PHP CGI Argument Injection Vulnerability - https://devco.re/blog/2024/06/06/security-alert-cve-2024-4577-php-cgi-argument-injection-vulnerability-en/

PikaBot: a Guide to its Deep Secrets and Operations - https://blog.sekoia.io/pikabot-a-guide-to-its-deep-secrets-and-operations/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.06.08.md

Patch Tuesday Diffing: CVE-2024-20696 - Windows Libarchive RCE - https://clearbluejar.github.io/posts/patch-tuesday-diffing-cve-2024-20696-windows-libarchive-rce/

DLL Side Loading through IObit against Colombia - https://lab52.io/blog/dll-side-loading-through-iobit-against-colombia/

CVE-2023-48788: Revisiting Fortinet FortiClient EMS to Exploit 7.2.X - https://www.horizon3.ai/attack-research/cve-2023-48788-revisiting-fortinet-forticlient-ems-to-exploit-7-2-x/

SMB Enumeration Cheatsheet - https://0xdf.gitlab.io/2024/03/21/smb-cheat-sheet.html

Resolving Stack Strings with Capstone Disassembler & Unicorn in Python - https://www.0ffset.net/reverse-engineering/capstone-resolving-stack-strings/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.06.06.md

Pwn2Own Toronto 2023: Part 1 – How it all started - https://blog.compass-security.com/2024/03/pwn2own-toronto-2023-part-1-how-it-all-started/

Bypassing Windows Defender and PPL Protection with PPLBlade to dump LSASS without Detection - https://tacticaladversary.io/adversary-tactics/bypass-defender-and-ppl-protection-to-dump-lsass/

How I hacked smart lights: the story behind CVE-2022-47758 - https://pwning.tech/cve-2022-47758/

Iconv, set the charset to RCE: Exploiting the glibc to hack the PHP engine (part 1) - https://www.ambionics.io/blog/iconv-cve-2024-2961-p1

HEXACON2023 - Unveiling Hidden Paths by Junoh Lee and JeongOh Kyea - https://www.youtube.com/watch?v=YTyrBnXKrcg

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.06.04.md

SSL Pinning Bypass Using Frida and Objection - https://pentestguy.com/ssl-pinning-bypass-using-frida-and-objection/

Exploiting n-day in Home Security Camera - https://0xbigshaq.github.io/2024/01/05/tp-link-tapo-c100/

CVE-2022-27666: Exploit esp6 modules in Linux kernel - https://etenal.me/archives/1825

Abusing the SeRelabelPrivilege - https://decoder.cloud/2024/05/30/abusing-the-serelabelprivilege/

Hacks and Propaganda: Meet the Two Brothers Bringing Russia’s Cyber War to Europe - https://correctiv.org/en/fact-checking-en/2024/05/31/hacks-and-propaganda-meet-the-two-brothers-bringing-russias-cyber-war-to-europe/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.06.02.md

A Practical Tutorial on PCIe for Total Beginners on Windows (Part 1) - https://ctf.re/windows/kernel/pcie/tutorial/2023/02/14/pcie-part-1/

Diving deep into Jetbrains TeamCity Part 1 - Analysing CVE-2024-23917 leading to Authentication Bypass - https://blog.0daylabs.com/2024/05/27/jetbrains-teamcity-auth-bypass/

Obfuscating native code for fun: Part 1 - Introduction - https://blog.es3n1n.eu/posts/obfuscator-pt-1/

Keylogging in the Windows Kernel with undocumented data structures - https://eversinc33.com/posts/kernel-mode-keylogging.html

The Role of the Control Flow Graph in Static Analysis - https://nicolo.dev/en/blog/role-control-flow-graph-static-analysis/

#informatyka

465 + 1 = 466

Tytuł: Chłopcy i mężczyźni. Dlaczego współcześni mężczyźni przeżywają trudności, dlaczego to ważne i co z tym zrobić?

Autor: Richard V. Reeves

Kategoria: poradnik

Ocena: 8/10

Ważna książka z tego powodu, że pisał ją mężczyzna i tnie byle kto, bo prezes amerykańskiego Instytutu dla Chłopców i Mężczyzn. Z tego względu książka skupia się w większości na problemach zza wielkiej kałuży, np. brak dostępu do szkolnictwa dla czarnoskórych Amerykanów. Szkolnictwo jak inne dziedziny, gdzie pompowane są wszelkie stypendia dla kobiet stają się niedostępne dla mężczyzn, co prowadzi do zniechęcenia, brakiem zainteresowania nauką, co w konsekwencji może prowadzić do uzależnień, czy samobójstw. Takich wniosków jest pełno w książce, naturalnie podpartymi badaniami. Autor wskazuje też na social media, gdzie męski zachowania, uchodzące tak 10-20 lat temu za neutralne są obecnie etykietowane jak seksistowskie i piętnowane. W ostatnim rozdziale podaje rozwiązania problemów, które wcześniej przytoczył.

Prywatny licznik: 41/200

Wygenerowano za pomocą https://bookmeter.xyz

#bookmeter

skrypt rzuca errorami, kiedy to w polugatunek chce wybrać opcję inne

ji/o<@https://bookmeter.xyz/assets/dodaj-wpis-DxIuVR0A.js:6:55204

ji@https://bookmeter.xyz/assets/dodaj-wpis-DxIuVR0A.js:11:5

Su@https://bookmeter.xyz/assets/components-CKTFYk3I.js:38:16994

wa@https://bookmeter.xyz/assets/components-CKTFYk3I.js:40:3139

Gd@https://bookmeter.xyz/assets/components-CKTFYk3I.js:40:44692

Yd@https://bookmeter.xyz/assets/components-CKTFYk3I.js:40:39701

sv@https://bookmeter.xyz/assets/components-CKTFYk3I.js:40:39629

zo@https://bookmeter.xyz/assets/components-CKTFYk3I.js:40:39481

Na@https://bookmeter.xyz/assets/components-CKTFYk3I.js:40:35863

Wd@https://bookmeter.xyz/assets/components-CKTFYk3I.js:40:34814

L@https://bookmeter.xyz/assets/components-CKTFYk3I.js:25:1562

G@https://bookmeter.xyz/assets/components-CKTFYk3I.js:25:1927

Testowałem na mozilli z ublockiem i czystym chrome

#bookmeter

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.05.31.md

Malware Transmutation! - Unveiling the Hidden Traces of BloodAlchemy - https://blog-en.itochuci.co.jp/entry/2024/05/23/090000

ManageEngine ADAudit - Reverse engineering Windows RPC to find CVEs - part 1 / RPC - https://www.shelltrail.com/research/manageengine-adaudit-reverse-engineering-windows-rpc-to-find-cve-2024-36036-and-cve-2024-36037-part1/

Inside a vintage aerospace navigation computer of uncertain purpose - https://www.righto.com/2024/05/blog-post.html

Unleashing ksmbd: crafting remote exploits of the Linux kernel - https://pwning.tech/ksmbd/

Satellite Hacking Demystified - https://redteamrecipe.com/satellite-hacking-demystified

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.05.29.md

Leveraging DNS Tunneling for Tracking and Scanning - https://unit42.paloaltonetworks.com/three-dns-tunneling-campaigns/

The Definitive Guide To Process Cloning on Windows - https://github.com/huntandhackett/process-cloning

Hunting bugs in Nginx JavaScript engine (njs) - https://0xbigshaq.github.io/2024/05/24/njs-vr-bugs/

Case Study: NAT64 - https://ipng.ch/s/articles/2024/05/25/nat64-1.html

op-co.de blog/ posts/ Samsung WB850F Firmware Reverse-Engineering - https://op-co.de/blog/posts/samsung_wb850f_firmware/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.05.27.md

Memory Pollution in LLMs: Understanding New AI Security Concerns - https://evren.ninja/llm-memory-pollution-attacks.html

LDAPSearch Reference - https://malicious.link/posts/2022/ldapsearch-reference/

Tracking APT SideWinder Domains By Combining Regex Patterns, Whois Records and Domain Registrars - https://www.embeeresearch.io/advanced-guide-to-infrastructure-analysis-tracking-apt-sidewinder-domains/

Pwn2Own Toronto 2022 : A 9-year-old bug in MikroTik RouterOS - https://devco.re/blog/2024/05/24/pwn2own-toronto-2022-a-9-year-old-bug-in-mikrotik-routeros-en/

Reversing Windows Container, episode I: Silo - https://blog.quarkslab.com/reversing-windows-container-episode-i-silo.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.05.25.md

Dumping NTHashes from Microsoft Entra ID - https://www.secureworks.com/research/dumping-nthashes-from-microsoft-entra-id

Getting XXE in Web Browsers using ChatGPT - https://swarm.ptsecurity.com/xxe-chrome-safari-chatgpt/

SRE deep dive into Linux Page Cache - https://biriukov.dev/docs/page-cache/0-linux-page-cache-for-sre/

Windows Sysinternals - Sysmon - https://tierzerosecurity.co.nz/2024/02/27/microsoft-system-monitor.html

Persistence Techniques That Persist - https://www.cyberark.com/resources/threat-research-blog/persistence-techniques-that-persist

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.05.23.md

Every Industry’s Battle: The Threat of Mobile Malware on the Enterprise - https://www.zimperium.com/blog/every-industrys-battle-the-threat-of-mobile-malware-on-the-enterprise/

Reverse Engineering Electron Apps to Discover APIs - https://danaepp.com/reverse-engineering-electron-apps-to-discover-apis

Reverse engineering a car key fob signal (Part 1) - https://0x44.cc/radio/2024/03/13/reversing-a-car-key-fob-signal.html

Advanced CyberChef Techniques For Malware Analysis - Detailed Walkthrough and Examples - https://www.embeeresearch.io/advanced-cyberchef-operations-netsupport/

Tracking the Progression of Earth Hundun's Cyberespionage Campaign in 2024 - https://www.trendmicro.com/en_us/research/24/e/earth-hundun-2.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.05.21.md

Response Filter Denial of Service (RFDoS): shut down a website by triggering WAF rule - https://blog.sicuranext.com/response-filter-denial-of-service-a-new-way-to-shutdown-a-website/

A peek into build provenance for Homebrew - https://blog.trailofbits.com/2024/05/14/a-peek-into-build-provenance-for-homebrew/

QNAP QTS - QNAPping At The Wheel (CVE-2024-27130 and friends) - https://labs.watchtowr.com/qnap-qts-qnapping-at-the-wheel-cve-2024-27130-and-friends/

YARA is dead, long live YARA-X - https://virustotal.github.io/yara-x/blog/yara-is-dead-long-live-yara-x/

Emulating inline decryption for triaging C++ malware - https://viuleeenz.github.io/posts/2024/05/emulating-inline-decryption-for-triaging-c-malware/

#informatyka

436 + 1 = 437

Tytuł: Filipiny 1898-1902

Autor: Jarosław Wojtczak

Kategoria: historia

Ocena: 7/10

Ciekawa książka z tego powodu, że zanim autor przechodzi do tego, co jest w tytule to tak z grubsza przedstawia wojnę amerykańsko-hiszpańską jak i śmiałą akcję w Zatoce Manilskiej. Następnie przechodzi do wojny filipińsko-amerykańskiej, która zaczęła się, powiedzmy, z marszu. Jest wątek kulturowy (a raczej rasistowski), generałowie mający już doświadczenie bojowe, np. walka z Indianami i politykę. Ta ostatnia ma spore znaczenie, gdyż od tego momentu zaczynają się Stany Zjednoczone "rozgościć" po świecie.

Prywatny licznik: 40/200

Wygenerowano za pomocą https://bookmeter.xyz

#bookmeter

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.05.19.md

Espressif ESP32: Breaking HW AES with Power Analysis - https://raelize.com/blog/espressif-systems-esp32-breaking-hw-aes-with-power-analysis/

Exploiting and Mitigating Speculative Race Conditions - https://www.vusec.net/projects/ghostrace/

Malware Development: Crafting Digital Chaos 0x4: Command and Control - https://ry0dan.github.io/malware%20development/Malware-Development-Crafting-Digital-Chaos-05/

Rooting the FiiO M6 - Part 1 - Using the "World's Worst Fuzzer" To Find A Kernel Bug - https://stigward.github.io/posts/fiio-m6-kernel-bug/

Python’s Byte: The Rise of Scripted Ransomware - https://labs.k7computing.com/index.php/pythons-byte-the-rise-of-scripted-ransomware/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.05.17.md

Bypassing anti-reversing defences in iOS applications - https://twelvesec.com/2023/10/10/bypassing-anti-reversing-defences-in-ios-applications/

16 years of CVE-2008-0166 Debian OpenSSL Bug - https://16years.secvuln.info/

Route to Safety: Navigating Router Pitfalls - https://starlabs.sg/blog/2024/route-to-safety-navigating-router-pitfalls/

Hyper-V memory internals. EXO partition memory access - https://hvinternals.blogspot.com/2020/06/hyper-v-memory-internals-exo-partition.html

[Cracking Windows Kernel with HEVD] Chapter 0: Where do I start? - https://mdanilor.github.io/posts/hevd-0/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2024.05.15.md

Custom Shellcode Creation in x64 - https://s4dbrd.com/shellcode-creation-in-x64/

LLMjacking: Stolen Cloud Credentials Used in New AI Attack - https://sysdig.com/blog/llmjacking-stolen-cloud-credentials-used-in-new-ai-attack/

Side-by-Side with HelloJackHunter: Unveiling the Mysteries of WinSxS - https://blog.zsec.uk/hellojackhunter-exploring-winsxs/

Unveiling secrets of the ESP32: creating an open-source MAC Layer - https://zeus.ugent.be/blog/23-24/open-source-esp32-wifi-mac/

Introduction to encryption for embedded Linux developers - https://sergioprado.blog/introduction-to-encryption-for-embedded-linux-developers/

#informatyka