konik_polanowy

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2023.01.01.md

Reversing embedded device bootloader (U-Boot) - p.1 - https://www.shielder.com/blog/2022/03/reversing-embedded-device-bootloader-u-boot-p.1/

[Linux Kernel Exploitation 0x2] Controlling RIP and Escalating privileges via Stack Overflow - https://blog.k3170makan.com/2021/01/linux-kernel-exploitation-0x2.html

Invoke a remote command without WinRM, psexec or similar – Access administrative shares even if they have been removed - https://maikkoster.com/invoke-a-remote-command-without-winrm-psexec-or-similar-access-administrative-shares-even-if-they-have-been-removed/

From Self-Hosted GitHub Runner to Self-Hosted Backdoor - https://www.praetorian.com/blog/self-hosted-github-runners-are-backdoors/

Reverse Engineering Rustlang Binaries - A Series - https://brightprogrammer.netlify.app/post/reverse-engineering-rustlang-binaries-0x1-empty-program/

Rosjanie będą robić własnego Androida

https://twitter.com/Cyberknow20/status/1608721694264549376?s=20&t=99HcHLNl2G1D3hC7UfMgLA

Jaką aplikacje na android polecacie do czytania książek? Obecnie korzystam z Xodo, ale to takie sobie, nastawieni są na wersje premium

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.12.30.md

Hidden firewall in Kernel https://antonio-cooler.gitbook.io/coolervoid-tavern/hidden-firewall-in-kernel

Modifying Embedded Filesystems in ARM Linux zImages https://jamchamb.net/2022/01/02/modify-vmlinuz-arm.html

Overview of GLIBC heap exploitation techniques https://0x434b.dev/overview-of-glibc-heap-exploitation-techniques/

Spice up your persistence: loading PHP extensions from memory https://adepts.of0x.cc/dlopen-from-memory-php/

Divide And Bypass: A new Simple Way to Bypass AMSI https://x4sh3s.github.io/posts/Divide-and-bypass-amsi/

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.12.28.md

Intro to Embedded RE Part 1: Tools and Series  https://voidstarsec.com/blog/intro-to-embedded-part-1

iOS Pentesting Tools Part 1: App Decryption and class-dump https://www.allysonomalley.com/2018/08/10/ios-pentesting-tools-part-1-app-decryption-and-class-dump/

MyKings: The Slow But Steady Growth of a Relentless Botnet https://www.sophos.com/en-us/medialibrary/pdfs/technical-papers/sophoslabs-uncut-mykings-report.pdf

Bug Writeup: RCE via SSTI on Spring Boot Error Page with Akamai WAF Bypass https://h1pmnh.github.io/post/writeup_spring_el_waf_bypass/

Pass-the-Challenge: Defeating Windows Defender Credential Guard https://research.ifcr.dk/pass-the-challenge-defeating-windows-defender-credential-guard-31a892eee22

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.12.26.md

Attack of the clones - Stealthy Kubernetes persistence with eathar, tòcan and teisteanas - https://raesene.github.io/blog/2022/12/21/Kubernetes-persistence-with-Tocan-and-Teisteanas/

What child is this? - https://blog.trailofbits.com/2022/12/20/process-reparenting-microsoft-windows/

An Introduction to Fault Injection (Part 1/3) - https://research.nccgroup.com/2021/07/07/an-introduction-to-fault-injection-part-1-3/

Reverse Engineering Tiktok's VM Obfuscation (Part 1) - https://nullpt.rs/reverse-engineering-tiktok-vm-1

Linux Kernel: Exploiting a Netfilter Use-after-Free in kmalloc-cg - https://blog.exodusintel.com/2022/12/19/linux-kernel-exploiting-a-netfilter-use-after-free-in-kmalloc-cg/

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.12.24.md

How to set up spotify-TUI with spotifyd and pulseaudio - https://www.grahamhelton.com/blog/spotifytui/

Diving into Intel Killer bloatware, part 1 - https://zwclose.github.io/2022/12/18/killer1.html

Replicating CVEs with KLEE - https://research.nccgroup.com/2022/12/12/klee-for-the-cve/

mast1c0re: Hacking the PS4 / PS5 through the PS2 Emulator - Part 1 - Escape - https://cturt.github.io/mast1c0re.html

An Ongoing Attack Against Python and Javascript Developers - https://blog.phylum.io/phylum-detects-active-typosquatting-campaign-in-pypi

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.12.22.md

Postgres + Tailscale – A database you can trust with a simple VPN - https://www.crunchydata.com/blog/crunchy-bridge-with-tailscale

Give me a browser, I’ll give you a Shell - https://systemweakness.com/give-me-a-browser-ill-give-you-a-shell-de19811defa0

Linux Kernel: Exploiting a Netfilter Use-after-Free in kmalloc-cg - https://blog.exodusintel.com/2022/12/19/linux-kernel-exploiting-a-netfilter-use-after-free-in-kmalloc-cg/

I Hope This Sticks: Analyzing ClipboardEvent Listeners for Stored XSS - https://spaceraccoon.dev/analyzing-clipboardevent-listeners-stored-xss/

Detecting and Evading Sandboxing through Time based evasion - https://shubakki.github.io/posts/2022/12/detecting-and-evading-sandboxing-through-time-based-evasion/

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.12.20.md

The Power of investigation with Microsoft XDR - https://misconfig.io/the-power-of-ir-with-mdi-and-mde

Hijacking GitHub Repositories by Deleting and Restoring Them - https://blog.nietaanraken.nl/posts/gitub-popular-repository-namespace-retirement-bypass/

Reverse Engineering of a Not-so-Secure IoT Device - https://mcuoneclipse.com/2019/05/26/reverse-engineering-of-a-not-so-secure-iot-device/

Confidential computing - the missing link in cloud data protection - https://ledidi.com/blog/confidential-computing-the-missing-link-in-cloud-data-protection

I Solemnly Swear My Driver Is Up to No Good: Hunting for Attestation Signed Malware - https://www.mandiant.com/resources/blog/hunting-attestation-signed-malware

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.12.18.md

Offline Voice Assistant on an STM32 Microcontroller - https://picovoice.ai/blog/offline-voice-assistant-on-an-stm32-microcontroller/

The enemy from within: Unauthenticated Buffer Overflows in Zyxel routers still haunting users - https://sec-consult.com/blog/detail/enemy-within-unauthenticated-buffer-overflows-zyxel-routers/

50+ Cross-site scripting (XSS) Vulnerabilities Bugcrowd Public Program - https://bugbountyguide.org/2022/12/12/50-cross-site-scripting-xss-vulnerabilities-bugcrowd-public-programs/

HTML smugglers turn to SVG images - https://blog.talosintelligence.com/html-smugglers-turn-to-svg-images/

Moobot Uses a Fake Vulnerability - https://vulncheck.com/blog/moobot-uses-fake-vulnerability

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.12.16.md

Firmware key extraction by gaining EL3 - https://blog.xilokar.info/firmware-key-extraction-by-gaining-el3.html

Practically-exploitable Cryptographic Vulnerabilities in Matrix - https://nebuchadnezzar-megolm.github.io/

Sniffing SSH Passwords - https://networklogician.com/2021/04/17/sniffing-ssh-passwords/

Reversing and Exploiting Embedded Devices: The Software Stack (Part 1) - https://www.praetorian.com/blog/reversing-and-exploiting-embedded-devices-part-1-the-software-stack/

Canary in the Kernel Mine: Exploiting and Defending Against Same-Type Object Reuse - https://grsecurity.net/exploiting_and_defending_against_same_type_object_reuse

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.12.14.md

Backdoor discovered in PLDT home fiber routers - https://0xsp.com/security%20research%20%20development%20srd/backdoor-discovered-in-pldt-home-fiber-routers/

Firewall analysis: A portable graph based approach -  https://diablohorn.com/2022/04/09/firewall-analysis-a-portable-graph-based-approach/

Ethernet ghosting & NAC bypass – A practical overview - https://www.immunit.ch/blog/2022/10/26/ethernet-ghosting-nac-bypass/

SETTLERS OF NETLINK: Exploiting a limited UAF in nf_tables - https://research.nccgroup.com/2022/09/01/settlers-of-netlink-exploiting-a-limited-uaf-in-nf_tables-cve-2022-32250/

Reverse Engineering and Weaponizing XP Solitaire - https://www.youtube.com/watch?v=ZmPArvsSii4

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.12.12.md

remote-method-guesser: A Java RMI Vulnerability Scanner - https://www.youtube.com/watch?v=t_aw1mDNhzI

Scscanner - Tool To Read Website Status Code Response From The Lists - https://unsafe.sh/go-138666.html

An Introduction To Memory Forensics: Windows Process Internals | by Joseph Moronwi - https://eforensicsmag.com/an-introduction-to-memory-forensics-windows-process-internals-by-joseph-moronwi/

Alternative use cases for SystemFunction032 - https://s3cur3th1ssh1t.github.io/SystemFunction032_Shellcode/

Exploring intricate execution mysteries by reversing a crackme - http://blog.pkh.me/p/34-exploring-intricate-execution-mysteries-by-reversing-a-crackme.html

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.12.10.md

Automating Unsolicited Richard Pics; Pwning 60,000 Digital Picture Frames - https://www.scrawledsecurityblog.com/2022/11/automating-unsolicited-richard-pics.html

A New Way of Exploiting Jolokia RCE&JDBC Attack - https://pyn3rd.github.io/2022/11/15/A-New-Way-to-Trigger-Jolokia-Remote-Code-Execution/

Linux Kernel Exploit Development: 1day case study - https://blog.hacktivesecurity.com/index.php/2022/06/13/linux-kernel-exploit-development-1day-case-study/

Pixel6: Booting up - https://eshard.com/posts/pixel6_bootloader

Bypassing MFA with the Pass-the-Cookie Attack - https://blog.netwrix.com/2022/11/29/bypassing-mfa-with-pass-the-cookie-attack/

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.12.08.md

Novel Pipeline Vulnerability Discovered; Rust  Found Vulnerable - https://www.legitsecurity.com/blog/artifact-poisoning-vulnerability-discovered-in-rust

UART Essential for Pentester - https://negromarco.it/post/uart-essential-for-pentester/

Checkmk: Remote Code Execution by Chaining Multiple Bugs (1/3) - https://blog.sonarsource.com/checkmk-rce-chain-1/

Look out! Divergent representations are everywhere! - https://blog.trailofbits.com/2022/11/10/divergent-representations-variable-overflows-c-compiler/

Hacking Bluetooth to Brew Coffee from GitHub Actions: Part 1 - Bluetooth Investigation - https://grack.com/blog/2022/12/01/hacking-bluetooth-to-brew-coffee-on-github-actions-part-1/

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.12.06.md

Pre-Auth RCE with CodeQL in Under 20 Minutes - https://frycos.github.io/vulns4free/2022/12/02/rce-in-20-minutes.html

Can we block the addition of local Microsoft Defender Antivirus exclusions? - https://blog.nviso.eu/2022/12/02/can-we-block-the-addition-of-local-microsoft-defender-antivirus-exclusions/

Recon Methods Part 1 – OSINT Host Discovery - https://redsiege.com/tools-techniques/2020/02/recon-methods-part-1-osint-host-discovery/

Dumping and extracting the SpaceX Starlink User Terminal firmware - https://www.esat.kuleuven.be/cosic/blog/dumping-and-extracting-the-spacex-starlink-user-terminal-firmware/

What're you telling me, Ghidra? - https://byte.how/posts/what-are-you-telling-me-ghidra/

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.12.04.md

GCP Penetration Testing Notes - https://0xd4y.com/2022/10/01/GCP-Penetration-Testing-Notes/

Flare-On 2022: Nur geträumt - https://0xdf.gitlab.io/flare-on-2022/nur_getraumt

The Blind Spots of BloodHound - https://blog.syss.com/posts/bloodhound-blindspots/

Find way more from the Wayback Machine! - https://github.com/xnl-h4ck3r/waymore

Bypassing Mimecast URL and File Inspection - https://www.netspi.com/blog/technical/social-engineering/bypassing-mimecast-email-defenses/

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.12.02.md

Exploiting CORS Misconfigurations - https://attackshipsonfi.re/p/exploiting-cors-misconfigurations

Exception(al) Failure - Breaking the STM32F1 Read-Out Protection - https://blog.zapb.de/stm32f1-exceptional-failure/

Hacking Smartwatches for Spear Phishing - https://cybervelia.com/?p=1380

SAI #03: Machine Learning Deployment Types, Spark - Architecture and more... - https://swirlai.substack.com/p/sai-03-machine-learning-deployment

[Linux Kernel Exploitation 0x1] Smashing Stack Overflows in the Kernel - https://blog.k3170makan.com/2020/11/linux-kernel-exploitation-0x1-smashing.html

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.11.30.md

Reverse engineering an EV charger - https://www.mnemonic.io/resources/blog/reverse-engineering-an-ev-charger/

Hyperpom: An Apple Silicon Fuzzer for 64-bit ARM Binaries - https://blog.impalabs.com/2211_hyperpom.html

Experimental Nintendo Switch Emulator written in C# - https://github.com/Ryujinx/Ryujinx

Exploiting Wi-Fi Stack on Tesla Model S - https://keenlab.tencent.com/en/2020/01/02/exploiting-wifi-stack-on-tesla-model-s/

Subdomain Enumeration with DNSSEC - https://www.securesystems.de/blog/subdomain-enumeration-with-DNSSEC/

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.11.28.md

Lord Of The Ring0 - Part 1 | Introduction - https://idov31.github.io/2022/07/14/lord-of-the-ring0-p1.html

Control Flow Unflattening - https://eybisi.run/Control-Flow-Unflattening/

Diving into the art of userspace exploitation under Android - Introducing E²VA - https://lolcads.github.io/posts/2022/11/diving_into_the_art_of_userspace_exploitation_under_android/

Recognizing patterns in memory - https://www.timdbg.com/posts/recognizing-patterns/

Detect API hashing with YARA - https://0xc0decafe.com/apihash-to-yara