Source Byte

A Deep Dive into V8 Sandbox Escape Technique Used in In-The-Wild Exploit We were analyzing an in-the-wild V8 vulnerability, CVE-2023–2033. Once we exploited the bug, it was not difficult to get typical exploit primitives such as addrof, read and write in V8 heap. The problem is that we need to escape the V8 sandbox in order to get code execution. https://blog.theori.io/a-deep-dive-into-v8-sandbox-escape-technique-used-in-in-the-wild-exploit-d5dcf30681d4 # CVE-2023–2033 , #cve_analysis

I have no problem. my point is not to make money out of the website. If its earned enough to keep servers running that be enough for me. if something leaks out then its for everyone use it and i will not be sad for a single second. Enjoy the material

The Nightmare of EDR: Storm-0978 Utilizing New Kernel Injection Technique "Step Bear" https://ti.qianxin.com/blog/articles/The-Nightmare-of-EDR-Storm-0978-Utilizing-New-Kernel-Injection-Technique-Step-Bear-EN/

I R O N D O M E B A T T E R I E S I N B I O 😂

you can upload any file as an attachment in a draft comment on any public GitHub repo, delete the comment but the file download URL remains active, and the repo owner can’t do anything about it

updated : part 18 added ETW-ByeBye: Disabling ETW-TI Without PPL

Reverse engineering cpp - Gal Zaban YouTube Everything you Ever wanted to know about dlls YouTube #conference #cpp #windows

כאן חדשות נערת הפיתוי האיראנית: נהג משאית צבאי תיעד, לפי החשד, עשרות סוללות כיפת ברזל במהלך נסיעותיו בתפקיד, ושלח תמונות ומיקומים שלהן בפייסבוק לגורם איראני שהתחזה לאישה #חדשותהע https://twitter.com/kann_news/status/1783218563177742831

" The Open Source Problem " you have software on your machine right now that is running code from one of many similar "suspicious" accounts. https://cybersecpolitics.blogspot.com/2024/04/the-open-source-problem.html #CVE-2024-3094

مایتر اتک ۱۵ 👇 https://attack.mitre.org/resources/updates/updates-april-2024/index.html https://medium.com/mitre-attack/attack-v15-26685f300acc

Windows Device drivers internals and some reversing [ Off by security ] #internals

Refresh AD Groups Membership without Reboot/Logoff Purge the computer account kerberos tickets with: ```klist -lh 0 -li 0x3e7 purge``` Reload User Groups Membership without Logging Off with: klist purge Twitter

Project that generates Malicious Office Macro Enabled Dropper for DLL SideLoading and Embed it in Lnk file to bypass MOTW GITHUB #DLL_SideLoading #Dropper #Lnk

Windows Phantom DLL Hijacking: New Contribution to Hijack Execution Flow – DLL Search Order Hijacking https://interpressecurity.com/resources/windows-phantom-dll-hijacking/ #dll_hijacking