Source Byte
前往频道在 Telegram
هشیار کسی باید کز عشق بپرهیزد وین طبع که من دارم با عقل نیامیزد Saadi Shirazi 187
显示更多8 555
订阅者
+724 小时
+467 天
+23030 天
帖子存档
8 555
Linux is not a secure operating system
Linux being secure is a common misconception in the security and privacy realm. Linux is thought to be secure primarily because of its source model, popular usage in servers, small userbase and confusion about its security features. This article is intended to debunk these misunderstandings by demonstrating the lack of various, important security mechanisms found in other desktop operating systems and identifying critical security problems within Linux's security model, across both user space and the kernel. Overall, other operating systems have a much stronger focus on security and have made many innovations in defensive security technologies, whereas Linux has fallen far behind.https://madaidans-insecurities.github.io/linux.html credit : madaidan a security researcher who works on various open source projects, mainly Whonix. #hardening , ——— @islemolecule_source
8 555
by the way 4.5 decompiled u can recompile if u have skill u can patch the beacon xss rce bug
8 555
Vulnerability Management Lifecycle in DevSecOps
Vulnerability management overview : Stages of vulnerability management + Identification +Observability +Managementhttps://blog.gitguardian.com/vulnerability-management-lifecycle-in-devsecops/ ——— @islemolecule_source
8 555
📹 #HITB2023AMS D1T2 - Syscalls In Shellcode: Techniques For Malicious Functionality - B. Brizendine
👤 Hack In The Box Security Conference
8 555
How APT groups operate in the Middle East
The Middle East is a target for APT groups How cybercriminals prepared for attacks Gaining initial access Persisting in the system What to study inside Where to find credentials How to collect valuable information Communicating with the C&C server How to cover the tracks How to resist APT attacks About the report Brief description of APT groups Heat map of APT tactics and techniques in the Middle Easthttps://www.ptsecurity.com/ww-en/analytics/apt-groups-in-the-middle-east/ ——— @islemolecule_source
8 555
In- the- Wild Windows LPE 0- days: Insights & Detection Strategies
This article will evaluate detection methods for Windows local privilege escalation techniques based on dynamic behaviors analysis using Elastic Defend features.
credit : SAMIR BOUSSEADEN
https://www.elastic.co/security-labs/itw-windows-lpe-0days-insights-and-detection-strategies
———
@islemolecule_source
8 555
Dev 101: Bypassing ASLR on windows
“Note: This post is quite theoretical (yuk!) but I’ll work on providing a hands-on demo sometime in the future. Also given the current mitigations in Windows, you’ll need much more than bypassing ASLR”
https://www.abatchy.com/2017/06/exploit-dev-101-bypassing-aslr-on.html
8 555
Windows Session Hijacking via CcmExec
https://cloud.google.com/blog/topics/threat-intelligence/windows-session-hijacking-via-ccmexec
8 555
Nim programming which malware developers like that
Nim's cross-compilation features empower attackers to write a single malware variant, which can then be cross-compiled to target different platforms
a good candidate for writing software in a wide variety of application domains, ranging from web applications to kernels
8 555
📹 CppCon 2017: James McNellis “Everything You Ever Wanted to Know about DLLs”
👤 CppCon
8 555
Urgent security alert for Fedora Linux 40 and Fedora Rawhide users
The xz package tar's were backdoored.
https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users
https://twitter.com/badsectorlabs/status/1773759444486177023
