0Day

#tools #Offensive_security 1. BokuLoader - Cobalt Strike Reflective Loader https://github.com/boku7/BokuLoader 2. ETW/AMSI Lifetime patch https://github.com/EvilBytecode/Lifetime-Amsi-EtwPatch

#Malware_analysis 1. Microsoft Management Console for initial access/evasion https://www.elastic.co/security-labs/grimresource 2. BadSpace Backdoor https://www.gdatasoftware.com/blog/2024/06/37947-badspace-backdoor 3. Diamorphine rootkit variant https://decoded.avast.io/davidalvarez/new-diamorphine-rootkit-variant-seen-undetected-in-the-wild

#Blue_Team_Techniques 1. How to detect (headless) Chrome instrumented with Puppeteer (2024 edition) https://deviceandbrowserinfo.com/learning_zone/articles/detecting-headless-chrome-puppeteer-2024 2. Tool to check rootkits in Windows (7-11) kernel https://github.com/ExaTrack/Kdrill

#exploit 1. Analysis of CVE-2024-25065: Apache OFBiz Security bypass https://blog.securelayer7.net/security-bypass-in-apache-ofbiz 2. CVE-2024-29973: Command injection in Zyxel NAS326 firmware https://github.com/bigb0x/CVE-2024-29973

#Malware_analysis Windows Processes, Nefarious Anomalies, and You: Part 1 - Memory Regions https://www.trustedsec.com/blog/windows-processes-nefarious-anomalies-and-you-memory-regions Part 2 - Threads https://www.trustedsec.com/blog/windows-processes-nefarious-anomalies-and-you-threads

#reversing #Hardware_Security Recovering an ECU firmware using disassembler and branches https://blog.quarkslab.com/recovering-an-ecu-firmware-using-disassembler-and-branches.html

#Offensive_security 1. Exploiting the Flexibility of Email Addresses For Offensive Purposes https://modzero.com/en/blog/beyond_the_at_symbol 2. Lifetime AMSI bypass https://github.com/EvilBytecode/Lifetime-AmsiBypass

🚫Bypass 403 - Forbidden Method HTTP Headers Fuzzing🔥