uk
Feedback

Не попадись на ботовода! Telemetrio знаходить і позначає такі канали мітками 👉 Хочеш бачити мітку, оформляй підписку

Source Byte

Source Byte

Відкрити в Telegram

هشیار کسی باید کز عشق بپرهیزد وین طبع که من دارم با عقل نیامیزد Saadi Shirazi 187

Показати більше
8 550
Підписники
+1224 години
+477 днів
+23630 днів
Архів дописів
bypassing-av.pdf

Linux is not a secure operating system
Linux being secure is a common misconception in the security and privacy realm. Linux is thought to be secure primarily because of its source model, popular usage in servers, small userbase and confusion about its security features. This article is intended to debunk these misunderstandings by demonstrating the lack of various, important security mechanisms found in other desktop operating systems and identifying critical security problems within Linux's security model, across both user space and the kernel. Overall, other operating systems have a much stronger focus on security and have made many innovations in defensive security technologies, whereas Linux has fallen far behind.
https://madaidans-insecurities.github.io/linux.html credit : madaidan a security researcher who works on various open source projects, mainly Whonix. #hardening , ——— @islemolecule_source

Locating kernel32 in base address Link1 Link2

by the way 4.5 decompiled u can recompile if u have skill u can patch the beacon xss rce bug

Vulnerability Management Lifecycle in DevSecOps Vulnerability management overview : Stages of vulnerability management + Iden
Vulnerability Management Lifecycle in DevSecOps
Vulnerability management overview : Stages of vulnerability management + Identification +Observability +Management
https://blog.gitguardian.com/vulnerability-management-lifecycle-in-devsecops/ ——— @islemolecule_source

📹 #HITB2023AMS D1T2 - Syscalls In Shellcode: Techniques For Malicious Functionality - B. Brizendine 👤 Hack In The Box Security Conference

photo content

VirtualBox E1000 Guest-to-Host Escape https://github.com/MorteNoir1/virtualbox_e1000_0day

How APT groups operate in the Middle East
The Middle East is a target for APT groups How cybercriminals prepared for attacks Gaining initial access Persisting in the system What to study inside Where to find credentials How to collect valuable information Communicating with the C&C server How to cover the tracks How to resist APT attacks About the report Brief description of APT groups Heat map of APT tactics and techniques in the Middle East
https://www.ptsecurity.com/ww-en/analytics/apt-groups-in-the-middle-east/ ——— @islemolecule_source

In- the- Wild Windows LPE 0- days: Insights & Detection Strategies This article will evaluate detection methods for Windows local privilege escalation techniques based on dynamic behaviors analysis using Elastic Defend features. credit : SAMIR BOUSSEADEN https://www.elastic.co/security-labs/itw-windows-lpe-0days-insights-and-detection-strategies ——— @islemolecule_source

Dev 101: Bypassing ASLR on windows “Note: This post is quite theoretical (yuk!) but I’ll work on providing a hands-on demo sometime in the future. Also given the current mitigations in Windows, you’ll need much more than bypassing ASLR” https://www.abatchy.com/2017/06/exploit-dev-101-bypassing-aslr-on.html

+9
SANS all pdfs.part01.rar1024.00 MB

Repost from SoheilSec
photo content

Maldev academy- 91 modules

Nim programming which malware developers like that Nim's cross-compilation features empower attackers to write a single malware variant, which can then be cross-compiled to target different platforms a good candidate for writing software in a wide variety of application domains, ranging from web applications to kernels

📹 CppCon 2017: James McNellis “Everything You Ever Wanted to Know about DLLs” 👤 CppCon

Massimiliano Tomassoli papers in exploitation https://github.com/mtomassoli/papers/tree/master

Urgent security alert for Fedora Linux 40 and Fedora Rawhide users The xz package tar's were backdoored. https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users https://twitter.com/badsectorlabs/status/1773759444486177023