Source Byte

IPv6 Security & Capability Testing series credit : @enno_insinuator [ 1 ] : https://theinternetprotocolblog.wordpress.com/2020/05/24/ipv6-security-capability-testing-part-1/ [ 2 ] : https://theinternetprotocolblog.wordpress.com/2020/05/26/ipv6-security-capability-testing-part-2/ ——— @islemolecule_source

Internals of compilers, linkers, JITs and assemblers with focus on software security hardening) Low-Level Software Security for Compiler Developers: https://llsoftsec.github.io/llsoftsecbook/

Windows exploit development resources Link #windows @islemolecule_source

MuddyWater APT 🇮🇷 targeting telecoms orgs in North and East Africa with custom tools. credit : @1ZRR4H Tracking #MuddyC2Go servers with: - Shodan: LINK - Censys: LINK Active C&C servers: http://94.131.98[.]14:443/ http://95.164.38[.]99:443/ http://94.131.109[.]65:443/ http://45.67.230[.]91:443/ http://45.150.64[.]39:443/ [+] MuddyC2Go PowerShell launcher: LINK REF: LINK

Great project - have a look! [Repo] Azure AD Security Config Analyzer (AADSCA) https://github.com/Cloud-Architekt/AzureAD-Attack-Defense/blob/main/AADSecurityConfigAnalyzer.md Credit: Thomas Naunheim, Sami Lamppu & Markus Pitkäranta #MicrosoftAzure #shiftavenue , #tool

#meme

Source Cocde qBit Stealer

Hello, qBit Stealer is a stealer malware designed with the red teamer in mind. It is completely written in Go, not detectable by EDRs, and is capable of uploading any file to locker of your choice. Utilizing cutting-edge con-currency engine to upload as fast as possible

Download Download Password : blankroom @Bl4nk_Room Enjoy!

http://typeset.io #ai @islemolecule_source

Tackling Anti-Analysis Techniques of GuLoader and RedLine Stealer Link #malware_analysis @islemolecule_source

Ghidra vs Cutter vs Binary Ninja vs IDA Free Link #disassembler @islemolecule_source

VirtualBox internals and exploitation (CVE-2023-21987 and CVE-2023-21991) credit : @qriousec https://qriousec.github.io/post/vbox-pwn2own-2023/ #virtualbox

• Realistic “photos” were published on Reddit , which were generated by AI and are great for identity verification)) In one photo there is a girl with a sign, and in the second - with an ID card. • Now think about what opportunities will open up for criminals when you can buy a passport for pennies on the darknet and generate a realistic photo through AI... • In the comments you can read how the author managed to generate such images: https://www.reddit.com 👀 #informative

We see a lot of threat actors in our Incident Response cases who disable or tamper with the local AV. The website http://privacy.sexy has a copy & paste script to turn off most of Defenders features. [1] How many of these modifications (or deactivations) will trigger an alert in your environment? @DebugPrivilege has written an excellent article about the various event logs Windows Defenders creates, in which event. [2] Run the commands on a test system, and look for gaps in your monitoring 🤓 [1] https://privacy.sexy [2] https://m365internals.com/2021/07/05/why-are-windows-defender-av-logs-so-important-and-how-to-monitor-them-with-azure-sentinel/ #AV , ———

Fuzz Everything, Everywhere, All at Once - Advanced QEMU-based fuzzing https://media.ccc.de/v/37c3-12102-fuzz_everything_everywhere_all_at_once #fuzzing #LibAFL #QEMU ——— @islemolecule_source

Rust to Assembly: Understanding the Inner Workings of Rust . collection of blog posts show how Rust code maps to Assembly https://eventhelix.com/rust/ #rust ———

SQL Brute Force Leads to BlueSky Ransomware credit : @1ZRR4H https://thedfirreport.com/2023/12/04/sql-brute-force-leads-to-bluesky-ransomware/

Initial Access – search-ms URI Handler credit : @hackerfantastic https://pentestlab.blog/2024/01/02/initial-access-search-ms-uri-handler/ #initial_access , ——— @islemolecule_source