#Article

▪️Build reliable and secure C++ programs

اگر از زبان برنامه نویسی C یا ++C استفاده میکنید، این راهنمای مایکروسافت میتونه شما رو در نوشتن کد های قابل اعتمادتر و امن تر کمک کنه.
@Engineer_Computer

Around 12,000 Juniper firewall devices exposed online are vulnerable to a recently disclosed flaw (CVE-2023-36845). This flaw enables unauthenticated code execution without file creation.
Read details: https://thehackernews.com/2023/09/over-12000-juniper-firewalls-found.html

@Engineer_Computer

Sandman, a new cyber threat actor, is targeting telecom providers across continents. Read more about this cyber espionage campaign.
Read: https://thehackernews.com/2023/09/mysterious-sandman-threat-actor-targets.html

@Engineer_Computer

Threat Research
Finding Deserialization Bugs in the SolarWind Platform
https://www.zerodayinitiative.com/blog/2023/9/21/finding-deserialization-bugs-in-the-solarwind-platform

@Engineer_Computer

Offensive security
1. Rollup Security Framework:
A framework for assessing the security of L2s
https://github.com/quantstamp/l2-security-framework

2. Periscope C2 Project
https://github.com/malcomvetter/Periscope

@Engineer_Computer

#HyperDbg

HyperDbg v0.6-beta is released!

Check out: https://github.com/HyperDbg/HyperDbg/releases/tag/v0.6.0-beta

@Engineer_Computer

#DnSpy

Arbitrary code execution via a DLL hijack in DnSpy

در حال حاضر این باگ در ریپوی اصلی DnSpy نسخه های 6.1.8 تا 6.4.0 وجود داره درنتیجه از نسخه جدید dnSpyEx استفاده کنید.

@Engineer_Computer

Malware_analysis
1. DarkGate Indicators of Compromise (IOC)
https://github.com/prodaft/malware-ioc/blob/master/PTI-66/DarkGate.md

2. Deadglyph backdoor
https://www.welivesecurity.com/en/eset-research/stealth-falcon-preying-middle-eastern-skies-deadglyph

3. EvilBamboo Android spyware
https://www.volexity.com/blog/2023/09/22/evilbamboo-targets-mobile-devices-in-multi-year-campaign


@Engineer_Computer

در امن سازي پيشرفته يا سطح عميق به ويژه در سيستم ها و سرويس هاي وابسته به توزيع هاي متنوع لينوكس ميتوانيد از اين دسته ابزار هاي در دسترس استفاده كنيد.

Tools
hardening
Kernel-hardening-checker -
tool for checking the security hardening options of the Linux kernel

There are plenty of security hardening options for the Linux kernel. A lot of them are not enabled by the major distros. We have to enable these options ourselves to make our systems more secure.But nobody likes checking configs manually. So let the computers do their job!
kernel-hardening-checker (formerly kconfig-hardened-check) is a tool for checking the security hardening options of the Linux kernel. It supports checking:
• Kconfig options (compile-time)
• Kernel cmdline arguments (boot-time)
• Sysctl parameters (runtime)
The security hardening recommendations are based on:
• KSPP recommended settings
• CLIP OS kernel configuration
• Last public grsecurity patch (options which they disable)
• SECURITY_LOCKDOWN_LSM patchset
• Direct feedback from the Linux kernel maintainers

https://github.com/a13xp0p0v/kernel-hardening-checker


@Engineer_Computer

Title: Gray Hat Hacking: The Ethical Hacker's Handbook
Year: 2022
Edition: Sixth
Author(s): Writers group
Publisher: McGraw Hill
Language: English
Pages: 704

@Engineer_Computer

Title: Gray Hat Hacking: The Ethical Hacker's Handbook
Year: 2022
Edition: Sixth
Author(s): Writers group
Publisher: McGraw Hill
Language: English
Pages: 704

@Engineer_Computer

#ReverseEngineering #Firmware

▪️ARM firmware reverse-engineering tutorial (bootloader) P1 - P2

U-Boot is an open-source primary bootloader used mainly in embedded devices.

مقاله مهندسی معکوس بوت لودر U-Boot در سامانه های نهفته با استفاده از Ghidra

@Engineer_Computer

#Web #Developer VS #Web #Security #Expert
تفاوت نگاه یک برنامه نویس وب به موضوع امنیت سرویس های تحت وب، با یک متخصص پیشرفته امنیت وب در این است که برنامه نویس وب، آسیب پذیری های عمومی را مورد بررسی و ایمن سازی قرار میدهد اما متخصص امنیت وب بیش از 100 آسیب پذیری حساس در حوزه وب رو مورد بررسی و وا کاوی قرار میدهد.

نمونه ای از تحقیقات برتر متخصصین امنیت وب:

Abusing HTTP hop-by-hop request headers by Nathan Davison

Web Cache Deception Attack by Omer Gil

HTTP Desync Attacks: Request Smuggling Reborn by James Kettle

File Operation Induced Unserialization via the “phar://” Stream Wrapper by Sam Thomas

Remote Code Execution in CouchDB by Max Justicz

Prototype pollution attack in NodeJS application by Olivier Arteau

A New Era of SSRF - Exploiting URL Parser in Trending Programming Languages! by Orange Tsai

Timeless Timing Attacks by Tom Van Goethem & Mathy Vanhoef

How I Hacked Microsoft Teams and got $150,000 in Pwn2Own by Masato Kinugawa

@Engineer_Computer