Offensive Terraform Modules

Automated multi step offensive attack modules with Infrastructure as Code(IAC)
https://offensive-terraform.github.io/

Exploit Development (Format Strings Series 1 - 6 which covers :

Intro & dumping sensitive data
Redirecting code flow
More control over the writing process
Rewriting the GOT table
Memory leak + ASLR bypass
x86 exploitation :

https://www.youtube.com/playlist?list=PL9T4qUiaXpm5kpeqEQOpYVUaHF-FyAHHc

https://betrusted.io

A prototype security-foccussed open-software/hardware device (akin to a PDA) for delegating your sensitive information and tasks to. It has a microkernel and userspace in rust and the development version uses a reconfigurable FPGA instead of a CPU.

Betrusted is a secure and private communications system. It gives users an evidence-based reason to believe that private matters are kept private.

Betrusted is more than just an app, and more than just a gadget – it is a co-designed hardware + software solution that provides safe defaults for everyday users. It’s also open source, empowering advanced users to analyze, extend and explore this secure mobile computer.


#betrusted #mobile #phone #alternatives

A visual introduction to probability and statistics

https://seeing-theory.brown.edu

Sandbox evasion

https://search.unprotect.it/map/sandbox-evasion/temperature-sensor/

Nmap 7.90 is released, right after the release of Npcap 1.00.

Sysmon Internals - From File Delete Event to Kernel Code Execution

https://undev.ninja/sysmon-internals-from-file-delete-event-to-kernel-code-execution

Researchers reported security flaws in top ANTIVIRUS software that could make your computers more vulnerable to hackers.

https://thehackernews.com/2020/10/antivirus-software-vulnerabilities.html

Affected vendors have released patches:
—Kaspersky
—McAfee
—Symantec
—Fortinet
—Check Point
—Trend Micro
—Avira
—Microsoft Defender