In-depth paper on Memcached DDoS flaw, explaining how:
—packet forgery works with RCE
—memcached was used to store arbitrary data on a large scale for amplification
—PoC for Memory Injection and Mass Exploitation works
https://spuz.me/paper/files/Memcached.pdf #darw1n
—packet forgery works with RCE
—memcached was used to store arbitrary data on a large scale for amplification
—PoC for Memory Injection and Mass Exploitation works
https://spuz.me/paper/files/Memcached.pdf #darw1n
Reverse Engineering SSTIC 2018 — Thomas Dullien (“Halvar Flake”) https://docs.google.com/presentation/d/1ljVUiXVi2PfEdolGXr7Wpepj0x2RxaOo9rzMKWXebG4/edit#slide=id.p #reverse #dukeBarman
Google Docs
Copy of Reverse Engineering
Reverse Engineering Closed, heterogeneous platforms and the defenders’ dilemma Looking back at the last 20 years of RE and looking ahead at the next few SSTIC 2018 -- Thomas Dullien (“Halvar Flake”)
Vulnerability Discovery Against Apple Safari. Evaluating Complex Software Targets for Exploitable Vulnerabilities
http://blog.ret2.io/2018/06/13/pwn2own-2018-vulnerability-discovery/ #expdev #pwn #safari #darw1n
http://blog.ret2.io/2018/06/13/pwn2own-2018-vulnerability-discovery/ #expdev #pwn #safari #darw1n
RET2 Systems Blog
Vulnerability Discovery Against Apple Safari
Vulnerability discovery is the first stage of the exploit development lifecycle. The duration of this phase is open-ended because the search space, code qual...
A collection of materials about iOS vulnerabilities
https://github.com/writeups/iOS #ios #expdev #books #resources #writeups #darw1n
https://github.com/writeups/iOS #ios #expdev #books #resources #writeups #darw1n
GitHub
GitHub - writeups/iOS: Here you can find write ups for iOS Vulnerabilities that have been released.
Here you can find write ups for iOS Vulnerabilities that have been released. - writeups/iOS
http://telegra.ph/Narezka-resursov-dlya-samostoyatelnoj-prokachki-tehnicheskih-skillov-06-13 #uberhahn
Telegraph
Нарезка ресурсов для самостоятельной прокачки технических скиллов
Intro Сегодня я хочу поделиться с тобой различными материалами для самостоятельной прокачки технических скиллов в вопросах практической ИБ. Ведь ни что так не говорит о профессионале как его технические компетенции. К тому же прокаченному спецу платят всегда…
CrashOS is a tool dedicated to the research of vulnerabilities in hypervisors by creating unusual system configurations. CrashOS is a minimalist Operating System which aims to lead to hypervisor crashs, hence its name. You can launch existing tests or implement your owns and observe hypervisor behaviour towards this unusual kernel. https://github.com/airbus-seclab/crashos #MorteNoir
GitHub
GitHub - airbus-seclab/crashos: A tool dedicated to the research of vulnerabilities in hypervisors by creating unusual system configurations.
A tool dedicated to the research of vulnerabilities in hypervisors by creating unusual system configurations. - airbus-seclab/crashos
https://www.rtl-sdr.com/software-defined-radio-for-engineers-free-university-level-text-book-with-plutosdr-examples/
прямая ссылка на книгу
http://www.analog.com/media/en/training-seminars/design-handbooks/Software-Defined-Radio-for-Engineers-2018/SDR4Engineers.pdf #OKOB2016
прямая ссылка на книгу
http://www.analog.com/media/en/training-seminars/design-handbooks/Software-Defined-Radio-for-Engineers-2018/SDR4Engineers.pdf #OKOB2016
rtl-sdr.com
Software Defined Radio for Engineers: Free University Level Text Book with PlutoSDR Examples
Analog Devices has recently released a new text book for free called "Software-Defined Radio for Engineers, 2018". This is an advanced university level text book that covers communication systems theory as well as software defined radio theory and practice.…
Marion Marschalek - 50 shades of Visual Studio - H2HC 2017 https://www.youtube.com/watch?v=H1RIuzc5K6s #conference #dukeBarman
YouTube
Marion Marschalek - 50 shades of Visual Studio - H2HC 2017
Forwarded from Noise Security Bit
Новый эпизод Noise Security Bit 0x19 (о ML/AI и его реальной применимости в задачах ИБ) уже в эфире!! https://noisebit.podster.fm/25
Podster
Noise Security Bit 0x19 (о ML/AI и его реальной применимости в задачах ИБ) | Noise Security Bit
Обсуждаем ML/AI и его реальную применимость в различных задачах ИБ. У нас в гостях: @Dor3s @tracer0tong @d_olex @sh2kerr и @ahack_ru.
Обсудили много всего, начиная от АВ, атак на модели машинного обучения и затронули темы с автоматизацией фазинга. Получилась…
Обсудили много всего, начиная от АВ, атак на модели машинного обучения и затронули темы с автоматизацией фазинга. Получилась…
frida cli for reverse engineer inspired by the epic GDB https://github.com/iGio90/frick #frida #dukeBarman
GitHub
GitHub - iGio90/frick: frick - aka the first debugger built on top of frida
frick - aka the first debugger built on top of frida - iGio90/frick
A repository for learning various heap exploitation techniques. https://github.com/shellphish/how2heap #expdev #linux #heap #darw1n
GitHub
GitHub - shellphish/how2heap: A repository for learning various heap exploitation techniques.
A repository for learning various heap exploitation techniques. - shellphish/how2heap
Decrypting APT33’s Dropshot Malware with Radare2 and Cutter – Part 2 https://www.megabeets.net/decrypting-dropshot-with-radare2-and-cutter-part-2/ #malware #radare2 #dukeBarman
Megabeets
Decrypting APT33's Dropshot Malware with Radare2 and Cutter – Part 2
In this part, we'll continue the analysis of APT33's Dropshot using Cutter, a GUI for radare2. We'll learn how to decrypt Dropshot's payload and write a noscript to do it quickly.
https://gamasutra.com/view/news/320229/Reverseengineered_Diablo_source_code_released_on_GitHub.php #games #reverse #dukeBarman
GAMASUTRA
Reverse-engineered Diablo source code released on GitHub
Heads up, devs: someone who goes by "GalaxyHaxz" has uploaded what appears to be a reverse-engineered version of the original source code (but no game assets) for Blizzard's pioneering 1996 game Diablo to GitHub. While both Diablo
Материалы школы Информационной Безопасности в Яндексе https://academy.yandex.ru/events/system_administration/msk-2018/ #study #yandex #dukeBarman
education.yandex.ru
Яндекс Образование
Делимся знаниями и навыками, чтобы вместе реализовывать самые смелые идеи, расширять границы IT и создавать будущее уже сейчас