Forwarded from RME-DisCo @ UNIZAR [www.reversea.me]
TeamTNT Reemerged with New Aggressive Cloud Campaign https://blog.aquasec.com/teamtnt-reemerged-with-new-aggressive-cloud-campaign
Aqua
TeamTNT Reemerged with New Aggressive Cloud Campaign
The botnet run by TeamTNT has set its sights on Docker and Kubernetes environments, Redis servers, Postgres databases, Hadoop clusters, Tomcat and others.
A C++ tool to unstrip Rust and Go binaries (ELF and PE)
Cerberus is the tool you want to use to make RUST and GO static analysis a lot easier.
Based on hashing and scoring systems, it can retrieve lots of symbol names.
Интересная идея!
https://github.com/h311d1n3r/Cerberus
Cerberus is the tool you want to use to make RUST and GO static analysis a lot easier.
Based on hashing and scoring systems, it can retrieve lots of symbol names.
Интересная идея!
https://github.com/h311d1n3r/Cerberus
GitHub
GitHub - h311d1n3r/Cerberus: A C++ tool to unstrip Rust/Go binaries (ELF and PE)
A C++ tool to unstrip Rust/Go binaries (ELF and PE) - h311d1n3r/Cerberus
преза по фазингу от quarkslab
https://github.com/quarkslab/conf-presentations/blob/master/Confs/ntopconf-2023/ntopconf-2023-fuzzing-ntop-rmori.pdf
https://github.com/quarkslab/conf-presentations/blob/master/Confs/ntopconf-2023/ntopconf-2023-fuzzing-ntop-rmori.pdf
GitHub
conf-presentations/Confs/ntopconf-2023/ntopconf-2023-fuzzing-ntop-rmori.pdf at master · quarkslab/conf-presentations
Quarkslab conference talks. Contribute to quarkslab/conf-presentations development by creating an account on GitHub.
This repo is a collection of Rust crates that enable developers to develop Windows Drivers in Rust.
https://github.com/microsoft/windows-drivers-rs
https://github.com/microsoft/windows-drivers-rs
GitHub
GitHub - microsoft/windows-drivers-rs: Platform that enables Windows driver development in Rust
Platform that enables Windows driver development in Rust - microsoft/windows-drivers-rs
A Deep Dive into Brute Ratel C4 payloads – Part 2
https://cybergeeks.tech/a-deep-dive-into-brute-ratel-c4-payloads-part-2/
https://cybergeeks.tech/a-deep-dive-into-brute-ratel-c4-payloads-part-2/
Order of Six Angles
Writing a Debugger From Scratch - DbgRs Part 2 - Register State and Stepping (rust) https://www.timdbg.com/posts/writing-a-debugger-from-scratch-part-2/
Writing a Debugger From Scratch - DbgRs Part 5 - Breakpoints
https://www.timdbg.com/posts/writing-a-debugger-from-scratch-part-5/
https://www.timdbg.com/posts/writing-a-debugger-from-scratch-part-5/
TimDbg
Writing a Debugger From Scratch - DbgRs Part 5 - Breakpoints
(New to this series? Consider starting from part 1)
At the end of the last post, we started to get some interesting functionality with the ability to resolve addresses to names in a module. This was the last functionality missing before we could implement…
At the end of the last post, we started to get some interesting functionality with the ability to resolve addresses to names in a module. This was the last functionality missing before we could implement…
Machine Learning-based Android Malicious App Identification
https://www.liansecurity.com/#/main/news/TPqb0IoBQKl-d7iAEGuS/detail
https://www.liansecurity.com/#/main/news/TPqb0IoBQKl-d7iAEGuS/detail
Стрим, сейчас, конференции Brucon
https://www.brucon.org/2023/streaming/
Видео уже есть и еще появятся тут:
https://youtube.com/@brucontalks?si=fWKzz__ac37TD8nK
https://www.brucon.org/2023/streaming/
Видео уже есть и еще появятся тут:
https://youtube.com/@brucontalks?si=fWKzz__ac37TD8nK
Config extractor for AgentTesla - Discord/Telegram Variant
https://github.com/embee-research/AgentTesla-Config-Extractor
https://github.com/embee-research/AgentTesla-Config-Extractor
GitHub
GitHub - embee-research/AgentTesla-Config-Extractor: Config extractor for AgentTesla - Discord/Telegram Variant
Config extractor for AgentTesla - Discord/Telegram Variant - embee-research/AgentTesla-Config-Extractor
hooking Golang programs
https://blog.quarkslab.com/lets-go-into-the-rabbit-hole-part-1-the-challenges-of-dynamically-hooking-golang-program.html
https://blog.quarkslab.com/lets-go-into-the-rabbit-hole-part-1-the-challenges-of-dynamically-hooking-golang-program.html
Quarkslab
Let’s Go into the rabbit hole (part 1) — the challenges of dynamically hooking Golang programs - Quarkslab's blog
Golang is the most used programming language for developing cloud technologies. Tools such as Kubernetes, Docker, Containerd and gVisor are written in Go. Despite the fact that the code of these programs is open source, there is no way to analyze and extend…