📚Data Types and Variables, Operators and Control Structures in C++: Introduction to C++ Programming (2023)

✍️Din Asotić

#book
------
@islemolecule_source

Unpacking PECompect with Redirected Import Table by New Tiger - AT4RE

#reverse
#malware_analysis
------
@islemolecule_source

TD-LTE Irancell modem TK-2510 can be hacked/unlocked!? | Hardware Hack Part 1

Credit : saeed haghi-pour
Language: Persian



https://sisoog.com/2024/02/28/irancell-td-lte-modem-tk-2510-can-be-hacked-unlocked/

PRESS RELEASE: Future Software Should Be Memory Safe

https://www.whitehouse.gov/oncd/briefing-room/2024/02/26/press-release-technical-report/

Phobos Ransomware

https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-060a

#malware_analysis
#malware_dev

A Deep Dive into Cobalt Strike Malleable C2

https://posts.specterops.io/a-deep-dive-into-cobalt-strike-malleable-c2-6660e33b0e0b

#c2

👾 The Malware Museum.

The fact is that when a malware infection occurred, the viruses sometimes showed animations or messages indicating that you were infected. Thanks to this museum, you can play animations and learn information about viruses.

https://archive.org/details/malwaremuseum

#malware_analysis
#malware_dev

Intel Hardware Shield deep dive: part 1 is user-mode System Management Mode (ISRD).

https://tandasat.github.io/blog/2024/02/29/ISRD.html

Black Hat 2022: The Intel PPAM attack story

https://binarly.io/posts/Black_Hat_2022_The_Intel_PPAM_attack_story/

ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMs

https://arxiv.org/abs/2402.11753

How your EDR actually works

https://twitter.com/i/broadcasts/1dRKZErXPQbxB?s=20

#edr
------
@islemolecule_source

Some Notes on Hardening IPv6 Stacks

https://theinternetprotocolblog.wordpress.com/2020/11/16/some-notes-on-hardening-ipv6-stacks/

#internals
------
@islemolecule_source

Buffer Overflow : Exploiting Easy RM to MP3 Converter

https://vandanpathak.com/kernels-and-buffers/buffer-overflow-exploiting-easy-rm-to-mp3-converter/

#book
"The 2024 Crypto Crime Report:
The latest trends in ransomware, scams, hacking and more", Feb. 2024.

Advanced CyberChef Techniques for Configuration Extraction - Detailed Walkthrough and Examples

https://embee-research.ghost.io/advanced-cyberchef-operations-netsupport/

Data Scientists Targeted by Malicious Hugging Face ML Models with Silent Backdoor

https://jfrog.com/blog/data-scientists-targeted-by-malicious-hugging-face-ml-models-with-silent-backdoor/

Red Teaming action practice based on MITER ATT&CK

https://mp.weixin.qq.com/s?__biz=MzAwMzAwOTQ5Nw==&mid=2650941400&idx=1&sn=cb9fda3118d1eced912f9e210c2cd734&chksm=8137396eb640b078190b7846de94f9486b3c2

2023 Top Vulnerabilities

CVE-2023-28252 1– Windows Common Log File System Driver Elevation of Privilege Vulnerability.

CVE-2023-7024– Google Chromium WebRTC Heap Buffer Overflow Vulnerability.

CVE-2023-23397 2– Microsoft Outlook Elevation of Privilege Vulnerability.

CVE-2023-34362– Progress MOVEit Transfer SQL Injection Vulnerability.

CVE-2023-38831– RARLAB WinRAR Code Execution Vulnerability

CVE-2023-21674– Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability.

CVE-2023-23376– Windows Common Log File System Driver Elevation of Privilege Vulnerability.

CVE-2023-32434– Apple Multiple Products Integer Overflow Vulnerability.

CVE-2023-41763– Skype for Business Elevation of Privilege Vulnerability.

CVE-2023-36033– Windows DWM Core Library Elevation of Privilege Vulnerability

https://malware.news/t/2023-top-vulnerabilities/79315