Bore - CLI tool for making tunnel in localhost written in Rust

https://news.1rj.ru/str/sysadm_in_channel/3936

Detecting Spring4Shell (CVE-2022-22965) with Wazuh

https://wazuh.com/blog/detecting-spring4shell-cve-2022-22965-with-wazuh/

A blueprint for evading industry leading endpoint protection in 2022

In this post, I’d like to lay out a collection of techniques that together can be used to bypassed industry leading enterprise endpoint protection solutions. This is purely for educational purposes for (ethical) red teamers and alike, so I’ve decided not to publicly release the source code. The aim for this post is to be accessible to a wide audience in the security industry, but not to drill down to the nitty gritty details of every technique. Instead, I will refer to writeups of others that deep dive better than I can:

https://vanmieghem.io/blueprint-for-evading-edr-in-2022/

Make phishing great again. VSTO office files are the new macro nightmare?

Visual Studio Tools for Office (VSTO) has the capability to export an Add-In which is embedded inside an Office document file (such as a Word DOCX). If this document is delivered in the right way (to avoid some inbuilt mitigations) it provides rich capabilities for attackers to phish users and gain code execution on a remote machine through the installation of a word Add-In:

https://medium.com/@airlockdigital/make-phishing-great-again-vsto-office-files-are-the-new-macro-nightmare-e09fcadef010

Limited Linux user creation noscript

Few time ago I needed create few limited users in my Linux distos, with limits - user can run only several commands - curl, ping…
Ok, I created simple noscript for this task… in short - sharing for you:

https://github.com/m0zgen/create-limited-user

P.S. All commands you can add in to commands.txt, all functionality described in the README.md, enjoy)

A Simple, Lightweight, Efficent JSON based DataBase for Python

https://github.com/pysonDB/pysonDB

lexical - an extensible text editor framework that does things differently

https://lexical.dev

GH - https://github.com/facebook/lexical

Vagrant beyond the basics

https://fedoramagazine.org/vagrant-beyond-basics/

YDB server (daemon) source code

https://github.com/ydb-platform/ydb

Intercept traffic with light open projects

- ad-mitm - https://github.com/epitron/mitm-adblock
- ad-proxy - https://github.com/threedaymonk/adproxy
- goward - https://golangrepo.com/repo/chdav-GoWard
- execrcise for develeporr with mitm-play - https://www.npmjs.com/package/mitm-play

Poland.Business Harbour - How to migrate you with new work in Poland

Russian/English, recommendations and etc., made from GOV.PL:

* https://www.gov.pl/web/poland-businessharbour-en
* [RU] Информация для русскоговорящих. ИТ специлисты которые могут уехать работать в Польшу, особенно двери отркыты для специлистов из: Армении, Грузии, Молдавии, Украины, Азербайджана, РФ… а вот КЗ например в пролете…

- https://www.gov.pl/web/poland-businessharbour-ru/itspecialist

#work #poland

Cyber Security University is a curated list of free educational resources that focuses on learn by doing.

(tryhackme links collection)

https://github.com/brootware/Cyber-Security-University

SSH Tunnels SIMPLIFIED

Using SSH tunnels is the most magical, incredible, HORRIBLY CONFUSING thing you can do with SSH. But once you understand how they're actually redirecting traffic, using them becomes second nature. Plus you can do sneaky things like getting around a firewall and accessing servers that are supposed to be hidden…:

https://www.youtube.com/watch?v=Wp7boqm3Xts