NEW BOT Телеграм, страница

/ An integer underflow in WhatsApp for Android prior to v2.22.16.2, WhatsApp for iOS v2.22.15.9 could have caused remote code execution when receiving a crafted video file.

https://www.whatsapp.com/security/advisories/2022/

WhatsApp.com

WhatsApp Security Advisories 2022

WhatsApp Security Advisories 2022 - List of security fixes for WhatsApp products

3.47K viewsYevgeniy Goncharov, 18:00

Sys-Admin Up

Android leaks connectivity check traffic

https://mullvad.net/en/blog/2022/10/10/android-leaks-connectivity-check-traffic/

Mullvad VPN

Android leaks connectivity check traffic | Mullvad VPN

An ongoing security audit of our app identified that Android leaks certain traffic, which VPN services cannot prevent. The audit report will go public soon. This post aims to dive into the finding, called MUL22-03.

239 viewsYevgeniy Goncharov, 10:39

Sys-Admin Up

Forwarded from Sys-Admin InfoSec

Open SysConf'22 - Анонс всех докладов на завтра (14 Октября)

До дня Х осталось меньше суток, завтра по плану будет:

— 11:00 - Вступительное слово
— 11:15 - Сабыржан "novitoll" Тасболатов: Практический опыт с 4G, 5G
— 12:15 - Нурбиби "R0b0Cat": Шаблонизация Linux систем в организациях
— 13:00 - Обед
— 14:00 - Дмитрий "ватман": CDC
— 14:50 - Kutlymurat "manfromkz" Mambetniyazov: История одного CVE
— 15:20 - Roman "sysroman": Ansible AWX by Oracle
— 15:45 - кофе-брейк
— 16:00 - Shelldon "Sh3lldon": DEP vs ROP
— 16:50 - Ilyas B Arinov "t2micro": Старый... Но не бесполезный IRC
— 17:20 - Айдар Оспанбеков: Сети (хуети) в современном датацентре
— 18:05 - Yevgeniy "sysadminkz": Неявный превентинг констракшн

План может меняться, уже не обессудьте. Заряжаем себя и друзей, находим силы и возможности и проводим нашу встречу в добром здравии и отношении.

☀️ Завтра встречаем Вас на первом этаже - ул. Байзакова 280 в SmartPoint, г.Алматы
⚡️ Кто не зарегистрировался, зарегистрируйтесь пожалуйста иначе мест Вам может не хватить, детали здесь: https://sysconf.io

Всем Peace ✌️

208 viewsYevgeniy Goncharov, 06:14

Sys-Admin Up

CNAME, Cookies, XSS and Godaddy

https://medium.com/@turbobarsuchiha/cname-cookies-xss-and-godaddy-5828c3e2040c

Medium

CNAME, Cookies, XSS and Godaddy.

The issue was first reported on February 26, 2020, but as of April 26, 2020 the problem remains.

244 viewsYevgeniy Goncharov, 14:25

Sys-Admin Up

FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684)

PoC

https://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/

Horizon3.ai

FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684)

Fortinet recently patched a critical authentication bypass vulnerability that gives an attacker the ability to login as an administrator,

3.07K viewsYevgeniy Goncharov, 04:39

Sys-Admin Up

Сегодня у меня еще одно приятное событие (как миниму для меня).

Вышла копия моей первой, коротенькой книги с дополнительным эпилогом на ЛитРес 🎉

https://www.litres.ru/evgeniy-point/prohozhii/

Оригинал здесь:

https://sys-adm.in/live/991-prokhozhij-rasskaz.html

ЛитРес

Прохожий — Евгений Поинт | ЛитРес

Разочарованный и разбитый, идущий явно на пути к разрушению человек встречает по пути прохожего, который, рассказав историю уходит, а сама история и предмет, который этот прохожий оставил человеку, меняют жизнь этого человека…

249 viewsYevgeniy Goncharov, 11:08

Sys-Admin Up

Forwarded from Sys-Admin InfoSec

/ Introducing the Fleet Public Preview

I tried it.. Not bad.. not bad:

https://blog.jetbrains.com/fleet/2022/10/introducing-the-fleet-public-preview/

The JetBrains Blog

Introducing the Fleet Public Preview | The Fleet Blog

Since the initial announcement of Fleet, we have had an overwhelming amount of interest from all of you, with over 137,000 people signing up for the private preview. Our reason for starting with a clo

210 viewsYevgeniy Goncharov, 04:51

Sys-Admin Up

How We Managed to Abuse a Custom Role User Using CSTI and Stored XSS in Azure Fabric Explorer

https://orca.security/resources/blog/fabrixss-vulnerability-azure-fabric-explorer/

Orca Security

FabriXss: Azure Fabric Explorer Exploit | Orca Research Pod

The Orca Research Pod has discovered FabriXss, a vulnerability in Azure Service Fabric Explorer that allows attackers to gain full administrator permissions.

2.65K viewsYevgeniy Goncharov, edited 14:41

Sys-Admin Up

How to monitor Redis with Prometheus and Grafana for Real-Time Analytics

https://developer.redis.com/howtos/redistimeseries/using-prometheus/

288 viewsYevgeniy Goncharov, 10:05

Sys-Admin Up

Rust-based Tauri framework

Tauri is a new framework that helps you build cross-platform desktop applications. Tauri is built based on the Rust lang:

https://tauri.app/

Tauri

Tauri 2.0

The cross-platform app building toolkit

235 viewsYevgeniy Goncharov, 11:17

Sys-Admin Up

How to Fix and Debug Docker Containers Like a Superhero

https://www.docker.com/blog/how-to-fix-and-debug-docker-containers-like-a-superhero/

Docker

How to Fix and Debug Docker Containers Like a Superhero | Docker

Container errors are tricky to diagnose, but some investigative magic works wonders. Read along to learn how to debug Docker containers.

267 viewsYevgeniy Goncharov, 11:26

Sys-Admin Up

Extracting-User-Locations-From-Mobile-Instant-Messengers.pdf

2 MB

Extracting User Locations From Mobile Instant Messengers

267 viewsYevgeniy Goncharov, edited 16:15

Sys-Admin Up

OSCE³ Study Guide

https://github.com/CyberSecurityUP/OSCE-Complete-Guide

GitHub

GitHub - CyberSecurityUP/OSCE3-Complete-Guide: OSWE, OSEP, OSED, OSEE

OSWE, OSEP, OSED, OSEE. Contribute to CyberSecurityUP/OSCE3-Complete-Guide development by creating an account on GitHub.

272 viewsYevgeniy Goncharov, 07:33

Sys-Admin Up

From Lua to JSON: refactoring WirePlumber's configuration system

https://www.collabora.com/news-and-blog/blog/2022/10/27/from-lua-to-json-refactoring-wireplumber-configuration-system/

Collabora | Open Source Consulting

From Lua to JSON: refactoring WirePlumber's configuration system

With the upcoming 0.5 release, WirePlumber's configuration system will be moving to a JSON syntax to define settings, bringing a more unified configuration approach across the PipeWire ecosystem.

282 viewsYevgeniy Goncharov, 10:48

Sys-Admin Up

RANSOMWARE VICTIMS AND NETWORK ACCESS SALES IN Q3 2022

https://ke-la.com/wp-content/uploads/2022/10/KELA-RESEARCH_Ransomware-Victims-and-Network-Access-Sales-in-Q3-2022.pdf

231 viewsYevgeniy Goncharov, 00:31

Sys-Admin Up

https://blog.0patch.com/2022/10/free-micropatches-for-bypassing-motw.html

0Patch

Free Micropatches For Bypassing MotW Security Warning with Invalid Signature (0day, now CVE-2022-44698 and CVE-2023-24880)

by Mitja Kolsek, the 0patch Team Update 12/13/2022: Microsoft patched this issue with December 2022 Windows Updates and assigned it CVE-2022...

226 viewsYevgeniy Goncharov, 06:12

Sys-Admin Up

How we handled a recent phishing incident that targeted Dropbox

Breached Dropbox repos through CircleCI phishing attack. Official denoscription about this from Dropbox security team:

https://dropbox.tech/security/a-recent-phishing-campaign-targeting-dropbox

dropbox.tech

How we handled a recent phishing incident that targeted Dropbox

219 viewsYevgeniy Goncharov, edited 10:20

About

Blog

Apps

Platform