NEW BOT Телеграм, страница

Bypassing Defender with ThreatCheck & Ghidra

— https://offensivedefence.co.uk/posts/threatcheck-ghidra/

offensivedefence.co.uk

Bypassing Defender with ThreatCheck & Ghidra

Intro It should come as no surprise when payloads generated in their default state get swallowed up by Defender, as Microsoft have both the means and motivation to proactively produce signatures for open and closed source/commericial tooling. One tactic to…

265 viewsYevgeniy Goncharov, 01:47

Sys-Admin Up

Forwarded from Sys-Admin InfoSec

/ When Hackers hack the Hackers - Malware Analysis for a group targeting Malware Developers

Detailed analysis revealed Command & Control (C2) connections using Discord for communication.

https://www.r-tec.net/r-tec-blog-when-hackers-hack-the-hackers.html

P.S. Malicious domains with Cobalt Strike C2, Remcos C2 already blocked in OpenBLD.net DNS

www.r-tec.net

When Hackers hack the Hackers

In this post, the malware analysis process, as well as attacker activities and Indicators of Compromise (IoCs) are presented.

265 viewsYevgeniy Goncharov, 02:06

Sys-Admin Up

/ Analysis of CVE-2023-29336 Win32k Privilege Escalation Vulnerability (with POC)

https://www.numencyber.com/cve-2023-29336-win32k-analysis/

Numen

Analysis of CVE-2023-29336 Win32k Privilege Escalation

Analyzing CVE-2023-29336 Win32k vulnerability, its exploitation, and mitigation measures in the context of evolving security practices.

311 viewsYevgeniy Goncharov, 10:36

Sys-Admin Up

Deep Dive into Kerberoasting Attack

https://www.hackingarticles.in/deep-dive-into-kerberoasting-attack/

Hacking Articles

Deep Dive into Kerberoasting Attack

Learn about the Kerberoasting attack, a type of password cracking technique that exploits Kerberos authentication in Windows environments.

352 viewsYevgeniy Goncharov, 22:44

Sys-Admin Up

toxssin

An XSS exploitation command-line interface and payload generator:

https://github.com/t3l3machus/toxssin

GitHub

GitHub - t3l3machus/toxssin: An XSS exploitation command-line interface and payload generator.

An XSS exploitation command-line interface and payload generator. - t3l3machus/toxssin

279 viewsYevgeniy Goncharov, 16:46

Sys-Admin Up

/ Skuld: The Infostealer that Speaks Golang

This new malware strain tries to steal sensitive information from its victims..:

https://www.trellix.com/en-us/about/newsroom/stories/research/skuld-the-infostealer-that-speaks-golang.html

Trellix

Skuld: The Infostealer that Speaks Golang

In May 2023, the Trellix Advanced Research Center discovered a new Golang stealer, known as Skuld, that compromised systems worldwide. The malware targets sensitive information stored in certain applications, such as Discord and web browsers, and the Windows…

2.28K viewsYevgeniy Goncharov, 05:21

Sys-Admin Up

/ Obtaining Domain Admin from Azure AD by abusing Cloud Kerberos Trust

— https://dirkjanm.io/obtaining-domain-admin-from-azure-ad-via-cloud-kerberos-trust/

dirkjanm.io

Obtaining Domain Admin from Azure AD by abusing Cloud Kerberos Trust

Many modern enterprises operate in a hybrid environment, where Active Directory is used together with Azure Active Directory. In most cases, identities will be synchronized from the on-premises Active Directory to Azure AD, and the on-premises AD remains…

263 viewsYevgeniy Goncharov, 11:46

Sys-Admin Up

Forwarded from Sys-Admin InfoSec

Open SysConf'23 ⚡ День Х: 16 сентября (Суббота)

Парни и девочки, день Open SysConf'23 встречи - 16 сентября (суббота) 2023.

Подтягиваем ширинки, блузки, гладим шнурки и волосы (у кого есть) и намереваемся на встречу в этот прекрасный и уверен солнечный во всех отношениях день ☀️

Возможно нашей встрече не хватает именно твоего доклада..?

— Форма регистрации докладчика

Место проведения: выбирается. Локация: Казахстан, г.Алматы.

Всем Peace ✌️

235 viewsYevgeniy Goncharov, 13:18

Sys-Admin Up

Fake Security Researcher GitHub Repositories Deliver Malicious Implant

https://vulncheck.com/blog/fake-repos-deliver-malicious-implant

VulnCheck

VulnCheck - Outpace Adversaries

Vulnerability intelligence that predicts avenues of attack with speed and accuracy.

281 viewsYevgeniy Goncharov, 00:18

Sys-Admin Up

https://gist.github.com/ktsaou/df6556f0702f5263a3f82f6cfd9f5f30

Gist

Command line web server stress testing tool, implemented with curl and real-time statistics to netdata

Command line web server stress testing tool, implemented with curl and real-time statistics to netdata - stress-with-curl.sh

283 viewsYevgeniy Goncharov, 16:01

Sys-Admin Up

GPT-empowered penetration testing tool

PentestGPT:
https://github.com/GreyDGL/PentestGPT

GitHub

GitHub - GreyDGL/PentestGPT: A GPT-empowered penetration testing tool

A GPT-empowered penetration testing tool. Contribute to GreyDGL/PentestGPT development by creating an account on GitHub.

300 viewsYevgeniy Goncharov, edited 04:37

Sys-Admin Up

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

PyRDP:

https://github.com/GoSecure/pyrdp

GitHub

GitHub - GoSecure/pyrdp: RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or…

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact - GoSecure/pyrdp

342 viewsYevgeniy Goncharov, 07:51

Sys-Admin Up

CONPRO2023.pdf

2.1 MB

De-Anonymizing Users’ Geographical Data on the Strava Heatmap

370 viewsYevgeniy Goncharov, edited 07:59

Sys-Admin Up

Linux Tools Diagnostic Map

#tools

551 viewsYevgeniy Goncharov, edited 15:34