NEW BOT Телеграм, страница

The State of IoT/OT Cybersecurity in
the Enterpris

240 viewsYevgeniy Goncharov, 18:35

Microsoft and GitHub OAuth Implementation Vulnerabilities Lead to Redirection Attacks

https://www.proofpoint.com/us/blog/cloud-security/microsoft-and-github-oauth-implementation-vulnerabilities-lead-redirection

Proofpoint

Microsoft and GitHub OAuth Implementation Vulnerabilities Lead to Redirection Attacks | Proofpoint US

Key Takeaways Vulnerabilities in Microsoft and others’ popular OAuth2.0 implementations lead to redirection attacks that bypass most phishing detection solutions and email security solutions

238 viewsYevgeniy Goncharov, edited 13:55

Sys-Admin Up

Напоминаю: Сегодня в Алматы в 18:00 начнётся Бинарный эвент вместе с r0crewKZ

- Ресерчинг, Атаки, Эксплуатация, и Пиво конечно :)

Детали:
- https://news.1rj.ru/str/sysadm_in_up/916

~~

Remind: Today in Almaty at 06:00 PM we will start Binary event with r0crewKZ

- Researching, Attacking, Exploiting and Beer 🍻 of course :)

Details:
- https://news.1rj.ru/str/sysadm_in_up/916

Sys-Admin Up

Алматы, 11 декабря, сбор на тему бинарщины (update)

В прошлый раз я писал о грядущей встрече, тему бинарщины и не только, осталось менее 10 дней до этой движухи.

В виду чего высылаю почти окончательный вариант тем:
1. Мошенничество OLX: Итоги расследования…

2.77K viewsYevgeniy Goncharov, edited 14:01

Sys-Admin Up

Defend your Wireless Networks

https://www.nzyme.org

Nzyme

Nzyme - Close Access Denial

272 viewsYevgeniy Goncharov, 07:27

Sys-Admin Up

bytedance/monoio: Rust async runtime based on io-uring.
https://github.com/bytedance/monoio

GitHub

GitHub - bytedance/monoio: Rust async runtime based on io-uring.

Rust async runtime based on io-uring. Contribute to bytedance/monoio development by creating an account on GitHub.

241 viewsYevgeniy Goncharov, 04:37

Sys-Admin Up

https://medium.com/ochrona/3-new-malicious-packages-found-on-pypi-a6bbb14b5e2

Medium

3 New Malicious Packages Found on PyPI

Highly Used Packages Identified Through Text Analysis

244 viewsYevgeniy Goncharov, 14:18

Sys-Admin Up

wireless_research_report.pdf

1.2 MB

Attacks on Wireless Coexistence: Exploiting
Cross-Technology Performance Features for
Inter-Chip Privilege Escalation

2.72K viewsYevgeniy Goncharov, 07:11

Sys-Admin Up

254 viewsYevgeniy Goncharov, 08:57

Sys-Admin Up

cdong1012/Rust-Ransomware: Ransomware written in Rust
https://github.com/cdong1012/Rust-Ransomware

GitHub

GitHub - cdong1012/Rust-Ransomware: Ransomware written in Rust

Ransomware written in Rust. Contribute to cdong1012/Rust-Ransomware development by creating an account on GitHub.

2.62K viewsYevgeniy Goncharov, 02:15

Sys-Admin Up

Microsoft Teams Abuse | mr.d0x
https://mrd0x.com/microsoft-teams-abuse/

Mrd0X

Security Research | mr.d0x

Providing security research and red team techniques

267 viewsYevgeniy Goncharov, 10:22

Sys-Admin Up

https://www.prevailion.com/darkwatchman-new-fileness-techniques/

231 viewsYevgeniy Goncharov, 06:40

Sys-Admin Up

https://securityintelligence.com/posts/nation-state-threat-group-targets-airline-aclip-backdoor/

Security Intelligence

Nation State Threat Group Targets Airline with Aclip Backdoor

An attack on an Asian airline was uncovered, likely compromised by a state-sponsored adversary using a new backdoor that utilizes Slack. IBM Security X-Force experts share the findings from their research.

236 viewsYevgeniy Goncharov, 06:41

Sys-Admin Up

https://github.com/FULLSHADE/Auto-Elevate

GitHub

GitHub - FULLSHADE/Auto-Elevate: Escalate from a low-integrity Administrator account to NT AUTHORITY\SYSTEM without an LPE exploit…

Escalate from a low-integrity Administrator account to NT AUTHORITY\SYSTEM without an LPE exploit by combining a COM UAC bypass and Token Impersonation - FULLSHADE/Auto-Elevate

279 viewsYevgeniy Goncharov, 07:45

Sys-Admin Up

https://github.com/j3ssie/Osmedeus

GitHub

GitHub - j3ssie/osmedeus: A Workflow Engine for Offensive Security

A Workflow Engine for Offensive Security. Contribute to j3ssie/osmedeus development by creating an account on GitHub.

283 viewsYevgeniy Goncharov, 11:34

Sys-Admin Up

RansomEXX Tools

This is a tool which can be used to extract the configuration values contained within a RansomEXX decryption tool which was provided by the attackers after an organization pays the ransom.

https://github.com/proferosec/RansomEXX-Tools

GitHub

GitHub - proferosec/RansomEXX-Tools

Contribute to proferosec/RansomEXX-Tools development by creating an account on GitHub.

252 viewsYevgeniy Goncharov, 12:25

Sys-Admin Up

Сегодня планировал выступить с докладом о BLD на локальном митапе, но не успеваю, поэтому буду в прямой трансляции заисывать видео, кому интересно и есть возможность присоединиться в реалтайм, ссылка на YouTube канал:

* https://youtu.be/2byKmp0S9Fk

YouTube

Blocky Listener Daemon (BLD) - Открытый доклад

https://lab.sys-adm.in/

1.57K viewsYevgeniy Goncharov, edited 10:08

Sys-Admin Up

MongoDB - Disable Transparent Huge Pages (THP)

https://docs.mongodb.com/manual/tutorial/transparent-huge-pages/

Mongodb

Disable Transparent Huge Pages (THP)

243 viewsYevgeniy Goncharov, 15:48

Sys-Admin Up

Phishing in Organizations: Findings from a Large-Scale and Long-Term Study

https://arxiv.org/pdf/2112.07498.pdf

229 viewsYevgeniy Goncharov, edited 04:23