NEW BOT Телеграм, страница

Sys-Admin Up

Microsoft and GitHub OAuth Implementation Vulnerabilities Lead to Redirection Attacks

https://www.proofpoint.com/us/blog/cloud-security/microsoft-and-github-oauth-implementation-vulnerabilities-lead-redirection

Proofpoint

Microsoft and GitHub OAuth Implementation Vulnerabilities Lead to Redirection Attacks | Proofpoint US

Key Takeaways Vulnerabilities in Microsoft and others’ popular OAuth2.0 implementations lead to redirection attacks that bypass most phishing detection solutions and email security solutions

238 viewsYevgeniy Goncharov, edited 13:55

Sys-Admin Up

Напоминаю: Сегодня в Алматы в 18:00 начнётся Бинарный эвент вместе с r0crewKZ

- Ресерчинг, Атаки, Эксплуатация, и Пиво конечно :)

Детали:
- https://news.1rj.ru/str/sysadm_in_up/916

~~

Remind: Today in Almaty at 06:00 PM we will start Binary event with r0crewKZ

- Researching, Attacking, Exploiting and Beer 🍻 of course :)

Details:
- https://news.1rj.ru/str/sysadm_in_up/916

Sys-Admin Up

Алматы, 11 декабря, сбор на тему бинарщины (update)

В прошлый раз я писал о грядущей встрече, тему бинарщины и не только, осталось менее 10 дней до этой движухи.

В виду чего высылаю почти окончательный вариант тем:
1. Мошенничество OLX: Итоги расследования…

2.77K viewsYevgeniy Goncharov, edited 14:01

Sys-Admin Up

Defend your Wireless Networks

https://www.nzyme.org

Nzyme

Nzyme - Close Access Denial

272 viewsYevgeniy Goncharov, 07:27

Sys-Admin Up

bytedance/monoio: Rust async runtime based on io-uring.
https://github.com/bytedance/monoio

GitHub

GitHub - bytedance/monoio: Rust async runtime based on io-uring.

Rust async runtime based on io-uring. Contribute to bytedance/monoio development by creating an account on GitHub.

241 viewsYevgeniy Goncharov, 04:37

Sys-Admin Up

https://medium.com/ochrona/3-new-malicious-packages-found-on-pypi-a6bbb14b5e2

Medium

3 New Malicious Packages Found on PyPI

Highly Used Packages Identified Through Text Analysis

244 viewsYevgeniy Goncharov, 14:18

Sys-Admin Up

wireless_research_report.pdf

1.2 MB

Attacks on Wireless Coexistence: Exploiting
Cross-Technology Performance Features for
Inter-Chip Privilege Escalation

2.72K viewsYevgeniy Goncharov, 07:11

Sys-Admin Up

254 viewsYevgeniy Goncharov, 08:57

Sys-Admin Up

cdong1012/Rust-Ransomware: Ransomware written in Rust
https://github.com/cdong1012/Rust-Ransomware

GitHub

GitHub - cdong1012/Rust-Ransomware: Ransomware written in Rust

Ransomware written in Rust. Contribute to cdong1012/Rust-Ransomware development by creating an account on GitHub.

2.62K viewsYevgeniy Goncharov, 02:15

Sys-Admin Up

Microsoft Teams Abuse | mr.d0x
https://mrd0x.com/microsoft-teams-abuse/

Mrd0X

Security Research | mr.d0x

Providing security research and red team techniques

267 viewsYevgeniy Goncharov, 10:22

Sys-Admin Up

https://www.prevailion.com/darkwatchman-new-fileness-techniques/

231 viewsYevgeniy Goncharov, 06:40

Sys-Admin Up

https://securityintelligence.com/posts/nation-state-threat-group-targets-airline-aclip-backdoor/

Security Intelligence

Nation State Threat Group Targets Airline with Aclip Backdoor

An attack on an Asian airline was uncovered, likely compromised by a state-sponsored adversary using a new backdoor that utilizes Slack. IBM Security X-Force experts share the findings from their research.

236 viewsYevgeniy Goncharov, 06:41

Sys-Admin Up

https://github.com/FULLSHADE/Auto-Elevate

GitHub

GitHub - FULLSHADE/Auto-Elevate: Escalate from a low-integrity Administrator account to NT AUTHORITY\SYSTEM without an LPE exploit…

Escalate from a low-integrity Administrator account to NT AUTHORITY\SYSTEM without an LPE exploit by combining a COM UAC bypass and Token Impersonation - FULLSHADE/Auto-Elevate

279 viewsYevgeniy Goncharov, 07:45

Sys-Admin Up

https://github.com/j3ssie/Osmedeus

GitHub

GitHub - j3ssie/osmedeus: A Workflow Engine for Offensive Security

A Workflow Engine for Offensive Security. Contribute to j3ssie/osmedeus development by creating an account on GitHub.

283 viewsYevgeniy Goncharov, 11:34

Sys-Admin Up

RansomEXX Tools

This is a tool which can be used to extract the configuration values contained within a RansomEXX decryption tool which was provided by the attackers after an organization pays the ransom.

https://github.com/proferosec/RansomEXX-Tools

GitHub

GitHub - proferosec/RansomEXX-Tools

Contribute to proferosec/RansomEXX-Tools development by creating an account on GitHub.

252 viewsYevgeniy Goncharov, 12:25

Sys-Admin Up

Сегодня планировал выступить с докладом о BLD на локальном митапе, но не успеваю, поэтому буду в прямой трансляции заисывать видео, кому интересно и есть возможность присоединиться в реалтайм, ссылка на YouTube канал:

* https://youtu.be/2byKmp0S9Fk

YouTube

Blocky Listener Daemon (BLD) - Открытый доклад

https://lab.sys-adm.in/

1.57K viewsYevgeniy Goncharov, edited 10:08

Sys-Admin Up

MongoDB - Disable Transparent Huge Pages (THP)

https://docs.mongodb.com/manual/tutorial/transparent-huge-pages/

Mongodb

Disable Transparent Huge Pages (THP)

243 viewsYevgeniy Goncharov, 15:48

Sys-Admin Up

Phishing in Organizations: Findings from a Large-Scale and Long-Term Study

https://arxiv.org/pdf/2112.07498.pdf

229 viewsYevgeniy Goncharov, edited 04:23

Sys-Admin Up

The Moscow method is a prioritization technique used in management…

https://en.m.wikipedia.org/wiki/MoSCoW_method

Wikipedia

MoSCoW method

prioritization technique for a common understanding of the importance of the delivery of each requirement

222 viewsYevgeniy Goncharov, edited 06:19

Sys-Admin Up

https://www.imaginarycloud.com/blog/podman-vs-docker/

Imaginarycloud

Podman vs Docker: What are the differences?

Explore a Podman vs Docker comparison. Understand their architecture, performance, and use cases to choose the right container for your workflow.

244 viewsYevgeniy Goncharov, 07:28

Sys-Admin Up

Вот такой вот багет + сертификат можно по бырому получить на алибаба в разделе cloudMonitor

231 viewsYevgeniy Goncharov, 12:28

Sys-Admin Up

Прям свежак, свежак - Установщик GVM 21 на Ubuntu 20+ Пока поддерживается убунту, после планируется Rocky, CentOS. Ставит и собирает готовое vulnerability scanning решение из исходников. https://github.com/m0zgen/install-gvm21 Билдится согласно оф. ману:…

Обновлен инструмент для установки GVM

- Есть возможность ставить GVM 20
- Есть возможность ставить GVM 21
- Есть возможность обновлять GVM 20 > GVM 21

Все тесты проведены на Ubuntu 20.04.3 LTS

https://github.com/m0zgen/install-gvm21

GitHub

GitHub - m0zgen/install-gvm21: 🧘 Script for GVM 21 installs to Ubuntu

🧘 Script for GVM 21 installs to Ubuntu . Contribute to m0zgen/install-gvm21 development by creating an account on GitHub.

3.1K viewsYevgeniy Goncharov, 15:14

About

Blog

Apps

Platform