Issue #9 of the free @pagedout.bsky.social zine is here! 90 pages of pure technical awesomeness! Please help spread the news ❤️ Web: pagedout.institute/webview.php?... PDF: pagedout.institute/download/Pag... Wallpaper: pagedout.institute/download/Pag... Patreon: www.patreon.com/cw/PagedOut Enjoy!
Paged Out!
Deeply technical zine. And it's free.
pagedout.institute
Okay, I finally learned enough Kdenlive to mash together a more formal video on the general process I took to reverse engineer this device and write my own shitty drivers with python, hope you enjoyyyy :) #reverseengineering #python #linux youtu.be/6yd1vC0Turs
Reverse Engineering: Making USB device drivers for Linux with Python!
YouTube video by ReversingForFun
youtu.be
Thanks for the excellent writeup @intel471.bsky.social www.intel471.com/blog/the-phr...
The Phrack leak: Examining an APT’s workstation
In August 2025, two anonymous researchers released 9 GB of data from a workstation of a likely advanced persistent threat (APT) group. Here’s an analysis of the data by Intel 471’s Cyber Geopolitical ...
intel471.com
Today I have a more serious topic than usual, please consider reposting for reach: My wife and I are urgently looking for a specialist in neuropediatrics or a similar field for our autistic child with a diagnosed, but not further specified, movement disorder [1/4]
👋🏿 Hackers! Are you a Red Teaming Wizard 🧙🏿 looking for a new challenge? @shielder.com is hiring a Red Teaming Lead to join our crew! More info ⬇️ (share appreciated) #hiring #redteaming romhack.io/job-opportun...
RomHack - Job opportunities
Check for RomHack sponsor's job opportunities
romhack.io
do not upload your photo to any ID verification service to BROWSE THE INTERNET i am being so serious id much rather buy a vpn. learn how to pirate. this data is so obviously going to be used in nefarious ways
Working with folks from @lucasfilm.bsky.social, @ilmvfx.bsky.social, and Apple to secure some of the OSS foundations the movie and entertainment industries rely on was so cool! Big shout-out 📣 to the @ostifofficial.bsky.social and ASWF for making this possible.
Shielder@shielder.com · last yr.🚨 New Open Source Audit Alert! 🚨 Shielder, with @ostifofficial.bsky.social & ASWF audited OpenEXR and MaterialX: 🔍 11 issues found (1 critical, 3 still to be published) ✔️ Most fixed, others planned 🗣️ ndaprela @smaury.bsky.social @suidpit.bsky.social @thezero.org Full details in the blog post ⬇️🧵
🚨 *Attention!* We were made aware of a fake “KeePassXC Password Manager Pro” repository on GitHub that links to unverified external binary downloads. - There is NO Pro version of KeePassXC! - You get all the “Pro” features with the regular version. 1/2
Hey artists! Would you like to have your art featured in the print edition of Phrack 72? You can email us at arts@phrack.org
Save the date - BlackHoodie will be offering a free reverse engineering training for women by women in Stockholm at @sec-t.bsky.social conference on September 10th! Thanks to the wonderful people of SEC-T ♥️
New capabilities coming to Microsoft Sentinel this Spring techcommunity.microsoft.com/blog/microso... #MicrosoftSentinel #Cybersecurity #MicrosoftSecurity #Security #DefenderXDR
New capabilities coming to Microsoft Sentinel this Spring | Microsoft Community Hub
New capabilities coming to Microsoft Sentinel this Spring We are excited to share the latest advances coming to Microsoft Sentinel over the next few months...
techcommunity.microsoft.com
Backdoor my ass! At most... usual Chinese poor design choices... 🥲
🌟New report out today!🌟 Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware Analysis & reporting completed by @r3nzsec, @MyDFIR & @MittenSec. Audio: Available on Spotify, Apple, YouTube and more! thedfirreport.com/2025/01/27/c...
Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware
Key Takeaways This intrusion began with the download and execution of a Cobalt Strike beacon that impersonated a Windows Media Configuration Utility. The threat actor used Rclone to exfiltrate data…
thedfirreport.com
I wrote a PoC for the recent Ivanti Connect Secure stack buffer overflow, CVE-2025-0282, based on the exploitation strategy watchTowr published, along with an assessment of exploitability given the lack of a suitable info leak to break ASLR: attackerkb.com/assessments/...
IBM X-Force's Logan Goins has released Krueger, a .NET tool for remotely killing EDR using the Windows Defender Application Control (WDAC) utility github.com/logangoins/K...
GitHub - logangoins/Krueger: Proof of Concept (PoC) .NET tool for remotely killing EDR with WDAC
Proof of Concept (PoC) .NET tool for remotely killing EDR with WDAC - logangoins/Krueger
github.com
Santa's early w/ a new #BloodHoundBasics post!🎅 Looking for new Attack Paths to the domain? 🔎 BH v6.3 introduces CoerceToTGT. The edge connects principals w/ unconstrained delegation to the domain, as attackers can use those to coerce privileged computers & retrieve their TGT.
New module on #NetExec : wam Dump #Entra access tokens from Windows Token Broker Cache, and make your way to Entra 🚀 Thanks @xpnsec.com for the technique! More info on his blog : blog.xpnsec.com/wam-bam/
Python tool that converts Microsoft Defender Antivirus Signatures (VDM) into YARA rules. https://github.com/t-tani/defender2yara
GitHub - t-tani/defender2yara: Convert Microsoft Defender Antivirus Signatures (VDM) into YARA rules
Convert Microsoft Defender Antivirus Signatures (VDM) into YARA rules - t-tani/defender2yara
github.com
A companion blog to my Bluehat 2024 presentation on OleView.NET is up now. googleprojectzero.blogspot.com/2024/12/wind...
googleprojectzero.blogspot.com
i think we should have let the flash plugin live and just allow it to give u viruses. kids these days do not get enough viruses on their computer
New #AADInternals version is finally out now: ▪ Moved endpoint related stuff to new module: AADInternals-Endpoints ▪ Added blue team stuff ▪ Added red team stuff See full change log at: aadinternals.com/aadinternals...
🛡️Windows Firewall and WFP are only two ways to silence an #EDR agent. 📢In my latest blog post I discuss another network based technique to prevent data ingest and ways to detect it. And if you want even more, checkout part 2 released by @Cyb3rMonk Link in the post
EDR Silencers and Beyond: Exploring Methods to Block EDR Communication - Part 1
For red teams and adversary alike it’s important to stay hidden. As many companies nowadays have EDR agents deployed those agents are always in focus and tools like EDRSilencer or EDRSandblast use…
cloudbrothers.info
🚨 Black Friday Deal Alert 🚨 Get 🏟️ Ludus for $0... today and every day! From Debian 12 to full Active Directory lab in just 3 commands. Free. Open Source. Self-hosted. Powerful automation. The best deal is the one that's always free. Try it now at ludus.cloud. (1/2)
Ludus
The easiest way to deploy testing infrastructure
ludus.cloud
Tor Project has "urgent need" for 200 new bridges to bypass Russian censorship blog.torproject.org/call-for-web...
Tor in Russia: A call for more WebTunnel bridges | Tor Project
As the Russian government intensifies its grip on the internet, censorship circumvention tools like Tor are more critical than ever. Here's the latest on Tor censorship in Russia and how you can help ...
blog.torproject.org
