Tessera
Folgen

biazo

@vmcsptr.bsky.social

Hyper-V Enjoyer

4 Posts103 Follower326 Folgt
bohops@bohops.bsky.social · last yr.

[Blog] This ended up being a great applied research project with my co-worker Dylan Tran on weaponizing a technique for fileless DCOM lateral movement based on the original work of James Forshaw. Defensive recommendations provided. - Blog: ibm.com/think/news/f... - PoC: github.com/xforcered/Fo...

Fileless lateral movement with trapped COM objects | IBM

New research from IBM X-Force Red has led to the development of a proof-of-concept fileless lateral movement technique by abusing trapped Component Object Model (COM) objects. Get the details.

ibm.com

Neodyme@neodyme.io · last yr.

Wrapping up our COM hijacking series! 🎉 In the final part, we discuss a custom IPC protocol, use a registry write to gain SYSTEM privileges, and explore Denial of Service attacks on security products. 💥💻 Don't miss it! neodyme.io/en/blog/com_...

The Key to COMpromise - Writing to the Registry (again), Part 4

In this series of blog posts, we cover how we could exploit five reputable security products to gain SYSTEM privileges with COM hijacking. If you've never heard of this, no worries. We introduce all r...

neodyme.io

0xdf@0xdf.bsky.social · 2y ago

Cicada from HackTheBox is a really nice easy introduction to Windows / Active Directory exploitation.

HTB: Cicada

Cicada is a pure easy Windows Active Directory box. I’ll start enumerating SMB shares to find a new hire welcome note with a default password. I’ll RID-cycle to get a list of usernames, and spray that password to find a user still using it. With a valid user I can query LDAP to find another user with their password stored in their description. That user has access to a share with a dev script used for backup, and more creds. Those creds work to get a shell, and the user is in the Backup Operators group, so I can exfil the registry hives and dump the machine hashes.

0xdf.gitlab.io

Neodyme@neodyme.io · 2y ago

🪝Introducing HyperHook! 🪝 A harnessing framework for snapshot-based #fuzzing using Nyx. ⚒️ HyperHook simplifies guest-to-host communication & automates repetitive tasks, making snapshot-fuzzing easier & more efficient! 🔗 Read more: neodyme.io/en/blog/hype...

Introducing HyperHook: A harnessing framework for Nyx

In this post, we introduce HyperHook, a harnessing framework for snapshot-based fuzzing for user-space applications using Nyx. HyperHook simplifies guest-to-host communication and automates repetitive...

neodyme.io

LiveOverflow 🔴@liveoverflow.bsky.social · 2y ago

Kids these days don't even know how much opportunity they have to learn hacking from actual pros. I know there is a lot of content out there, so it can be hard to find the good stuff. But 10 years ago you had to be lucky to find at least something. Anyway, watch this 👇

cts@gf256.bsky.social · 2y ago

My videos for Flare-On 2024 are live! Watch me reverse engineer all the challenges from start to end. 🎉🥳 + Commentary video featuring SuperFashi, where we review the chals together. * 45 hours of content * 400+ GB of raw footage Merry Christmas! Link: www.youtube.com/watch?v=vwW9...

Sean@whatthefuzzvr.bsky.social · 2y ago

Binary diff'ing is hard. But it's super powerful to apply markup from previous reverse engineering efforts to a new binary. Binary Ninja is switching up how they match function signatures with WARP. www.seandeaton.com/binary-ninja... #binaryninja #reverseengineering #ghidra #ida #decompiler

Trying Out Binary Ninja's new WARP Signatures with IPSW Diff'ing

Binary diff'ing is pretty complex, but being able to apply markup from one binary to another is quite powerful. Binary Ninja's new WARP extends previous efforts, using SigKit, to quickly identify libr...

seandeaton.com

maxammann@maxammann.bsky.social · 2y ago

Stability in AFL++/LibAFL is quantified by the percentage of edges in the target that are considered “stable”. If repeatedly sending identical inputs results in the data traversing the same path through the target each time, then the stability is determined to be 100%.

Gyle_dC@gyledc.bsky.social · 2y ago

This is my annual reminder to y'all wonderful folks in infosec: please take care & you're important. Your physical & mental health are important aspects of your life. The work we do & the environments we work in can significantly impact these. There is no shame in taking care of yourself first.💜

4 panel of a comic style drawing. First panel has a T-rex doing a standup comic routine with a speech bubble containing the words "What's the difference between a light bulb and a cybersecurity professional?" Second panel has these words in the speech bubble "A light bulb stops working when it burns out." Third panel has a drawing of sad looking dinosaurs while the fourth panel has the T-rex stand up comedian with tears on its eyes.
David (DWIZZZLE) Weston@dwizzzle.bsky.social · 2y ago

"We're ensuring this platform will enable security solution providers to have the access they need to detect and respond to threats without introducing complexity into the kernel, www.darkreading.com/endpoint-sec...

Microsoft Boosts Device Security With Windows Resiliency Initiative

Microsoft is readying a new release of Windows in 2025 that will have significant security controls such as more resilient drivers and "self-defending" operating system kernel.

darkreading.com