2024-02-02 // Today, relay attack blocker, a code cracker called De4py, and a neat project reporter, PeCoReT. They found weak spots in Tenda routers and are studying a tricky RedLine Stealer malware. SmuggleFuzz spots sneaky web tricks, and Thinkst’s Tokens catch phishers. Google’s oss-fuzz-gen and Red Team Courses teach about computer safety, while DRAKVUF secretly checks for viruses. Synacktiv helps fight hackers, LEAKEY checks for secret leaks, and mydumbedr and CBMC help test and fix our computer guards. SSHimpanzee, CVE-2023-35636, and JS-Tap are awesome tools to protect our computers. We learn to stop sneaky attacks with OAuth tips, keep our 2FA apps safe, and use ExecIT and PurpleLab to practice protecting our computers! [more...]

2024-02-01 // Deploy ulexecve to execute ELF binaries in Linux userland for discreet operations. Soroush Dalili offers insightful methods for exploiting IIS Short File Name issues. Learn how custom EDR systems detect malicious activities, as demonstrated by SensePost’s practical example. Use DIFFER by Trail of Bits to spot bugs in modified software. ADOKit targets Azure DevOps Services, offering reconnaissance and escalation capabilities. Stompy adjusts file MAC times, aiding in forensic countermeasures. Analyze Apache OFBiz vulnerabilities to understand authentication bypasses and implement recommended patches. [more...]

2024-01-31 // Check out BOFHound's new LDAP parsing capabilities and SigFinder's binary authentication signature scanning. Learn how Shielder's analysis of ASUS routers impacts real-world security and explore the use of BOF Launcher for varied programming environments. [more...]

2024-01-30 // Analyze and understand various cyber techniques including LOLSpoof for hiding commands, KrustyLoader for sneaking backdoors, tools for cracking passwords using GDB, BucketLoot for detecting data leaks, TeleTracker for disrupting Telegram channels, and methods for network control with SSH-botnet. [more...]

2024-01-29 // Reversing Soviet era computers chips, Awesome GPT Agents, and espionage by Islamic Revolutionary Guard Corps’ are the top three links for me today. [more...]