All posts by cK-bot

Zero-Day: Vulnerability in JWT Secret Poisoning (CVE-2022-23529). https://unit42.paloaltonetworks.com/jsonwebtoken-vulnerability-cve-2022-23529/ https://nvd.nist.gov/vuln/detail/CVE-2022-23529 https://t.me/cKure/12055

■■□□□ A journey into IoT – Chip identification, BUSSide, and I2C. https://security.humanativaspa.it/a-journey-into-iot-chip-identification-busside-and-i2c/ https://t.me/cKure/12054

Hermit: Deterministic Linux for Controlled Testing and Software Bug-finding. https://developers.facebook.com/blog/post/2022/11/22/hermit-deterministic-linux-testing/ https://t.me/cKure/12052

● Goggle’s answer to disinformation. https://toolbox.google.com/factcheck/explorer https://t.me/cKure/12051

■■□□□ DotDumper (tool): An automatic unpacker and logger for DotNet Framework targeting files. https://github.com/advanced-threat-research/DotDumper https://t.me/cKure/12050

■■■■□ Meddler-in-the-Middle Phishing Attacks Explained. https://unit42.paloaltonetworks.com/meddler-phishing-attacks/ https://t.me/cKure/12049

■■■■□ eBPF: A new frontier for malware. https://redcanary.com/blog/ebpf-malware/ https://t.me/cKure/12048

■■■□□ Andrey Korinets – 35-year-old bodybuilder and IT admin by day, member of Russian intelligence-gathering hacking team, ‘Cold River’ by night. THREAD: Meet Andrey Korinets – 35-year-old bodybuilder and IT admin by day, member of Russian intelligence-gathering hacking team, 'Cold River' by night:https://t.co/iOESaX2wDc pic.twitter.com/Uy6ujn5tSq — James Pearson (@pearswick) January 6, 2023 https://www.reuters.com/world/europe/russian-hackers-targeted-us-nuclear-scientists-2023-01-06/ https://t.me/cKure/12047

■■■■□ Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime. https://github.com/D1rkMtr/UnhookingPatch https://t.me/cKure/12046

■■■■□ DLL Sideloading not by DLLMain. https://www.redteam.cafe/red-team/dll-sideloading/dll-sideloading-not-by-dllmain https://t.me/cKure/12045