Переводы статей для xss.pro

Отслеживать
Пожалуйста, обратите внимание, что пользователь заблокирован
Взял эти статьи:

Reversing Cisco IOS Raw Binary Firmware Images with Ghidra

Reversing Cisco IOS Raw Binary Firmware Images with Ghidra - 01-reversing-cisco-ios-raw-binary-firmware-images-with-ghidra.md
gist.github.com

Analysis of King Ouroboros Ransomware - maskop9

King Ouroboros is a family of ransomware that encrypts files and appends the .[id=XXXXXXXXXX][Mail=Decrypt_your_data@protonmail.com].limbo extension and drops ransom note file Read-Me-Now.txt.
maskop9.tech

Zero Day Initiative — CVE-2019-12527: Code Execution on Squid Proxy Through a Buffer Overflow

In this excerpt of a Trend Micro Vulnerability Research Service report, Saran Neti and Sivathmican Sivakumaran of the Trend Micro Research Team detail a recent buffer overflow vulnerability in the Squid web proxy. A remote, unauthenticated attacker could exploit this vulnerability by sending a craf
www.zerodayinitiative.com

Finding Hidden API Keys & How to use them

Hi Everyone,
medium.com
 

Exploiting AWS ECR and ECS with the Cloud Container Attack Tool (CCAT)

We created the Cloud Container Attack Tool (CCAT) to leverage Docker containers for attacks against AWS ECS and ECR.
rhinosecuritylabs.com

Extracting Certificates From the Windows Registry

I helped a colleague with a forensic analysis by extracting certificates from the Windows registry. In this blog post, we explain how to do this. The Windows registry contains binary blobs, contain…
blog.nviso.be

A Cryptocurrency Heist, Starring Your Web Browser

Beneath the surface, the modern web is made possible only through a growing labryinth of technology standards. Standards are designed to govern the interoper...
blog.ret2.io

A very deep dive into iOS Exploit chains found in the wild - Project Zero

Posted by Ian Beer, Project ZeroProject Zero’s mission is to make 0-day hard. We often work with other companies to find and report security vulnerabil...
googleprojectzero.blogspot.com

Binary symbolic execution with KLEE-Native

KLEE-Native, a fork of KLEE that operates on binary program snapshots by lifting machine code to LLVM bitcode.
blog.trailofbits.com

Reverse Taint Analysis Using Binary Ninja

We open-sourced a set of static analysis tools, KRFAnalysis, that analyze and triage output from our system call (syscall) fault injection tool KRF. Now you can easily figure out where and why, KRF crashes your programs. During my summer internship at Trail of Bits, I worked on KRF, […]
blog.trailofbits.com

In-the-wild iOS Exploit Chain 1 - Project Zero

Posted by Ian Beer, Project ZeroTL;DRThis exploit provides evidence that these exploit chains were likely written contemporaneously with their supported iOS ...
googleprojectzero.blogspot.com


 
Последнее редактирование:
пару интересных инструментов по реверсу-фаззингу, стоило бы перевести

GitHub - eth-sri/debin: Machine Learning to Deobfuscate Binaries

Machine Learning to Deobfuscate Binaries. Contribute to eth-sri/debin development by creating an account on GitHub.
github.com

GitHub - carbonblack/binee: Binee: binary emulation environment

Binee: binary emulation environment. Contribute to carbonblack/binee development by creating an account on GitHub.
github.com

GitHub - googleprojectzero/DrSancov: DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables

DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables - googleprojectzero/DrSancov
github.com

GitHub - Findomain/Findomain: The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for s

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, ...
github.com

Analysis and Reproduction of iOS/OSX Vulnerability: CVE-2019-7286 - ZecOps Blog

ZecOps Research Team: Analysis and Reproduction of iOS/OSX Vulnerability: CVE-2019-7286
blog.zecops.com

Medium

blog.fadyothman.com

Graphql Bug to Steal Anyone’s Address

Introduction
medium.com

Defcon DFIR CTF 2019 Writeup

This article was prepared with the contribution of Adeo DFIR Team.
medium.com

Exploiting AWS ECR and ECS with the Cloud Container Attack Tool (CCAT)

We created the Cloud Container Attack Tool (CCAT) to leverage Docker containers for attacks against AWS ECS and ECR.
rhinosecuritylabs.com

Extracting Certificates From the Windows Registry

I helped a colleague with a forensic analysis by extracting certificates from the Windows registry. In this blog post, we explain how to do this. The Windows registry contains binary blobs, contain…
blog.nviso.be

Rooting RouterOS with a USB Drive

Putting CVE-2019–15055 to Work
medium.com
 
Пожалуйста, обратите внимание, что пользователь заблокирован
tabac сказал(а):
пару интересных инструментов по реверсу-фаззингу, стоило бы перевести

GitHub - eth-sri/debin: Machine Learning to Deobfuscate Binaries

Machine Learning to Deobfuscate Binaries. Contribute to eth-sri/debin development by creating an account on GitHub.
github.com

GitHub - carbonblack/binee: Binee: binary emulation environment

Binee: binary emulation environment. Contribute to carbonblack/binee development by creating an account on GitHub.
github.com

GitHub - googleprojectzero/DrSancov: DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables

DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables - googleprojectzero/DrSancov
github.com

GitHub - Findomain/Findomain: The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for s

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, ...
github.com

Analysis and Reproduction of iOS/OSX Vulnerability: CVE-2019-7286 - ZecOps Blog

ZecOps Research Team: Analysis and Reproduction of iOS/OSX Vulnerability: CVE-2019-7286
blog.zecops.com

Medium

blog.fadyothman.com

Graphql Bug to Steal Anyone’s Address

Introduction
medium.com

Defcon DFIR CTF 2019 Writeup

This article was prepared with the contribution of Adeo DFIR Team.
medium.com

Exploiting AWS ECR and ECS with the Cloud Container Attack Tool (CCAT)

We created the Cloud Container Attack Tool (CCAT) to leverage Docker containers for attacks against AWS ECS and ECR.
rhinosecuritylabs.com

Extracting Certificates From the Windows Registry

I helped a colleague with a forensic analysis by extracting certificates from the Windows registry. In this blog post, we explain how to do this. The Windows registry contains binary blobs, contain…
blog.nviso.be

Rooting RouterOS with a USB Drive

Putting CVE-2019–15055 to Work
medium.com
Можно выделить именно преимущественные статьи? Пожалуйтса
 
Последнее редактирование:
Пожалуйста, обратите внимание, что пользователь заблокирован
Взял эти статьи и инструменты:

GitHub - Findomain/Findomain: The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for s

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, ...
github.com

GitHub - googleprojectzero/DrSancov: DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables

DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables - googleprojectzero/DrSancov
github.com

GitHub - carbonblack/binee: Binee: binary emulation environment

Binee: binary emulation environment. Contribute to carbonblack/binee development by creating an account on GitHub.
github.com

GitHub - eth-sri/debin: Machine Learning to Deobfuscate Binaries

Machine Learning to Deobfuscate Binaries. Contribute to eth-sri/debin development by creating an account on GitHub.
github.com

Analysis and Reproduction of iOS/OSX Vulnerability: CVE-2019-7286 - ZecOps Blog

ZecOps Research Team: Analysis and Reproduction of iOS/OSX Vulnerability: CVE-2019-7286
blog.zecops.com

Graphql Bug to Steal Anyone’s Address

Introduction
medium.com

Extracting Certificates From the Windows Registry

I helped a colleague with a forensic analysis by extracting certificates from the Windows registry. In this blog post, we explain how to do this. The Windows registry contains binary blobs, contain…
blog.nviso.be

Rooting RouterOS with a USB Drive

Putting CVE-2019–15055 to Work
medium.com
 
В начале лета PreAuth RCE в клиенте GlobalProtect от PaloAlto, потом несколько уязвимостей в FortiOS связанные с SSL VPN, а сегодня целых 7 уязвимостей в сервисе Pulse Connect Secure, который используется аж сотрудниками Twitter для организации VPN подключений!

часть 1 - https://blog.orange.tw/2019/07/attacking-ssl-vpn-part-1-preauth-rce-on-palo-alto.html
часть 2 - https://blog.orange.tw/2019/08/attacking-ssl-vpn-part-2-breaking-the-fortigate-ssl-vpn.html
часть 3 - https://blog.orange.tw/2019/09/attacking-ssl-vpn-part-3-golden-pulse-secure-rce-chain.html

статья об этом же, но простенько, сжато и простыми словами (не так интересно, как оригинальное исследование) https://medium.com/@valeriyshevchen...et-ssl-vpns-in-the-wild-internet-3991ea9e6481
 
Нашел еще 1 интересный сайт, если есть возможно то некоторые статьи можно перевести на ru.

HAXK.UR

YOUR DESCRIPTION HERE
www.haxkur.ml

Единственная проблема, что инфа на испанском.
 
 
сайт с офигенно полезными статьями, переводить можно буквально все, что там есть

Writing ARM Shellcode

azeria-labs.com

серия о багах в iOS

Heap Exploit Development

azeria-labs.com


Ghidra firmware utilities, wrap-up

Hi everyone. The official programming period for GSoC 2019 is now over, and it's time for final evaluations. I will use this post to summarize what I've worked on this summer, as well as how to use the Ghidra plugin. The project is available on GitHub:
blogs.coreboot.org

Prisma Cloud | Comprehensive Cloud Security

Prisma Cloud is the industry’s most comprehensive Cloud Native Security Platform (CNSP), providing comprehensive security across the largest cloud environments.
www.twistlock.com

VirusTotal APK Malware Detection Data - Week 35: 20190826-20190901

At Trustlook, we monitor live feed from VirusTotal (VT). On a daily basis, we collect APK samples from VT along with detection results from Anti-Virus (AV) vendors hosted on VT. Using a conservative labeling policy, we are able to select thousands of benign and malicious APK samples from...
blog.trustlook.com

Analysis and Reproduction of iOS/OSX Vulnerability: CVE-2019-7286 - ZecOps Blog

ZecOps Research Team: Analysis and Reproduction of iOS/OSX Vulnerability: CVE-2019-7286
blog.zecops.com


Roaming Mantis(MoqHao/XLoader): spreads via SMShing

research:graywire [Wiki]

blog.lambdaconcept.com
 
https://xss.pro/threads/31863/
Вчерашний, корпел над перекрасской важных цветов в коде для большего понимания, а код всё равно однотонный получился.
 
tabac сказал(а):
серия о багах в iOS

Heap Exploit Development

azeria-labs.com
Я тут недавно, но пока возьму вот это.

По возможности постараюсь всю серию осилить, по мере публикации.
 
Привет. Возьмите кто нибудь на перевод, у кого есть желание и время:

GitHub - bhavsec/reconspider: 🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.

🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations. - bhavsec/reconspider
github.com

Skylight Cyber | Cylance, I Kill You!

Read about our Journey of dissecting the brain of a leading AI based Endpoint Protection Product, culminating in the creation of a universal bypass
skylightcyber.com
 
А это возьму

Skylight Cyber | Cylance, I Kill You!

Read about our Journey of dissecting the brain of a leading AI based Endpoint Protection Product, culminating in the creation of a universal bypass
skylightcyber.com
 
admin


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх