Переводы статей для xss.pro

Отслеживать

Pwning child company to get access to ParentCompany's Slack Team

> Disclaimer : Prior permissions were taken before performing heavy attacks on the targets below, you should not try this without taking prior permission. The following was reported to a program on HackerOne, I have redacted the company name, lets call it ParentCompany. So, ParentCompany has a...
blog.parthmalhotra.com

XSS to RCE in …

Note: this has been fixed.
medium.com

LibreOffice – A Python Interpreter (code execution vulnerability CVE-2019-9848)

While waiting for a download to complete, I stumbled across an interesting blogpost. The author describes a flaw in LibreOffice that allowed an attacker to execute code. Since this was quite recent, I was interested if my version is vulnerable to this attack and how they fixed it. Thus, I looked...
insinuator.net

COModo: From Sandbox to SYSTEM (CVE-2019–3969)

Antivirus (AV) is a great target for vulnerability hunting: Large attack surface, complex parsing, and various components executing with…
medium.com

Reverse Engineering through Bluetooth Sniffing

In order to kick off our research, we first needed to understand the inner workings of the Jacquard and, specifically, how it communicates…
medium.com

8 methods for bypassing cameras and facial recognition software

Facial recognition systems are becoming more sophisticated. When we post a photo on Facebook accompanied by our closest friend, it is…
medium.com

Error.prepareStackTrace allows to catch cross-origin script errors

Normally it is not possible to properly catch JavaScript runtime errors, which are triggered by cross-domain JavaScript files via HTML scri...
insert-script.blogspot.com

A Deep Dive into XXE Injection - Synack

Written by Synack Sr. Security Program Analyst Trent Gordon Editing and vulnerability reference by Senior Manager, Technical Operations Jake Garner In my career as a Security Program Analyst with Synack, I am privileged to see hundreds of unique attacks, every day, from the best security...
www.synack.com
 
tabac сказал(а):

Pwning child company to get access to ParentCompany's Slack Team

> Disclaimer : Prior permissions were taken before performing heavy attacks on the targets below, you should not try this without taking prior permission. The following was reported to a program on HackerOne, I have redacted the company name, lets call it ParentCompany. So, ParentCompany has a...
blog.parthmalhotra.com

XSS to RCE in …

Note: this has been fixed.
medium.com
Взял и уже приступил
 
Ребята, помогаем. Коллективно процесс пойдет быстрее и интереснее =)

Galaxy Leapfrogging: Pwning the Galaxy S8

Hello everyone, long time no see! Now begins a series of blog posts about bugs I found before and now on Android vendors, including memory corruption and logical bugs, reported and fixed via Pwn2Ow…
blog.flanker017.me
 
admin сказал(а):
Ребята, помогаем. Коллективно процесс пойдет быстрее и интереснее =)

Galaxy Leapfrogging: Pwning the Galaxy S8

Hello everyone, long time no see! Now begins a series of blog posts about bugs I found before and now on Android vendors, including memory corruption and logical bugs, reported and fixed via Pwn2Ow…
blog.flanker017.me
Коллективно с кем?
 
Идет blackhat-2019, поэтому материалов для перевода будет куча! :)




Black Hat 2019 – WhatsApp Protocol Decryption for Chat Manipulation and More - Check Point Research

Research By: Dikla Barda, Roman Zaikin and Oded Vanunu According to sources, WhatsApp, the Facebook-owned messaging application has over 1.5 billion users in over 180 countries. The average user checks WhatsApp more than 23 times per day. And, the number of WhatsApp users in USA is predicted to...
research.checkpoint.com

HTTP Desync Attacks: Request Smuggling Reborn

HTTP Desync Attacks: Request Smuggling Reborn
portswigger.net

Gone to the Dogs

Just in time for our DEF CON workshop “Constructing Kerberos Attacks with Delegation Primitives”, Microsoft failed to meet the disclosure deadline, and so we publish another primitive that can be abused to achieve Windows Local Privilege Escalation (LPE). It affects all domain-joined Windows 10...
shenaniganslabs.io
 

Attacking SSL VPN - Part 2: Breaking the Fortigate SSL VPN | DEVCORE 戴夫寇爾

Last month, we talked about Palo Alto Networks GlobalProtect RCE as an appetizer. Today, here comes the main dish!
devco.re

SELECT code_execution FROM * USING SQLite; - Check Point Research

Gaining code execution using a malicious SQLite database Research By: Omer Gull tl;dr SQLite is one of the most deployed software in the world. However, from a security perspective, it has only been examined through the lens of WebSQL and browser exploitation. We believe that this is just the...
research.checkpoint.com
 
Привет, Всем.
А на этом деле заработать копеечку тут можно?
 
Я бы на постоянку устроился, чтобы собрать себе на здоровье.
 
Пожалуйста, обратите внимание, что пользователь заблокирован
yashechka сказал(а):
Я бы на постоянку устроился, чтобы собрать себе на здоровье.
Привет Яш, рад тут тебя видеть. Тут трудно сказать, сам понимаешь , в ИТ денег нету ни у кого и все на энтузиазме.
Тут можешь вести свою тему, я видел, у тебя новый плейлист по IDA. Продолжай пожалуйста. И позволь тебе предложить вести формат разбора крекмиксов или практический реверс.
Попробуй на складчине поискать клиентов, может воспользуешься, портфолио у тебя есть

Клуб Складчик

Складчина для совместной покупки инфопродуктов - книг, видео, программ, шаблонов, скриптов и многого другого. Огромная аудитория, быстрые и надежные покупки. Присоединяйся!
skladchik.com
 
Пожалуйста, обратите внимание, что пользователь заблокирован

Building a custom malware sandbox with PANDA - Part 1 - Ada Logics

adalogics.com
(жаль, пока 1я часть только)

The state of advanced code injections - Ada Logics

adalogics.com


Intercepting traffic from Android Flutter applications

Update: The explanation below explains the step for ARMv7. For ARMv8 (64bit), see this blogpost. ⚠️ Update August 2022 ⚠️An update to this blog post was written and can be found here. It …
blog.nviso.be
 

Say Cheese: Ransomware-ing a DSLR Camera - Check Point Research

Research by: Eyal Itkin TL;DR Cameras. We take them to every important life event, we bring them on our vacations, and we store them in a protective case to keep them safe during transit. Cameras are more than just a tool or toy; we entrust them with our very memories, and so they are very...
research.checkpoint.com

Reverse RDP Attack: The Hyper-V Connection - Check Point Research

Research by: Eyal Itkin Overview Earlier this year, we published our research on the Reverse RDP Attack. In our previous blog post, we described how we found numerous critical vulnerabilities in popular Remote Desktop Protocol (RDP) clients. However, our research didn’t just end there. In this...
research.checkpoint.com

iMessage URL Deserializing Heap Overflow

iMessage URL Deserializing Heap Overflow
blog.firosolutions.com

Prisma Cloud | Comprehensive Cloud Security

Prisma Cloud is the industry’s most comprehensive Cloud Native Security Platform (CNSP), providing comprehensive security across the largest cloud environments.
www.twistlock.com

LAN-Based Blind SSRF Attack Primitive for Windows Systems (switcheroo)

Unauthenticated attackers on a local network can force stock Windows systems to perform arbitrary HTTP GET requests, including to the target’s localhost interface. No user interaction is required. No IIS installation is required.
initblog.com

SELECT code_execution FROM * USING SQLite; - Check Point Research

Gaining code execution using a malicious SQLite database Research By: Omer Gull tl;dr SQLite is one of the most deployed software in the world. However, from a security perspective, it has only been examined through the lens of WebSQL and browser exploitation. We believe that this is just the...
research.checkpoint.com

Intercepting traffic from Android Flutter applications

Update: The explanation below explains the step for ARMv7. For ARMv8 (64bit), see this blogpost. ⚠️ Update August 2022 ⚠️An update to this blog post was written and can be found here. It …
blog.nviso.be

GitHub - veracode-research/solr-injection: Apache Solr Injection Research

Apache Solr Injection Research. Contribute to veracode-research/solr-injection development by creating an account on GitHub.
github.com

RouterOS Post Exploitation

Shared Objects, RC Scripts, and a Symlink
medium.com
 
admin


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх