ITSEC Asia

Global #APT Research Report for the first half of 2021 Add APT Group:APT-C-59(芜琼洞),APT-C-60(伪猎者),APT-C-30(潜行者/Platinum) Report: github.com/blackorbird/AP…

#EuropeanCyberSecurityChallenge live results at ecsc2021.cz

RCE-0-day-for-GhostScript-9.50: RCE 0-day for GhostScript 9.50 - Payload generator #infosec #pentest #redteam github.com/duc-nt/RCE-0-d…

Sigma rule to detect file creation pattern as noticed in CVE-2021-40444 exploitation Report by @RonnyTNL twitter.com/RonnyTNL/statu… Sysmon config change github.com/Neo23x0/sysmon… Sigma rule github.com/SigmaHQ/sigma/…

Frida 15.1 is out—with a feature that's been requested for years—introducing the brand new Swift bridge! 🎉 Kudos to @hot3eed of @NowSecureMobile for all of the hard work and that went into making this dream come true! ❤️🔥 frida.re/news/2021/09/0…

I never thought one day we could become youtubers. m.youtube.com/watch?v=Oz16xt…

We have to say there are many unseen tricks in the entire of exploit，now it's time for full chain code execution (#CVE-2021-40444)!!!

CVE-2021-40444 is so bad🤦‍♂️

Cheatsheets for Authentication and Key Agreements in 2G, 3G, 4G, and 5G arxiv.org/abs/2107.07416

Released a little tool to perform lateral movement that hide the command you are executing by registering a protocol handler. The protocol handler is executed over WMI by simply running start customhandler:// github.com/Mr-Un1k0d3r/Po… #redteam #pentest ❤

Reliably Finding and Exploiting ICS/SCADA Bugs - A walkthrough of a command inject exploit for Advantech WebAccess zerodayinitiative.com/blog/2020/1/15…

Security without pentests

[Blog] Office 365 was vulnerable to network attacks due to a vulnerability in Microsoft Teams. Here's a demo of an attacker obtaining access to all emails and OneDrive/SharePoint files if the victim joins an attacker controlled network. Details: dirkjanm.io/office-365-net…

The 36 pages of reverse-engineered schematics for the original Game Boy chip (minus CPU) are on Github: github.com/furrtek/DMG-CP… #Gameboy #Nintendo

Припинено діяльність масштабного сервісу для анонімної реєстрації різних акаунтів у месенджерах, соцмережах та поштових сервісах, який використовувався у злочинних цілях, зокрема для псевдомінування. cyberpolice.gov.ua/news/kiberpoli…

Like it ? Give us a like on this post! Love it ? Retweet it! ♥️ #rfid

Oooops, French engineer working for @thalesgroup DMS has his 2 computers (Personal & Professional) stolen. The computers contain military documents encrypted and allegedly concerning submarines radar systems. Official investigation opened at Versailles court. ↘️

As someone who makes TONS of arch diagrams explaining concepts involving @kubernetesio, I have just hit the JACKPOT. Did you know that the community has a set of icons in their GitHub repo? Thank you to the folks who make and maintain these!!! github.com/kubernetes/com…

Metasploit module for CVE-2019-0708 #BlueKeep github.com/RickGeex/msf-m…