Elite Mocca

This is exactly how we solved the challenge. It's crazy that two teams independently solved the challenge with a CPU bug. I wanted to write a write-up earlier but I've been lazy :( Nevertheless this posts pretty much sums it up. Worth reading!http://blog.ret2.io/2019/06/26/attacking-intel-tsx/ …

RDP Over SSH Writeup https://www.reddit.com/r/redteamsec/comments/c1f2gl/rdp_over_ssh_writeup/ … #redteamsec

A threat actor encyclopedia listing APT groups prepared by @ThaiCERT:https://www.dropbox.com/s/ds0ra0c8odwsv3m/Threat%20Group%20Cards.pdf?dl=0 …

XXEs in the wild: -Read access to Google: https://blog.detectify.com/2014/04/11/how-we-got-read-access-on-googles-production-servers/ … -A Facebook XXE with Word: https://www.bram.us/2014/12/29/how-i-hacked-facebook-with-a-word-document/ … -The Wikiloc XXE: https://www.davidsopas.com/wikiloc-xxe-vulnerability/ … #BugBounty #Hacking #pentest #infosec

Lots of new Windows Defender Application Control (WDAC) features documented for 1903! Multiple policy support: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/deploy-multiple-windows-defender-application-control-policies … Path-based rules: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/create-path-based-rules … COM class whitelisting:https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/allow-com-object-registration-in-windows-defender-application-control-policy …

Such a cool blog on debugging exploit UEFI via Intel DCI https://casualhacking.io/blog/2019/6/2/debug-uefi-code-by-single-stepping-your-coffee-lake-s-hardware-cpu … @teddyreedv is the man

How Red Teams Bypass AMSI and WLDP for .NET Dynamic Codehttps://modexp.wordpress.com/2019/06/03/disable-amsi-wldp-dotnet/ …

Trying to follow along the great browser exploitation series of @LiveOverflow, but on V8 instead of JSC, and using Windows/WinDbg instead of Mac/lldb :) Making some notes here:https://medium.com/@stankoja/v8-bug-hunting-part-1-setting-up-the-debug-environment-7ef34dc6f2de …

Awesome blog post by @MrUn1k0d3r! Blog talks about finding COM objects that allows an attacker to get arbitrary command execution:https://www.fireeye.com/blog/threat-research/2019/06/hunting-com-objects.html …

Any guess how to find races through fuzzing? Here's our approach, Razzer (https://github.com/compsec-snu/razzer …), which found 16 new race bugs in the Linux kernel

Are you wondering what free available data sources you could use to detect the @MITREattack Round 1- APT3 (Second Scenario) playbook? @Cyb3rPandaH & I just released the APT3 Mordor dataset here https://github.com/Cyb3rWard0g/mordor/tree/master/large_datasets/apt3 … @x33fcon #ThreatHunting Demo:https://youtu.be/5fpQfpScdnU 

So I have started working on a ghidra tutorial series. The first tutorial is about the installation process. #learnit, #securityhttps://www.reddit.com/r/LiveOverflow/comments/bnrnye/so_i_have_started_working_on_a_ghidra_tutorial/ …