Companion scanner for mockingjay injection - My approach to DLL scanning in search for RWX regions
https://ift.tt/OkDQhnR

Submitted September 09, 2024 at 06:19PM by flamedpt
via reddit https://ift.tt/ClkEIpw

How EDR works: the (Anti-)EDR Compendium
https://ift.tt/kt71OLy

Submitted September 09, 2024 at 03:22PM by AlmondOffSec
via reddit https://ift.tt/0ELKCOi

Exploiting CI / CD Pipelines for fun and profit
https://ift.tt/2DXyRJz

Submitted September 09, 2024 at 05:19AM by mukesh610
via reddit https://ift.tt/v5JKhGi

The state of sandbox evasion techniques in 2024
https://ift.tt/IfZQjKH

Submitted September 03, 2024 at 01:19AM by Fudgedotdotdot
via reddit https://ift.tt/tGXvm4r

Realtime UAC spearphishing idea
https://ift.tt/G2A1NnB

Submitted August 31, 2024 at 06:54AM by david-song
via reddit https://ift.tt/V70O5Nd

Reverse Engineering Set Top Boxes (Blog Series)
https://ift.tt/7VYtAGX

Submitted August 31, 2024 at 04:08AM by cc-sw
via reddit https://ift.tt/zxE1pVZ

Automated Bug Hunting With Semgrep
https://ift.tt/A4KCrs7

Submitted August 26, 2024 at 11:38PM by somersetrecon
via reddit https://ift.tt/xc2LuRl

Somerset Recon

Automated Bug Hunting With Semgrep — Somerset Recon

This presentation covers a static analysis tool Semgrep and how it can be leveraged to find different vulnerabilities in a variety of languages. We initially presented “Automated Bug Hunting with Semgrep” at a local event in San Diego. Due to the positive…

ShellSilo: state-of-the-art tool that converts custom C syntax to syscall assembly/shellcode.
https://ift.tt/WE9B5Je

Submitted August 25, 2024 at 04:28AM by Dismal-Ad-494
via reddit https://ift.tt/MtjzARh

GitHub

GitHub - nixpal/shellsilo

Contribute to nixpal/shellsilo development by creating an account on GitHub.

GNU/Linux Sandboxing - A Brief Review
https://ift.tt/O8JCsYf

Submitted August 26, 2024 at 07:31PM by citypw
via reddit https://ift.tt/Wl6NcS4

hardenedlinux.org

GNU/Linux Sandboxing - A Brief Review

An incomplete review of the sandbox solutions on the GNU/Linux operating system.

CVE-2024-7646: Ingress-NGINX Annotation Validation Bypass
https://ift.tt/XqoIifz

Submitted August 18, 2024 at 09:09PM by oshratn
via reddit https://ift.tt/fDTov1p

ARMO

CVE-2024-7646: Ingress-NGINX Annotation Validation Bypass

Learn how CVE-2024-7646 allows attackers to bypass ingress-nginx validation and compromise Kubernetes clusters, and how to secure your systems