Pinned Tweet
I tweaked overflowedminds.net a little bit and I uploaded trainings, courses, papers, presentations, and posts with the idea in mind that knowledge should be free. Some of the most interesting content follows:
Some time ago, I started to feel a strong aversion to all those tweets by people believing they are modern philosophers, rewarding us with quotes of what they believe are undisputed truths. If you've been around long enough, you know how pretentious it all feels.
In a complete shift of gears, a post about web infrastructure. How to stick together Django, PostgreSQL, Traefik, Docker Compose, and React served via S3 in just one git repository, which will be followed shortly after by a post on implementing CD via GitHub Actions and webhook.
thread below. and this is why we can't have nice things.
newlog retweeted
Also, I'm working on a 4 part deep-dive series on the process I followed to find these vulnerabilities. Parts 1 and 2 are already published:
- Part 1, Laying the Ground: the-hyperbolic.com/posts/hac…
- Part 2, The Command Injections: the-hyperbolic.com/posts/hac…
newlog retweeted
CVE-2020-24297 and CVE-2020-28005, affecting TP-Link's TL-WPA4220, are out!! And so is my brand new blog the-hyperbolic.com!! 🥳
See the details at the-hyperbolic.com/posts/vul…. Feedback is more than welcome!
#infosec #cve #hacking
CVE-2020-24297 httpd on TP-Link TL-WPA4220 devices (versions 2 through 4) allows remote authenticated users to execute arbitrary OS commands by sending crafted POST requests to the endpoint /admin/powerline. Fixed version: TL-WPA4220(EU)_V4_201023 cve.mitre.org/cgi-bin/cvenam…
shame on @Microsoft and @github for taking youtube-dl down. youtube-dl.org/ 9to5google.com/2020/10/23/yo…
newlog retweeted
RED TEAM Operator: MalDev Intermediate course is finally out!
Over 6h of fun with debuggers, assembly/C code and troubleshooting all the moving parts on Windows 10.
And testing new skills with assigned tasks. Good stuff!
Enjoy!
institute.sektor7.net/rto-ma…
#redteam #onlinelearning
newlog retweeted
Happy Malloc Maleficarum anniversary! I’ll celebrate by completing a somewhat old Firefox/jemalloc exploit I left unfinished because the underlying UAF bug was fixed in a release.
seclists.org/bugtraq/2005/Oc…
newlog retweeted
Situational awareness in AD environments. Precise queries and targeted recon #redteam @xforcered github.com/dsnezhkov/Truffle…
newlog retweeted
[NEW BLOG]
Is it possible to take adversary EMULATION too far? I think it is. I propose an 80/20 rule & give an example story.
Threat Intel people will enjoy this topic as well.
Adversary Emulation vs. Bad Copycats
link.medium.com/NnxLg8B7X9