Port 22

~ 24 Apr 2019 ~

Uncovering CVE-2019-0232: A Remote Code Execution Vulnerability in Apache Tomcat

Deobfuscating APT32 Flow Graphs with Cutter and Radare2

Vulnerability in French Government Tchap Chat App

Good stuff for AFL fuzzer (intro guide)

The most common OAuth 2.0 Hacks

A quick TLDR of the attacks mentioned in the infamous Mueller report

'Karkoff' Is the New 'DNSpionage' With Selective Targeting Strategy

~ 23 Apr 2019 ~

carbanak source leaked and added to github

GitHub Gist Recon - The art of finding information leaks in GitHub Gists and elsewhere

WannaCryptor accidental hero pleads guilty to malware charges

Stuxnet Family Tree Grows

Termshark - a terminal UI for tshark inspired by Wireshark

Google File Cabinet Plays Host to Malware Payloads

CARBANAK Week Part Two: Continuing the CARBANAK Source Code Analysis

Vulnerability Management ZeroOne Release

Getting access to Zendesks Google Cloud and Artifactory from GitHub dotfile repos

When Every Attack Is a Zero Day

G7 Comes Out in Favor of Encryption Backdoors

GitHub - Cuckoo Sandbox plugin for extracts configuration data of known malware

Hackers Actively Exploiting Widely-Used Social Share Plugin for WordPress

Analysis: Abuse of Custom Actions in Windows Installer MSI to Run Malicious JavaScript, VBScript, and PowerShell Scripts

Fujifilm FCR Capsula X/Carbon X

Rockwell Automation MicroLogix 1400 and CompactLogix 5370 Controllers

Operation ShadowHammer: a high-profile supply chain attack

Analysis of false positive on beian.gov.cn requests in regards to Huawei P30 Pro traffic research

Ignoring Atlassian Confluence Security Advisories? A report...

How I found 5 ReDOS vulnerabilities in Mod Security CRS

1 in 4 Workers Are Aware Of Security Guidelines - but Ignore Them

Behavioral Analysis of Obfuscated Code

Source Code for CARBANAK Banking Malware Found On VirusTotal

~ 22 Apr 2019 ~

Whos Behind the RevCode WebMonitor RAT?

How to obtain Office 365 credentials on Mac OS

WannaCry Hero Hutchins Pleads Guilty to Malware Charges

CARBANAK Week Part One: A Rare Occurrence

Shellcode for IoT: A Password-Protected Reverse Shell (Linux/ARM) - @syscall59

Analyzing C/C++ Runtime Library Code Tampering in Software Supply Chain Attacks

Simple Rules to Protect Against Spoofed & windows.net Phishing Attacks

Excellent Analysis of the Boeing 737 MAX Software Problems

0xACB/viewgen: Payload generator to achieve RCE on .NET servers through leaking the machineKey

Attacking Cloud Containers Using SSRF

~ 21 Apr 2019 ~

What goes wrong if I have your SNMP RW string for a Cisco Device?

GitHub - tg12/OpenMailRelayFuzzer: Fuzzer for finding Open Mail Relays

Modern Vulnerability Research Techniques on Embedded Systems

Week in security with Tony Anscombe

Banking-Grade Credential Stuffing: The Futility of Partial Password Validation

pyEmbed - Small script for Embedding Malicious Python Code into Inconspicuous Python Code

Questionnaire about Information Security Awareness (Working adults +20)

pe3zx/huawei-block-list: Captured DNS requests from Huawei P30 Pro to a block list

WebRTC Adxploits Over DTLS-UDP: The Latest In A Series of Elegant Exploits

~ 20 Apr 2019 ~

HackTheBox: Teacher write-up by Khaotic

Writeup for Teacher machine on HackTheBox

Inaugural issue of CyberBites Newsletter/ezine for InfoSec pros [PDF]

Hack The Box - Teacher Write-up by 0xRick

The Future of Vulnerabilities Equities Processes Around the World

~ 19 Apr 2019 ~

Marcus MalwareTech Hutchins Pleads Guilty to Writing, Selling Banking Malware

miniprint - A medium interaction printer honeypot

Friday Squid Blogging: New Squid Species off the New Zealand Coast

MalwareTech pleads guilty to two charges

A public database exposed medical records of 150k rehab patients

Protected tweets leakage through URL detection #XSSearch #BugBounty

Zero-day XML External Entity (XXE) Injection Vulnerability in Internet Explorer Can Let Attackers Steal Files, System Info

Researchers Find Clues for Dramatically Reducing IDS Traffic Volume

Iranian Cyber-Espionage Tools Leaked Online

APT34 Toolset, Victim Data Leaked via Telegram

Free Princeton Application Provides IoT Traffic Insight