Deschide articolul original într-un tab nou Schimbarea acestei opțiuni se aplică imediat și reîncarcă pagina.
LECTURA
Înapoi la articole →

Security 0wnage

sec0wn.blogspot.com/feeds/posts/default
Vizitează site-ul

Cel mai recent articol

Ultima verificare

Urmăritori 0 urmăritori
Articole: 14

  1. PART 2 - From a New Year's surprise to a bag of coal - Analysis of mystery PowerShell (Never trust LLMs)

    (Security 0wnage)

    As shown in my last blog, I took the time to analyze a very complicated, annoying and heavily obfuscated PowerShell that resulted in a payload that the LLM i was using as my intern indicated that it might be related to Red Team or Offensive Security cours…

  2. From a New Year's surprise to a bag of coal - Analysis of mystery PowerShell

    (Security 0wnage)

    On December 29, 2025 one of my VT hunt rules fired off.

  3. HOW DO YOU LIKE DEM EGGS? I LIKE MINE SCRAMBLED, REALLY SCRAMBELED - A LOOK AT A RECENT more_eggs SAMPLES

    (Security 0wnage)

    BACKGROUND The topic of discussion have been covered quite well in the past years.

  4. POWERSING - FROM LNK FILES TO JANICAB THROUGH YOUTUBE & TWITTER

    (Security 0wnage)

    INTRODUCTION This post will discuss an ongoing campaign that have been operational since at least August 2017.

  5. PRB-Backdoor - A Fully Loaded PowerShell Backdoor with Evil Intentions

    (Security 0wnage)

    INTRODUCTION The great people at ClearSky reached out to me a couple of days ago regarding a sample that they suspected could be related to MuddyWater.

  6. Clearing the MuddyWater - Analysis of new MuddyWater Samples

    (Security 0wnage)

    INTRODUCTION It has been over 2 months since I last wrote about MuddyWater or Temp.Zagros as named by FireEye.

  7. A Quick Dip into MuddyWater's Recent Activity

    (Security 0wnage)

    INTRODUCTION Since my last blog-post on MuddyWater operations, they seem to have been continuing their activities and as expected developing/changing some of their tactics and techniques.

  8. Burping on MuddyWater

    (Security 0wnage)

    INTRODUCTION In an earlier blog posts, I wrote about a campaign that was targeting the Middle East (Saudi Arabia, Iraq, UAE, etc).

  9. Continued Activity targeting the Middle East - PART 2

    (Security 0wnage)

    Update 2017-11-15: Palo Alto's Unit42 released a blog with additional details about the same activity and they are dubbing the group behind this as "MuddyWater".

  10. Knock Knock Knocking on EhDoor (The Curious Case of an EPS file)

    (Security 0wnage)

    INTRODUCTION This all started with the great analysis and blog done by RSA in August 2017 about a phishing wave targeting Russian Banks.

  11. Continued Activity targeting the Middle East

    (Security 0wnage)

    This blog will discuss and uncover additional details regarding a recent campaign targeting entities in the Middle East.

  12. Vulnerabilities and Exploits Flying all over in Vancouver

    (Security 0wnage)

    If you want to be a witness to all kinds of new Vulnerabilities and Exploits to major Web Browsers, OS, and Mobile devices, then you should head right away to Vancouver, BC, Canada where the CanSecWest Conference is taking place.

  13. The Reason behind Conficker

    (Security 0wnage)

    If you are in the security field, you probably had heard about the Conficker Worm.

  14. Latest Internet Explorer 0-day Vulnerability Demo

    (Security 0wnage)

    Most of you have already heard or know about the latest 0-day vulnerability affecting Microsoft's Internet Explorer.