Creează un cont pentru a te abona la acest blog și a-i urmări articolele pe pagina Lectură.
-
Attacking At Elasticsearch: Beyond Just Dumping Data
About The Project Elasticsearch is a key component in many backend centralized logging stacks.
-
Tracking Cryptocurrency Malware In The Homelab - Pt 2
About The Project Continuing from the last blog post that discussed malicious Linux Cryptocurrency miners, I have discovered new activity that blends two of my previous Cryptocurrency mining malware (aka Cryptojacking) blog posts.
-
Auditd CVE 2021-3156
About The Project CVE-2021-3156 is a 10-year-old sudo vulnerability that allows for privilege escalation in Linux environments.
-
Introduction to Ghidra Scripting for Embedded ELFs and UPX
About the Project The more Cryptominer malware I look at (or anything targeting Linux), the more trends I’ve identified that are common regardless of the underlying intent.
-
DLL Hijacking for Persistence - SteelSeries Engine
About The Project With the pandemic in full swing and work from home being normal it’s natural to upgrade your home setup to make work as enjoyable as possible.
-
Tracking Cryptocurrency Malware in The Homelab
About the Project Since July of 2020, I have been running a “honeypot” of sorts made by anthok to capture all requests coming in on specific ports.
-
Exploits in The Attic - Visiting Forgotten Metasploit Modules
About The Project - Taking a look in the Attic I was poking around at PRs and issues within the Metasploit project and stumbled across something pretty interesting.
-
Dumping Memory with AV - Avast Home Security
About The Project Tools native to an operating system that can be leveraged offensively are always attractive to red teamers.
-
Signed Binary Proxy Execution via PyCharm
About the Project Signed Binary Proxy Execution is a method of executing a command or executable by proxy of an another signed executable.
-
Analysis of a Cryptocurrency Miner Malware & Associated Payloads
About The Project Given the recent news of the Meow attacks, I was curious about obtaining malware data related to Elasticsearch attacks.
-
Modifying PoshC2 Initial Droppers
About the Project At the time of this writing PoshC2 has a Python and Bash agent that can be deployed on a target machine.
-
Getting Started with PoshC2 in a Linux Environment
About the Project For the first time Arch Cloud Labs will be posting a video tutorial on how to get started with PoshC2 in a Linux environment.
-
A Red Team Range In The Home Lab
About the Project C2 Frameworks seem to keep popping up with neat features and add-ons.
-
Houseplant CTF 2020 - Imagery
Houseplant CTF 2020 - Imagery CTF challenge “Imagery” was a high-value forensics puzzle with the following description: Photography is good fun.
-
Covid-19 Domain Analysis
About The Project Over the past two weeks, I have been analyzing registered domain names correlated to the current pandemic as a side project.
-
Vimrc As A Persistence Mechanism
ISTS - Collegiate Red vs Blue Competition This past weekend the Rochester Institute of Technology’s security club ritsec put on their annual Information Security Talent Search competition.
-
Forensic Fortress - Shmoocon 2020
Hack Fortress: Forensic Challenges This past Shmoocon, the Hack Fortress group returned to deliver another action pack day of Team Fortress 2 and hacking.
-
Is This Normal? - NSRL with Malware Analysis
About The Project Continuing from my Malware Analysis Pipeline project, I have been spending some time tearing apart samples trying to get better at malware analysis.
-
Building A Simple Malware Analysis Pipeline In The Homelab Pt - 2
About The Project In a previous blog post, I covered how I was obtaining samples, extracting metadata, and querying the results.
-
Building A Simple Malware Analysis Pipeline In The Homelab Pt - 1
About The Project I wanted to further my malware analysis/reverse engineering skills and create a simple malware analysis pipeline.
-
Dungeons & Hackers - Level 1
Hack Fortress RE Challenge: Troll Hunter What is Hack Fortress?
-
New Homelab
Why Build it?