Advanced persistent threat @hacklido.pdf
4.2 MB
🔰 #pentestmag open issue #APT
Advanced Persistent Threats. Professor John Walker starts with presenting the interdependence of APTs and Advanced Evasion Techniques (AET). In the article he tries to answer the question why Persistent Threats and Evasions will not see any decline any time soon. Mariana Peycheva, in turn, presents the analysis of Advanced Persistent Threats and its methodology, giving a great overview the topic. As one of our reviewers said: “I wish that most of business leaders and managers would read this”.
Share and support us ❤️ @hacklido
Advanced Persistent Threats. Professor John Walker starts with presenting the interdependence of APTs and Advanced Evasion Techniques (AET). In the article he tries to answer the question why Persistent Threats and Evasions will not see any decline any time soon. Mariana Peycheva, in turn, presents the analysis of Advanced Persistent Threats and its methodology, giving a great overview the topic. As one of our reviewers said: “I wish that most of business leaders and managers would read this”.
Share and support us ❤️ @hacklido
This media is not supported in your browser
VIEW IN TELEGRAM
⚡️The cyber security community to share knowledge, experiences, ideas, guidance and collaborate with other cyber security enthusiasts⚡️
🔰DISCORD Discord.gg/k8njp9ryE3
🔰TWITTER Twitter.com/hacklido
🔰INSTAGRAM Instagram.com/hacklido
🔰TELEGRAM T.me/hacklido
🔰REDDIT Reddit.com/u/hacklido
🔰DISCORD Discord.gg/k8njp9ryE3
🔰TWITTER Twitter.com/hacklido
🔰INSTAGRAM Instagram.com/hacklido
🔰TELEGRAM T.me/hacklido
🔰REDDIT Reddit.com/u/hacklido
🔰 #Exploit_Development : DVD X Player 5.5 Pro Local #Buffer_Overflow (SEH)
https://0xannlynn.medium.com/exploit-development-dvd-x-player-5-5-pro-local-buffer-overflow-seh-87049e6ce1
https://0xannlynn.medium.com/exploit-development-dvd-x-player-5-5-pro-local-buffer-overflow-seh-87049e6ce1
Medium
Exploit Development : DVD X Player 5.5 Pro Local Buffer Overflow (SEH)
A quick whoami : my name is Ajay i am a student in field of Electronices and communication engineering in Tamil nadu, India and i am not a…
mr.robot everyday @hacklido.png
671.3 KB
🔰1920*1080 #cybersecurity #wallpaper !
Every day, we change the world, but to change the world in a way that means anything, that takes more time than most people have. It never happens all at once. It’s slow. It’s methodical. It’s exhausting.
-Elliot Alderson
Share and support us ❤️ @hacklido
Every day, we change the world, but to change the world in a way that means anything, that takes more time than most people have. It never happens all at once. It’s slow. It’s methodical. It’s exhausting.
-Elliot Alderson
Share and support us ❤️ @hacklido
🔰 #Exploit #CVE-2020-13886:
#LFI Intelbras IP terminal TIP 200/200 LITE ( #PoC )
https://github.com/lucxssouza/CVE-2020-13886
#LFI Intelbras IP terminal TIP 200/200 LITE ( #PoC )
https://github.com/lucxssouza/CVE-2020-13886
GitHub
GitHub - Ls4ss/CVE-2020-13886: Exploit CVE-2020-13886 - LFI Intelbras TIP 200 / 200 LITE /
Exploit CVE-2020-13886 - LFI Intelbras TIP 200 / 200 LITE / - Ls4ss/CVE-2020-13886
🔰 Automated Security Risk Identification Using AutomationML-based Engineering Data. #blueteam
This prototype identifies security risk sources (i.e., threats and vulnerabilities) and types of attack consequences based on AutomationML (AML) artifacts. The results of the risk identification process can be used to generate cyber-physical attack graphs, which model multistage cyber attacks that potentially lead to physical damage.
https://github.com/sbaresearch/amlsec
This prototype identifies security risk sources (i.e., threats and vulnerabilities) and types of attack consequences based on AutomationML (AML) artifacts. The results of the risk identification process can be used to generate cyber-physical attack graphs, which model multistage cyber attacks that potentially lead to physical damage.
https://github.com/sbaresearch/amlsec
GitHub
GitHub - sbaresearch/amlsec: Automated Security Risk Identification Using AutomationML-based Engineering Data
Automated Security Risk Identification Using AutomationML-based Engineering Data - sbaresearch/amlsec
🔰 #Red_Team Tactics:
🔴Weaponizing #XSS
https://saadahmedx.medium.com/weaponizing-xss-for-fun-profit-a1414f3fcee9
🔴Smuggling an (Un)exploitable #XSS
https://www.rcesecurity.com/2020/11/Smuggling-an-un-exploitable-xss/
🔴Weaponizing #XSS
https://saadahmedx.medium.com/weaponizing-xss-for-fun-profit-a1414f3fcee9
🔴Smuggling an (Un)exploitable #XSS
https://www.rcesecurity.com/2020/11/Smuggling-an-un-exploitable-xss/
🔰 Free training on developing #Burp_Suite extensions @hacklido
https://github.com/doyensec/burpdeveltraining
https://github.com/doyensec/burpdeveltraining
GitHub
GitHub - doyensec/burpdeveltraining: Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security…
Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation" - doyensec/burpdeveltraining
🔰 #Google Patches Two More Chrome #Zero-Days Exploited in Attacks @hacklido
https://www.securityweek.com/google-patches-two-more-chrome-zero-days-exploited-attacks
https://www.securityweek.com/google-patches-two-more-chrome-zero-days-exploited-attacks
SecurityWeek
Google Patches Two More Chrome Zero-Days Exploited in Attacks
Google has released another update for Chrome 86 to patch two more zero-day vulnerabilities that have been exploited in the wild.
🔰Noia: Simple #Android and #iOS (newly added feature) application sandbox file browser #tools #Frida @hacklido
https://github.com/0x742/noia
https://github.com/0x742/noia
GitHub
GitHub - 0x742/noia: [WIP] Simple mobile applications sandbox file browser tool. Powered with [frida.re](https://www.frida.re).
[WIP] Simple mobile applications sandbox file browser tool. Powered with [frida.re](https://www.frida.re). - 0x742/noia
🔰HiveJack: This tool can be used to dump #windows credentials from an already-compromised host. #tools @hacklido
It is a good #post_exploitation utility and also provides an option to delete #log files to clear the trace.
https://github.com/Viralmaniar/HiveJack
It is a good #post_exploitation utility and also provides an option to delete #log files to clear the trace.
https://github.com/Viralmaniar/HiveJack
GitHub
GitHub - Viralmaniar/HiveJack: This tool can be used during internal penetration testing to dump Windows credentials from an already…
This tool can be used during internal penetration testing to dump Windows credentials from an already-compromised host. It allows one to dump SYSTEM, SECURITY and SAM hives and once copied to the a...
🔰Subdomain finder based on free online services. #tools @hacklido
https://github.com/Fadavvi/Sub-Drill
https://github.com/Fadavvi/Sub-Drill
GitHub
GitHub - Fadavvi/Sub-Drill: A very (very) FAST and simple subdomain finder based on online & free services. Without any configuration…
A very (very) FAST and simple subdomain finder based on online & free services. Without any configuration requirements. - Fadavvi/Sub-Drill
🔰Fortiscan - A High Performance #FortiGate SSL-VPN #Vulnerability_Scanner And #Exploitation #Tools. @hacklido
https://www.kitploit.com/2020/11/fortiscan-high-performance-fortigate.html
https://www.kitploit.com/2020/11/fortiscan-high-performance-fortigate.html
Kitploit
Kitploit – Maintenance in Progress
Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.
🔰Metahttp - A #bash script that automates the scanning of a target network for HTTP resources through #XXE #tools @hacklido
https://github.com/vp777/metahttp
https://github.com/vp777/metahttp
GitHub
GitHub - vp777/metahttp: A bash script that automates the scanning of a target network for HTTP resources through XXE
A bash script that automates the scanning of a target network for HTTP resources through XXE - vp777/metahttp