Hello Hacking8!

A curated list of awesome networking libraries, resources and shiny things

FreeBuf有幸邀请张洪洋进行专访，聊聊他在安全之路上经历的故事，也期望能给刚进入安全行业的从业者一些启发和思考。

渗透任务太多了，做不完，根本做不完。今天又给了一个网站，关键还说只能测试这个一个网站，其他的不要碰。开始测试。

各位师傅，我想问一下咱们星球和星球的社区是什么样的关系，星球里有的帖子社区里有些没有（比如p神的...

This book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure.

一次日常测试中，偶然遇到了一个Flarum搭建的论坛，并获得了其管理员账号。本来到这里已经可以算完成了任务，将漏洞报给具体负责的人就结束了，但是既然已经拿到了管理员账号，何不尝试一下RCE呢？

前面发了文章 “APT 恶意 DLL 分析及 C2 配置提取（子 DLL 篇）”，这次发布 母 DLL 篇的分析及它们的关联。

对于WPA2 WPA3的一些渗透思路

Web-based Traffic and Security Network Traffic Monitoring

"武汉超算中心"使用集装箱搭建，是国内最大的集装箱超算中心，8月15日正式接入"中国算力网"。（via）
本周话题：如何防止帐号被黑
上周有一起安全事件。两家著名的美国互联网公司----Twillo 和 Cloudflare----被攻击了，前者还被攻破了。
这两家都不是普通公司，技术很强，都采用了"双因素认证"，但还是被有效攻击了。它们事后披露了一些细节，我觉得值得谈一下，聊聊怎么保护帐号安全。

微软的员工已暴露了公司在线基础设施的敏感登录凭据。

Example payload for CVE-2022-21894

This in-depth analysis explores CVE-2020-25669, a vulnerability that exploited a memory corruption issue in Linux Kernel.
The post CyRC Case Study: Exploitable memory corruption using CVE-2020-25669 and Linux Kernel appeared first on Application Security Blog.
本文深入分析了 CVE-2020-25669，这是一个利用 Linux 内核中内存损坏问题的漏洞。
后 CyRC 案例研究: 使用 CVE-2020-25669和 Linux 内核的可利用内存损坏首先出现在应用程序安全博客上。

ORIGINALLY AIRED ON AUGUST 15, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Sneaking Candy03:32 – BHIS – Talkin’ Bout [infosec] News 2022-08-1507:06 – Story # 1: […]
The post Talkin’ About Infosec News – 8/18/2022 appeared first on Black Hills Information Security.
原播于2022年8月15日本期节目讨论文章: 00:00-PreShow BanterTM-Sneking Candy03:32-BHIS-Talkin’Bout [ infosec ] News 2022-08-1507:06-Story # 1: [ ... ]
2022年8月18日《关于信息安全新闻的讨论》一文最早出现在布莱克山信息安全网站上。

有新的漏洞组件被发现啦,组件ID:DedeCMS
DedeCMS v5.7.94 - v5.7.97 was discovered to contain a remote code execution vulnerability in member_toadmin.php.

DedeCMS v5.7.94-v5.7.97被发现在 member _ toadmin.php 中包含远程代码执行漏洞。

有新的漏洞组件被发现啦,组件ID:DedeCMS
DedeCMS v5.7.93 - v5.7.96 was discovered to contain a remote code execution vulnerability in login.php.

发现 DedeCMS v5.7.93-v5.7.96在 login.php 中包含远程代码执行漏洞。

Secure Boot Security Feature Bypass Vulnerability.
[GitHub]Example payload for CVE-2022-21894
安全启动安全特性绕过漏洞。
[ GitHub ] CVE-2022-21894的有效载荷示例

To provide advanced protection against increasingly complex and evasive cryptojackers, Microsoft Defender Antivirus integrates with Intel® Threat Detection Technology (TDT) that applies machine learning to low-level CPU telemetry in detecting cryptojackers, even when the malware is obfuscated and can evade security tools.
The post Hardware-based threat defense against increasingly complex cryptojackers appeared first on Microsoft Security Blog.
为了提供针对越来越复杂和规避的密码劫持者的先进保护，微软防御者反病毒与英特尔威胁检测技术(TDT)集成，该技术将机器学习应用于低级 CPU 遥测，以检测密码劫持者，即使恶意软件是模糊的，可以规避安全工具。
后硬件为基础的对日益复杂的密码劫持者的威胁防御首先出现在微软安全博客上。

FreeBSD versions 11.0 through 13.0 suffers from a local privilege escalation vulnerability via an aio_aqueue kernel refcount bug. This research post goes into great depth on how the researcher traversed the logic flow and achieved exploitability.
FreeBSD 版本11.0到13.0由于 aio _ aqueue 内核引用计数错误而存在本地权限提升漏洞。这篇研究文章深入探讨了研究者如何跨越逻辑流程，实现可开发性。

Polar Flow for Android version 5.7.1 stores the username and password in clear text in a file on mobile devices.
Polar Flow for Android version 5.7.1将用户名和密码以明文形式存储在移动设备上的一个文件中。

Ubuntu Security Notice 5570-1 - Evgeny Legerov discovered that zlib incorrectly handled memory when performing certain inflate operations. An attacker could use this issue to cause zlib to crash, resulting in a denial of service, or possibly execute arbitrary code.
Ubuntu 安全公告5570-1-Evgeny Legerov 发现 zlib 在执行某些膨胀操作时错误地处理了内存。攻击者可以利用这个问题导致 zlib 崩溃，导致分布式拒绝服务攻击，或者可能执行任意代码。

Advantech iView software versions prior to 5.7.04.6469 are vulnerable to an unauthenticated command injection vulnerability via the NetworkServlet endpoint. The database backup functionality passes a user-controlled parameter, backup_file to the mysqldump command. The sanitization functionality only tests for SQL injection attempts and directory traversal, so leveraging the -r and -w mysqldump flags permits exploitation. The command injection vulnerability is used to write a payload on the target and achieve remote code execution as NT AUTHORITY\SYSTEM.
在5.7.04.6469之前的 Advantech iView 软件版本容易受到通过 NetworkServlet 端点的未经身份验证的命令注入漏洞的攻击。数据库备份功能向 mysqldump 命令传递用户控制的参数 back _ file。清理功能只测试 SQL 注入尝试和目录遍历，因此利用-r 和-w mysqldump 标志允许进行利用。命令注入漏洞用于在目标上编写有效负载，并作为 NT AUTHORITY SYSTEM 实现远程代码执行。

bt之家的官方发布页

Microsoft speakers at Gartner Identity & Access Management Summit focus on permissions management, infrastructure attacks, and moving to cloud-based identity.
The post Connect with Microsoft Security experts at the 2022 Gartner Identity & Access Management Summit appeared first on Microsoft Security Blog.
在 Gartner Identity & Access Management Summit 上，微软的演讲者聚焦于权限管理、基础设施攻击以及转向基于云的身份。
在2022年 Gartner 身份和访问管理峰会上与微软安全专家联系的帖子首先出现在微软安全博客上。

Protecting healthcare-related data requires a special level of technological and human support where the two support and interact with each other in harmony.
保护与医疗保健相关的数据需要一种特殊的技术和人力支持，在这种支持中，两者相互支持和协调互动。

Extended pickling support for Python objects

基于海量样本数据的高级威胁发现 https://mp.weixin.qq.com/s/s3jTwk-D--b6hX-1N_sBXg
关键信息基础设施安全保护三大关键能力 https://mp.weixin.qq.com/s/smY0WuXqmG4sFzjsEIv8tg
金融行业能力安全运营能力成熟度模型（FCSO-CMM） https://mp.weixin.qq.com/s/Hf3haBk1kxCk3uZnJ7FCCQ
How Hash-Based Safe Browsing Works in Google Chrome https://security.googleblog.com/2022/08/how-hash-based-safe-browsing-works-in.html?m=1
演化的大安全体系框架 https://mp.weixin.qq.com/s/oSJXlY7pE1xIO-P51lR2Fw

Attackers could ‘take full control of the infrastructure’, warn researchers
研究人员警告说，攻击者可能会“完全控制基础设施”

Some time ago I wrote some articles on how to Man-In-The-Middle Flutter on iOS, Android (ARM) and Android (ARM64). Those posts were quite popular and I often went back to copy those scripts myself. Last week, however, we received a Flutter application where the script wouldn’t work anymore. As we had the source code, it … Continue reading Intercept Flutter traffic on iOS and Android (HTTP/HTTPS/Dio Pinning) →
一段时间以前，我写了一些关于如何在 iOS、 Android (ARM)和 Android (ARM64)上进行“中间人的颤动”(Man-In-The-Middle Flutter)的文章。那些帖子非常受欢迎，我经常回去自己抄写那些脚本。然而，上周我们收到了一个 Flutter 应用程序，它的脚本不再起作用了。由于我们有源代码，它... 继续读取 iOS 和 Android 上的拦截颤振通信(HTTP/HTTPS/Dio Pining)→

📷 BrowserBox - Remote isolated browser API for security, automation visibility and interactivity. Run on our cloud, or bring your own. Full scope d…

#安全开发 同事写的一个github|gitlab|postman信息泄露监控工具,推荐一下. Gi...

A cross-platform command-line tool to convert images into ascii art and print them on the console. Now supports braille art!

Malware sandbox evasion in x64 assembly by checking ram size - Part 2

Hydra is a framework for elegantly configuring complex applications

Suricata IDS rules 用来检测红队渗透/恶意行为等，支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等

A browser based code editor

Monaco Editor for React - use the monaco-editor in any React application without needing to use webpack (or rollup/parcel/etc) configuration files …

调用x64dbg中的loadll.exe白加黑示例代码

Rofi: A window switcher, application launcher and dmenu replacement

SOS.dev initiative will combat software supply chain attacks by encouraging researchers to suggest security improvements to key projects
通过鼓励研究人员对关键项目提出安全改进建议，SOS.dev 倡议将打击软件供应链攻击

Experimental disassembler for x86 binaries virtualized by VMProtect 3

An analysis of the Warbird virtual-machine protection for the CI!g_pStore

关于macos的实用内容 不仅是macos...还有各种常用的渗透、命令行技巧

Ip2region (2.0 - xdb) is a offline IP address manager framework and locator, support billions of data segments, ten microsecond searching performan…

Clop勒索软件团伙很有可能是在识别他们的攻击目标上犯了个低级错误，或者他们是想使用虚假证据勒索一家更大的公司。

洞悉穆伦鲨