Wawa Security Links 350

Dimanche 18 Octobre 2026


GoogleNCR / Twitter
Hacking tutos / Facebook


Source Incite
https://medium.com/pythonic-forensics/3-step-rdp-honeypot-part-1-honeypot-setup-b5f01af19f4d
GadgetProbe: Exploiting Deserialization to Brute-Force the Remote Classpath
https://medium.com/pythonic-forensics/3-step-rdp-honeypot-part-2-operationalize-pcaps-2abb7ba2649a
https://medium.com/pythonic-forensics/3-step-rdp-honeypot-step-3-build-the-bot-c6552fab1740
GitHub - alephsecurity/confs
https://imp4gt-attacks.net/media/imp4gt_camera_ready.pdf
https://medium.com/wasmer/fuzz-testing-in-webassembly-vms-3a301f982e5a
Simple DLP for AWS S3 · Darkbit
What's up Emotet? - CERT Polska
IIS Raid – Backdooring IIS Using Native Modules – MDSec
Vitali Kremez | Ethical Hacker | Reverse Engineer: Let's Learn: Diving Deeper into "Mozart" TLD Loader & DNS TLD Commands
Pen Testing Ships. A year in review | Pen Test Partners
grsecurity - Resolving an Unfortunate STACKLEAK Interaction
AWS Automated Remediation - Part 1: Security Groups | @me - Nathan Getty Blog
Authereum, meet Parity
http://gavinmiller.io/2020/how-i-mitmd-rubygems-org-kinda/
GadgetToJScript
Finding Python ReDoS bugs at scale using Dlint and r2c
Security Analysis of the Solo Firmware – SoloKeys

The Missing LNK — Correlating User Search LNK files | FireEye Inc
Symbolic Hooks Part 2 : Getting the Target Name – Winsider Seminars & Solutions Inc.
Fluff x64
Fluff x86
EXTORY's Crackme
Insecure Direct Object Reference (IDOR) Vulnerability | Spanning
https://blog.talosintelligence.com/2020/02/obliquerat-hits-victims-via-maldocs.html
Hack the Box (HTB) machines walkthrough series — Heist
Introduction To Modern Routing For Red Team Infrastructure - using Traefik, Metasploit, Covenant and Docker :: khast3x blog — Thoughts and notes on my side projects
https://medium.com/tenable-techblog/exploiting-jira-for-host-discovery-43be3cddf023
GitHub - sodium-friends/sodium-native: Low level bindings for libsodium
https://research.nccgroup.com/wp-content/uploads/2020/02/NCC-Group-Whitepaper-Microcontroller-Readback-Protection-1.pdf
GitHub - RedCursorSecurityConsulting/CVE-2020-0668: Use CVE-2020-0668 to perform an arbitrary privileged file move operation.
https://medium.com/1inch.exchange/yes-we-hacked-bzx-fulcrum-but-one-month-ago-3f7e5c437ee3
Does register selection matter to performance on x86 CPUs?
Azure Privilege Escalation Using Managed Identities
https://blog.appsecco.com/continuous-compliance-audits-against-aws-cis-foundations-benchmark-98794649552f
https://isc.sans.edu/forums/diary/Quick Analysis of an Encrypted Compound Document Format/25826/
Android App Fraud - Haken Clicker and Joker Premium Dialer - Check Point Research
Rule-Based Highlighter Plugin for BurpSuite | Carve Systems

SilenceSoftware
GitHub - YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi: Tomcat-Ajp协议文件读取漏洞
IoT hacking field notes #1: Intro to glitching attacks – NVISO Labs
CVE-2018-8611 – Diving into the Windows Kernel Transaction Manager (KTM) for fun and exploitation – NCC Group Research
Flask RCE Debug Mode - Ghostlulz Hacks
impacket/ticketConverter.py at master · SecureAuthCorp/impacket · GitHub
chrome://sandbox Diagnostics for Windows - The Chromium Projects
Getting What You’re Entitled To: A Journey Into MacOS Stored Credentials – MDSec
Fuzzing A GameBoy Emulator With AFL++
Libxml2 Tutorial | AFLplusplus
https://medium.com/lynx0x00/i-hacked-slickwraps-this-is-how-8b0806358fbb
GitHub - yasser-alghamdi/winterfell: Winterfell are a group of windows batch scripts to collect Windows forensics data and perform efficient, and fast incident response and threat hunting activities.
AngularJS Client Side Template Injection (XSS) - Ghostlulz Hacks
GitHub - d4v3y0rk/ffpass: Use HTTP requests to start/stop the engine and lock/unlock the doors on your Ford vehicle.
https://www.thezdi.com/blog/2018/10/18/cve-2018-8460-exposing-a-double-free-in-internet-explorer-for-code-execution
HackerOne
https://isc.sans.edu/forums/diary/Simple but Efficient VBScript Obfuscation/25828/
GitHub - cinerieus/as3nt: Another Subdomain ENumeration Tool
Cacti v1.2.8 authenticated Remote Code Execution (CVE-2020-8813) - Shells.Systems
LandGrey's Blog

https://medium.com/bugbountywriteup/vimeo-livestream-bug-bounty-writeup-13fd208b5f4f
Analysis of an Unusual HawkEye Sample
Diff'ing Some Files Across Similar Directory Trees | /dev/random
Update: translate.py Version 0.2.7 | Didier Stevens
Metasploit Wrap-Up
0patch Blog: Our First Weeks of Securing Windows 7 and Windows Server 2008 R2
HackTheBox Writeup: Zetta
GSoC 2020
https://medium.com/evan.connelly/hunting-tesla-model-y-secrets-in-the-parts-catalog-2f453f853dd8
Cloudy With a Chance of Malware: Malboxes Now Deploys to AWS | GoSecure
files/cve-2020-0767.js at master · phoenhex/files · GitHub
GitHub - zeebo/blake3: Pure Go implementation of BLAKE3 with AVX2 and SSE4.1 acceleration
GitHub - wasm3/wasm-trace: Instruments wasm files and traces execution, using Binaryen.js and Wasmer.js
Latacora - Stop Using Encrypted Email
GitHub - afang5472/CVE-2020-0753-and-CVE-2020-0754: Writeup and POC for CVE-2020-0753, CVE-2020-0754 and six unfixed Window DOS Vulnerabilities.
Scripting Engine Memory Corruption Vulnerability CVE-2020-0674 – SonicWall
PSBits/PasswordStealing at master · gtworek/PSBits · GitHub
Adaptive DLL Hijacking | Silent Break Security
GitHub - med0x2e/NoAmci: Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().
Hooking CreateProcessWithLogonW with Frida - Low-level Shenanigans


Translate / Map
Wikipedia [ENG] / GIT

Metasploit / ExploitDB
Converter / Project 0

Hotmail / Gmail / ODA
eprint.iacr / Youtube