Wawa Security Links 377

Dimanche 25 Octobre 2026


GoogleNCR / Twitter
Hacking tutos / Facebook


GuLoader? No, CloudEyE. - Check Point Research
Threat Spotlight: Tycoon Ransomware Targets Education and Software Sectors
Discret 11, the French TV encryption of the 80's
GitHub - FoxHex0ne/BlogHyperV: Tools made for my Hyper-V blog series @ https://foxhex0ne.blogspot.com/
https://medium.com/7a616368/can-you-track-processes-accessing-the-camera-and-microphone-7e6885b37072
Anomaly Detection with Quantum Computers is Better than with Classical Computers, according to Google | Quantum Bayesian Networks
GitHub - TarlogicSecurity/kerbrute: An script to perform kerberos bruteforcing by using impacket
GitHub - cedowens/SwiftBelt: A macOS enumeration tool inspired by harmjoy's Windows-based Seatbelt enumeration tool.
https://www.hackingarticles.in/domain-persistence-dc-shadow-attack/
A journey in reversing UEFI Lenovo Passwords Management | Synacktiv
https://medium.com/bugbountywriteup/m-ick-maybe-44e3409ff922
Double-Free RCE in VLC. A honggfuzz how-to | Pen Test Partners
https://www.stratosphereips.org/blog/2020/6/8/dark-nexus-the-old-the-new-and-the-ugly
https://resources.infosecinstitute.com/capture-the-flag-ctf-walkthrough-my-file-server-1/
Apache Kylin 3.0.1 Command Injection Vulnerability - Tech Stories - SonarSource Community
Maxwell Dulin - Security Engineer (Hacker)
Understanding Certificate Pinning – Little Man In My Head
The Impending Doom of Expiring Root CAs and Legacy Clients
GitHub - kevinlewi/opaque-ke: An implementation of the OPAQUE password-authenticated key exchange protocol
windows deep internals: COMPlus_ETWEnabled

How to jam neural networks | Light Blue Touchpaper
TurtleAuth: Let's Make a DIY GPG USB Key - Hackster.io
https://medium.com/shantanukhande/red-team-using-sharpchisel-to-exfil-internal-network-e1b07ed9b49
GitHub - nazywam/AutoIt-Ripper: Extract AutoIt scripts embedded in PE binaries
Automating the provisioning of Active Directory labs in Azure
CVE-2020-13777: TLS 1.3 session resumption works without master key, allowing MITM (#1011) · Issues · gnutls / GnuTLS · GitLab
https://internetpolicy.mit.edu/wp-content/uploads/2020/06/OmniBallot.pdf
GitHub - carlini/printf-tac-toe: tic-tac-toe in a single call to printf
GitHub - Flangvik/BetterSafetyKatz: Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime patches signatures and uses SharpSploit DInvoke to PE-Load into memory.
Summit Route - Denial of Wallet Attacks on AWS
GitHub - christophetd/Adaz: Automatically deploy customizable Active Directory labs in Azure
advisories/2020_fwupd_dangling_s3_bucket_and_CVE-2020-10759_signature_verification_bypass.md at master · justinsteven/advisories · GitHub
Game Hacking #3: Hooking Direct3D EndScene()
GitHub - yunuscadirci/CallStranger: Vulnerability checker for Callstranger (CVE-2020-12695)
RoyalTS SSH Tunnel - Authentication Bypass [CVE-2020-13872] - HackTips
https://isc.sans.edu/forums/diary/Translating BASE64 Obfuscated Scripts/26214/
Hexacorn | Blog FridaTrace++ – quick & dirty API monitor, Part 2
Looking at Big Threats Using Code Similarity | Securelist
CallStranger CVE-2020-12695
https://medium.com/greenwolf-security/ntlm-theft-a-file-payload-generator-for-forced-ntlm-hash-disclosure-2d5f1fe5b964

windows deep internals: undocumented env vars in mscorwks.dll
GitHub - ph4ntonn/Impost3r: 👻Impost3r -- A linux password thief
Emulating Covert Operations - Dynamic Invocation (Avoiding PInvoke & API Hooks) – The Wover – Red Teaming, .NET, and random computing topics
GitHub - Greenwolf/ntlm_theft: A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)
Playing Around With The Fuchsia Operating System
BitDefender Antivirus Free 2020 Elevation of Privilege (CVE-2020-8103 ) - REDYOPS Labs
On Partner Referral Codes in Brave Suggested Sites
Group Policies Going Rogue
https://developer.amd.com/wp-content/resources/Architecture_Guidelines_Update_Indirect_Branch_Control.pdf
SMBleedingGhost Writeup: Chaining SMBleed (CVE-2020-1206) with SMBGhost - ZecOps Blog
https://www.hackingarticles.in/evil-winrm-winrm-pentesting-framework/
https://www.proofpoint.com/us/blog/threat-insight/ta410-group-behind-lookback-attacks-against-us-utilities-sector-returns-new
Honda and Enel impacted by cyber attack suspected to be ransomware - Malwarebytes Labs | Malwarebytes Labs
https://www.thezdi.com/blog/2020/6/9/the-june-2020-security-update-review
https://blog.talosintelligence.com/2020/06/vuln-spotlight-siemens-logo-june-2020.html
Abusing Windows Telemetry for Persistence | TrustedSec
CROSSTalk - VUSec
GKE Kubelet TLS Bootstrap Privilege Escalation - Rhino Security Labs
GitHub - someshkar/colabcat: Running Hashcat on Google Colab with session backup and restore.
GitHub - deadjakk/patch-checker: Web-based check for Windows privesc vulnerabilities

UtahFS: Encrypted File Storage
Diving into the SMBLost vulnerability (CVE-2020-1301) - Airbus CyberSecurity
https://sgaxe.com/files/CacheOut.pdf
https://sgaxe.com/files/SGAxe.pdf
AnyDesk UDP Discovery Remote Code Execution (CVE-2020-13160) – devel0pment.de
Windows-EoP/CVE-2020-1281.pdf at master · guhe120/Windows-EoP · GitHub
Cmd Hijack - a command/argument confusion with path traversal in cmd.exe
GitHub - mubix/lmo: LetMeOutOfYour.net Resources
https://ired.team/offensive-security/defense-evasion/parent-process-id-ppid-spoofing
https://medium.com/markmotig/single-file-bias-test-with-mimikatz-4fbd0eb51aec
Creating an Internal Pen Test VM with Ngrok
https://blog.coinbase.com/container-technologies-at-coinbase-d4ae118dcb6c
GitHub - 0xThiebaut/sigmai: Import specific data sources into the Sigma generic and open signature format.
Automated Sigma Rule Generation from MISP Threat Intelligence // 0xThiebaut's Thought-Can
https://techcommunity.microsoft.com/t5/azure-sentinel/web-shell-threat-hunting-with-azure-sentinel-and-microsoft/ba-p/1448065
HTB Endgame: P.O.O. | 0xdf hacks stuff
GitHub - ZecOps/CVE-2020-0796-RCE-POC: CVE-2020-0796 Remote Code Execution POC
Diving into MassLogger | G DATA
The Art of automation, creating your own Alfred
Understanding Web Security Checks in Firefox (Part 1) – Attack & Defense


Translate / Map
Wikipedia [ENG] / GIT

Metasploit / ExploitDB
Converter / Project 0

Hotmail / Gmail / ODA
eprint.iacr / Youtube