Blahalla

BLAHALLA

Last Week in Security (LWiS) - 2024-09-03

blog.badsectorlabs.com · 1 year, 11 months ago

argv[0] tampering ( @Wietze ), Moodle eval() misuse ( @RedTeamPT ), ntoskrnl.exe PoC ( @b1thvn ), 4x wappd exploits ( @hyprdude ), and more!
Last Week in Security (LWiS) - 2024-08-26

blog.badsectorlabs.com · 1 year, 11 months ago

"USDoD" doxed, VEH research ( @passthehashbrwn ), Defender exclusions ( @dazzyddos ), CSS history leak ( @TheXC3LL ), Cobalt Strike DNS listeners ( @VirtualAllocEx ), and more!
Last Week in Security (LWiS) - 2024-08-19

blog.badsectorlabs.com · 1 year, 11 months ago

DEF CON 32 Tools and Talks, Apache confusion ( Orange Tsai ), private TLDs ( @N7WEra ), UDL 🎣 ( @Oddvarmoe ), crash analysis ( @patrickwardle ), and more!
Last Week in Security (LWiS) - 2024-07-29

blog.badsectorlabs.com · 2 years ago

Specula ( @Oddvarmoe + @freefirex2 ), 🧵 namecalling ( @hasherezade ), North Korean 🇰🇵 agents, Llama 3.1 ( @Meta ), GraphSpy updates ( @RedByte1337 ), and more!
Last Week in Security (LWiS) - 2024-07-22

blog.badsectorlabs.com · 2 years ago

REx ( @br0k3ns0und ), EV charger exploits ( @ret2systems ), CerealKiller ( @two06 ), payload encoding ( @MoritzLThomas ), responder honeypot ( @lawndoc ), and more!
Last Week in Security (LWiS) - 2024-07-15

blog.badsectorlabs.com · 2 years ago

HavocC2 SSRF ( @chebuya ), PDF rendering diffs ( @d4d89704243 ), Windows phishing 0day ( @CPResearch ), 3x Sharepoint RCEs ( @testanull ), Dynamics 365 flaws ( @frycos ), Mythic 3.3 Beta ( @itsafeature ), and more!
Last Week in Security (LWiS) - 2024-07-08

blog.badsectorlabs.com · 2 years ago

👻 Ghostscript exploit ( @thomasrinsma ), CSPT2CSRF ( @maxenceschmitt ), Puppet Forge pwn ( @adnanthekhan ), WhatsUp Gold RCE+privesc ( @SinSinology ), UDRL-less beacon ( @naksyn ), EDRPrison ( @senzee1984 ), and more!
Last Week in Security (LWiS) - 2024-07-01

blog.badsectorlabs.com · 2 years ago

Chrome RCE ( @mmolgtm ), Windows LPE ( @carrotc4k3 + @tykawaii98 ), Xerox RCEs+LPE ( @mohemiv ), and more!
Last Week in Security (LWiS) - 2024-06-24

blog.badsectorlabs.com · 2 years ago

Electron security ( @khronokernel ), snapshot fuzzing ( @h0mbre ), macOS helpers LPE ( @L0Psec ), and more!
Last Week in Security (LWiS) - 2024-06-17

blog.badsectorlabs.com · 2 years ago

Nighthawk 0.3 ( @MDSecLabs ), Musl heap exploit ( @NCCsecurityUS ), Copilot chat 💉 ( @wunderwuzzi23 ), allowPrivilegeEscalation in K8s ( @christophetd ), and more!
Last Week in Security (LWiS) - 2024-06-10

blog.badsectorlabs.com · 2 years ago

SCCM ansible role ( @synzack21 ), Hacking millions of modems ( @samwcyo ), F5 Secure Vault ( @myst404 ), Secure Kerrnel ( @33y0re ), and more!
Firefox will upgrade more Mixed Content in Version 127

blog.mozilla.org · 2 years ago

Most of the web already supports HTTPS: In fact, 93% of requests made by Firefox are already HTTPS. As a reminder, HTTP over TLS (HTTPS) fixes the security shortcoming of HTTP … Read more
Last Week in Security (LWiS) - 2024-06-03

blog.badsectorlabs.com · 2 years ago

F5 TLS MITM ( @lowercasedrm + @myst404 ), WASM phishing tool ( @JumpsecLabs ), MS Recall info ( @GossiTheDog ), Checkpoint path traversal ( @watchtowrcyber ), smbclient-ng ( @podalirius ), and more!
Last Week in Security (LWiS) - 2024-05-29

blog.badsectorlabs.com · 2 years ago

A special two week edition!
Last Week in Security (LWiS) - 2024-05-13

blog.badsectorlabs.com · 2 years ago

Evading MDI ( @yaumn ), TAP-NTLM ( @dirkjan ), ELF verifier ( @kev169 ), Kerberos delegation + 🦀 in beacons ( @RastaMouse ), and more!
Last Week in Security (LWiS) - 2024-05-06

blog.badsectorlabs.com · 2 years ago

Entra to on-prem ( @dirkjan ), new bloodhound edges ( @JonasBK ), Chrome type confusion ( @manfp ), GitHub RCE via actions ( @Creastery ), and more!
Last Week in Security (LWiS) - 2024-04-29

blog.badsectorlabs.com · 2 years ago

AD Group abuse ( @decoderit ), NetNTLM leak attacks ( @pfiatde ), 'adversary flywheels' ( @WHITEHACKSEC ), Nemesis 1.0 ( @harmj0y + team) and more!
Last Week in Security (LWiS) - 2024-04-22

blog.badsectorlabs.com · 2 years ago

LSA Whisperer ( @mcbroomevan ), VirtualBox LPE ( @mansk1es ), Android Intent exploitation ( @suidpit ), MagicDot "rootkit" ( @oryair1999 ), and more!
Last Week in Security (LWiS) - 2024-04-16

blog.badsectorlabs.com · 2 years ago

Dev tunnels for C2 ( @RedSiege ), UAF Windows LPE ( @KeyZ3r0 ), SCCM enum script ( @Mayyhem ), ETW patching ( @jsecurity101 ), and more!
Last Week in Security (LWiS) - 2024-04-08

blog.badsectorlabs.com · 2 years ago

Evilginx + GoPhish ( @mrgretzky ), Ghostwriter updates ( @cmaddalena ), Intune EPM privesc ( @synzack21 + team) 🎣 page bot defense ( @fin3ss3g0d ), and more!
Rapidly Leveling up Firefox Security

blog.mozilla.org · 2 years ago

At Mozilla, we believe in an open web that is safe to use. To that end, we improve and maintain the security of people using Firefox around the world. This … Read more
Last Week in Security (LWiS) - 2024-04-01

blog.badsectorlabs.com · 2 years ago

XZ backdoor ( @fr0gger + @amlweems ), best LPE since DirtyCOW ( @notselwyn ), SCCM pwnage ( @AndrewOliveau + @Mastadon ), kernel fuzzing ( @R00tkitSMM ), and more!
Last Week in Security (LWiS) - 2024-03-25

blog.badsectorlabs.com · 2 years ago

CI/CD attacks ( @bishopfox ), IdP pwnage ( @xpn ), on-prem exchange attacks ( @JonasBK ), Windows privesc ( @p1k4l4 ), SCCM in GOAD ( @M4yFly ), and more!
Last Week in Security (LWiS) - 2024-03-18

blog.badsectorlabs.com · 2 years ago

Windows patch diffing ( @clearbluejar ), FileCatalyst RCE ( @NettitudeLabs ), Windows/Frida course ( @FuzzySec ), Tor WebTunnel bridges ( @torproject, Pixel 7/8 Pro exploit ( @simo36 ), and more!
Last Week in Security (LWiS) - 2024-03-11

blog.badsectorlabs.com · 2 years ago

Midnight Blizzard vs Microsoft, Fuzzer dev ( @h0mbre ), Browserless Entra flow ( @wald0 ), SCCM one-stop-shop ( @subat0mik + @Mayyhem + @garrfoster ), and more!
Last Week in Security (LWiS) - 2024-03-04

blog.badsectorlabs.com · 2 years ago

macOS LPE ( @patch1t ), Ivanti backdoors ( @NVISOLabs ), ESC14 ( @JonasBK ), token theft ( @rootsecdev ), LSASS dumping ( @Octoberfest73 ), and more!
Last Week in Security (LWiS) - 2024-02-26

blog.badsectorlabs.com · 2 years ago

ConnectWise Vulnerabilities, open buckets ( @pfiatde ), SCCM takeover ( @garrfoster ), cloud to on-prem pivot ( @chiragsavla94 ), WMI persistence ( @Gr1mmie ), and more!
Last Week in Security (LWiS) - 2024-02-19

blog.badsectorlabs.com · 2 years ago

ESC13 ( @JonasBK ), Sandboxing syscalls ( @h0mbre ), Cross Window Forgery ( @PaulosYibelo ), new Windows callback method ( @daaximus ), dangerous EntraID role ( @wald0 ), github-secrets (Tobias Madl of @Neodyme ), and more!
Last Week in Security (LWiS) - 2024-02-12

blog.badsectorlabs.com · 2 years ago

LDAP tradecraft ( @domchell ), CreateRemoteThread saftey ( @m417z ), Lab automation ( @W9HAX ), LoFP ( @br0k3ns0und ), and more!
Last Week in Security (LWiS) - 2024-02-07

blog.badsectorlabs.com · 2 years ago

All the Ivanti 0days, FTX SIM swap ( @briankrebs ), Unmanaged CLR patching ( @kyleavery ), Midnight Blizzard fallout ( @wald0 ), Arachne mythic webshell ( @itsafeature ), and more!
Last Week in Security (LWiS) - 2024-01-30

blog.badsectorlabs.com · 2 years ago

Fastly to block domain fronting 🔜, EDR bypass via VEH ( @VirtualAllocEx ), BOFHound enhancements ( @Tw1sm ), Frameless BITB ( @waelmas01 ), Asus ndays ( @suidpit + @Th3Zer0 ), and more!
Last Week in Security (LWiS) - 2024-01-23

blog.badsectorlabs.com · 2 years ago

Microsoft hacked, GraphStrike ( @Octoberfest73 ), GPO based LPEs ( @decoderit ), AwaitFuscator ( @washidev ), ProxyHelper2 ( @hoodoer ), and more!
Last Week in Security (LWiS) - 2024-01-15

blog.badsectorlabs.com · 2 years ago

SSPI in Python ( @snovvcrash ), executing shellcode from VBA ( @TheXC3LL ), Mirth Connect pre-auth RCE ( @Horizon3Attack ), Visual Studio LPE ( @filipdragovic ), DLL injection LPE ( @m417z ), Android ARM64 reversing ( @Dauntless ), and more!
Last Week in Security (LWiS) - 2024-01-10

blog.badsectorlabs.com · 2 years ago

QR phishing ( @pfiatde ), SOCKS as C2 via SSH on Windows ( @n00py1 ), Google Account takeover with persistence ( @e11i0t ), Bitwarden access without password ( @RedTeamPT ), and more!
Last Week in Security (LWiS) - 2024-01-01

blog.badsectorlabs.com · 2 years ago

Ghidriff ( @clearbluejar ), Linux exploitation ( @kevinbackhouse ), win32 keylogger ( @ixty ), BLUFFS bluetooth exploit ( @francozappa ), sleep lexer and parser ( @mcbroomevan ), ring0 from VBA ( @0xDISREL ), and more!
Mozilla VPN Security Audit 2023

blog.mozilla.org · 2 years ago

To provide transparency into our ongoing efforts to protect your privacy and security on the Internet, we are releasing a security audit of Mozilla VPN that Cure53 conducted earlier this … Read more
Last Week in Security (LWiS) - 2023-12-04

blog.badsectorlabs.com · 2 years ago

O365 Phishing infra ( @pfiatde ), EvilSlackbot ( @infosecdrewze ), Sonos jailbreak ( @alexjplaskett ), DNS attacks ( @timolongin ), DNS rebinding attack ( @danielthatcher ), and more!
Last Week in Security (LWiS) - 2023-11-29

blog.badsectorlabs.com · 2 years ago

2x macOS TCC bypasses ( @gergelykalman ), Okta 🥷 ( @nickvangilder ), pcap analysis helper ( @bartavelle ), Mythic and Merlin C2 updates ( @itsafeature + @Ne0nd0g ) and more!
Last Week in Security (LWiS) - 2023-11-13

blog.badsectorlabs.com · 2 years ago

Initial access and Bobber ( @Flangvik ), Slack 🍪 fun ( @Tw1sm ), attacking EDR ( @dottormorte ), finding hard-coded secrets ( @frycos ), and more!
Last Week in Security (LWiS) - 2023-11-06

blog.badsectorlabs.com · 2 years ago

In-line PE runner ( @s4ntiagop ), Citrix Bleed ( @assetnote ), Cisco IOS XE PoC ( @JamesHorseman2 ), LDAP auth ( @lowercasedrm ), fuzzer fundamentals ( @h0mbre ), and more!
Last Week in Security (LWiS) - 2023-10-24

blog.badsectorlabs.com · 2 years ago

Windows LPE ( @chompie1337 ), TPM Bitlocker deepdive ( @[email protected] ), unhooking effects ( @dazzyddos ), CastGuard ( @[email protected] ), Apple OTA - kernel hack ( @patch1t ), FalconHound ( @olafhartong ), GraphRunner ( @dafthack ), and more!
Last Week in Security (LWiS) - 2023-10-09

blog.badsectorlabs.com · 2 years ago

Looney Tunables Linux LPE ( @qualys ), Impending curl issue ( @bagder ), macOS gatekeeper bypass 0day ( @xpn ), firewall unauth RCE ( @watchtowrcyber ), sccmhunter update ( @garrfoster ), loaders ( @mcbroomevan ), and more!
Last Week in Security (LWiS) - 2023-10-03

blog.badsectorlabs.com · 2 years ago

Nighthawk update ( @MDSecLabs ), Teams external splash bypass, MSI LPEs, and Zip+LNKs ( @pfiatde ), SCCM takeover ( @Mayyhem ).NET obfuscation ( @eversinc33 ), JonMon ( @jsecurity101 ), and more!
Last Week in Security (LWiS) - 2023-09-19

blog.badsectorlabs.com · 2 years ago

Cobalt Strike 4.9, 38TB of internal MS data, a crazy phish, an Okta toolkit, macOS LPE, and more!
Version 2.9 of the Mozilla Root Store Policy

blog.mozilla.org · 2 years ago

Online security is constantly evolving, and thus we are excited to announce the publication of MRSP version 2.9, demonstrating that we are committed to keep up with the advancement of … Read more
Last Week in Security (LWiS) - 2023-09-11

blog.badsectorlabs.com · 2 years ago

Zero-click iOS exploits ( @citizenlab ), in-the-wild Chrome 0day, physical/mobile RE writeup ( @elttam ), Linux LPE ( @SidewayRE ), Protected Process Dumper ( @tastypepperoni ), and more!
Last Week in Security (LWiS) - 2023-08-29

blog.badsectorlabs.com · 2 years ago

DEF CON 31 tools and so much more!
Last Week in Security (LWiS) - 2023-08-07

blog.badsectorlabs.com · 3 years ago

Epic rewards point hack ( @samwcyo ), blinding auditd ( @qtcde ), attacking an EDR ( @dottormorte ), expect scripting ( @cedowens ), and more!
Last Week in Security (LWiS) - 2023-07-31

blog.badsectorlabs.com · 3 years ago

Citrix ADC RCE ( @assetnote + @bishopfox ), Zenbleed ( @taviso ), coolest hack of the year [CVE-2023-38408] ( @qualys ), AWS CNI for k8s abuse ( @BerneCampbell ), WebKit exploitation ( @typeconfuser + @sherl0ck ), CS2BR ( @MoritzLThomas ), Mockingjay PoC ( @dottormorte ), LPE via installers ( @AndrewOliveau ), and more!
Last Week in Security (LWiS) - 2023-07-17

blog.badsectorlabs.com · 3 years ago

Microsoft O365 was compromised for a few months for 25 customers, block EDR DLL loading ( @ShitSecure ), stashing shellcode in 3D models ( @TrustedSec ), AMSI bypasses ( @pfiatde ), Atlassian Companion macOS RCE ( @r3ggi ), the smallest C binary ( @washidev ), 350 blogs monitored, and more!