Convert curl commands to Python, JavaScript, PHP, R, Go, Rust, Elixir, Java, MATLAB, Dart, CFML, Ansible URI, Strest or JSON

Web (Live Demo): https://curlconverter.com/

Project: https://github.com/curlconverter/curlconverter

#tool #converter #curl #darw1n

Windows Local Privilege Escalation via CdpSvc service (Writeable SYSTEM path Dll Hijacking)

https://github.com/sailay1996/CdpSvcLPE

#redteam #lpe #windows #darw1n

In this post, I’d like to lay out a collection of techniques that together can be used to bypassed industry leading enterprise endpoint protection solutions.

https://vanmieghem.io/blueprint-for-evading-edr-in-2022/

#redteam #av #avbypass #bypass #SoGood0x1

Debugging and Reversing ALPC

https://csandker.io/2022/05/29/Debugging-And-Reversing-ALPC.html

#windows #internals #debug #alpc #SoGood0x1

https://github.com/WebKit/WebKit/blob/main/Source/bmalloc/libpas/Documentation.md

#browsers #webkit #safari #apple #heap #allocators #heapallocators #Aligner

https://duasynt.com/blog/linux-kernel-heap-feng-shui-2022
#Linux #kernel #heap #heapManipulation #heapFengShui

https://www.sstic.org/media/SSTIC2022/SSTIC-actes/an_apple_a_day/SSTIC2022-Slides-an_apple_a_day-benoist-vanderbeken_perigaud.pdf
#Apple #iOS #JailBreak #kernel #Safari #RCE #LPE #Exploitation

https://www.zerodayinitiative.com/blog/2022/6/1/is-exploiting-a-null-pointer-deref-for-lpe-just-a-pipe-dream
#Antivirus #LPE #Exploitation #BitDefender

https://www.usenix.org/system/files/sec22fall_zeng.pdf
#Linux #kernel #LPE #Exploitation #HeapManipulation #ExploitReliability #kernelHeap

Our community is accused of being out of politics. Some DEF CON groups also faced something similar. It will be interesting to see how they resolve their issue.

https://forum.defcon.org/node/241880

The author of the post invites everyone who has something to say to the topic.

The FLARE Obfuscated String Solver (FLOSS) has been supporting analysts to extract hidden strings from malware samples for many years now. Over the last few months, we’ve added new functionality and improved the tool’s performance. In this blog post we will share exciting new features and improvements including a new string deobfuscation technique, simplified tool usage, and much faster result output.

https://www.mandiant.com/resources/floss-version-2

#malware #reverse #tools #SoGood0x1

https://lifeasageek.github.io/papers/sunwoo-fuzzorigin.pdf
#Browsers #Fuzzing #UXSS

Rizin v0.4.0 and Cutter v2.1.0 are here! 🥳

Rizin team:
We continue our focus on stability and performance while introducing new features, including:
- FLIRT signatures applied automatically during the analysis!
- New Intermediate Language — RzIL
https://github.com/rizinorg/rizin/releases/tag/v0.4.0

Cutter team:
Introducing exciting new features including auto-detection of common library functions, a YARA plugin to quickly create and test signatures, and many more...
https://github.com/rizinorg/cutter/releases/tag/v2.1.0

#reverse #rizin #cutter

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

https://github.com/h3xduck/TripleCross

#rootkit #redteam #linux #kernel #Aligner

One I/O Ring to Rule Them All: A Full Read/Write Exploit Primitive on Windows 11

https://windows-internals.com/one-i-o-ring-to-rule-them-all-a-full-read-write-exploit-primitive-on-windows-11/

https://github.com/yardenshafir/IoRingReadWritePrimitive

#expdev #windows #kernel #expolit #tips #Aligner

At the beginning of 2020, we discovered the Red Unlock technique that allows extracting Intel Atom Microcode. We were able to research the internal structure of the microcode and then x86 instruction implementation. Also, we recovered a format of microcode updates, algorithm and the encryption key used to protect the microcode

https://github.com/chip-red-pill/MicrocodeDecryptor

#tools #reverse #intel #interlnals #microcode #Aligner

IDA Pro 8.0 released!

* Golang 1.18
* iOS 16 dyld shared cache support
* ARC decompiler
* Better firmware analysis
* FLAIR pattern generator (makepat)

https://hex-rays.com/products/ida/news/8_0/

✨Happy New Year!✨

Take care of yourself and those close to you!

UserComment is a plugin to display user-added comments in disassembly and pseudocode views.

https://forum.reverse4you.org/t/usercomment-an-ida-plugin-to-show-user-added-comments/19747

#reverse #idapro #plugin

CASR – collect crash (or UndefinedBehaviorSanitizer error) reports, triage, and estimate severity. It is based on ideas from exploitable and apport.

https://github.com/ispras/casr