LMNT的动态

Hello connections, I solved one of the room on TryHackMe, which was more focused on the Basic enumeration and Initial access --> Extracting "user" and "root" flag. Here's a detailed Write-Up for the same.... Room: Battery | TryHackMe --- SOLVED!!???? Write-up: https://lnkd.in/dHfueBnA #cybesecurity #tryhackme #writeup

Things wot I gone and done recently: * Switched from Clamav to the Thor malware scanner, after many frustrating hours of trying to get Clamav to work. Thor is closed source, but is written in GO and is much more modern and better maintained than Clamav. Thor-Lite, the version I'm using, is free for non-commercial use. I got it working in minutes, and it is incredibly fast compared to Clamav. Check it out if you want a Linux-based AV scanner. https://lnkd.in/eaUV-PhR

Version 0.11.0 of gnark was just released, which fixes two vulnerabilities in the Groth16 backend reported by Zellic (CVE-2024-45039, CVE-2024-45040). These affect the soundness and ZK property of generated proofs. For an in-depth explanation of Groth16, gnark’s extension with commitments, the two issues we reported, and how to check if you're vulnerable, check out our blog post: https://lnkd.in/gKechzw6

The first module of the day, and one step closer to another Certification! Used a ton of programs I hadn't used before to diagnose, identify, and confirm data from potentially malicious programming. CFF Explorer, Do It Easy, PE-Bear, PEStudio, and Resource Hacker just to name a few. Very cool to see what kind of programs are out there to help the detective process along. The first of three for today. I'll see you once I have the next one finnished!

?? ?????????? ???? ???????? ?????? ?????????? ??????????! The Sysdig Threat Research Team recently explored four vulnerabilities in the Common Unix Printing System (CUPS) that could make your systems vulnerable. ?? ?Three of these are classified as High risk and one as Critical, potentially enabling remote attackers to execute any command on unpatched systems. I strongly encourage you to check out their blog for insights on how these vulnerabilities can be exploited, essential detection methods using open source Falco, and solid mitigation tactics. ??? ?? https://okt.to/H79J1g

Hacked! ?? Decoding a recent Active Directory breach on Hack The Box's "campfire-1" lab. Using only the provided logs, I dissected the attack, identifying the tools used, methods employed, and the timeline of events. Stay tuned for a deeper dive into this cybercrime case study. #Hackthebox #splunk #malwareanalysis #loganalysis #windows #activedirectory #kerberosting #blueteam

Investigating recent software glitches has led to some fascinating discoveries! I noticed intermittent crashes and blue screens, prompting a deep dive into the root cause. My goal? To conduct both static and dynamic analyses on the provided malware sample to uncover its behavior. In my static analysis, I've identified the SHA256 hash, and determined the binary to be a 32-bit executable. My dynamic analysis uncovered some intriguing findings, including the initiation of a PowerShell instance and subtle host-based indicators.

?? Exciting Update! ?? I've just published a follow-up blog to my previous article "Finding the Vulnerable Code in Mirth Connect 4.4.0 (CVE-2023-43208)". This new post dives deep into the enumeration process we used to identify and analyze the vulnerability. ?? In this latest blog, I outline the detailed steps our team took during the enumeration phase, including: -> Running Nmap, Nikto, and Nessus scans -> Searching for exploits on Metasploit -> Key findings and insights from these tools ?? Special thanks to my collaborators Rakshith Raj G P and Mustafa Talha U?ar. A shoutout to Rakshith for his crucial role in the enumeration process! Below is the link to the blog. #CyberSecurity #MirthConnect #VulnerabilityManagement #TechBlog

Hackers Deploy Python Backdoor in Palo Alto Zero-Day Attack. Threat actors have been exploiting the newly disclosed zero-day flaw in Palo Alto Networks PAN-OS software dating back to March 26, 2024, nearly three weeks before it came to light yesterday. The network security company's Unit 42 division is?tracking?the activity under the name?Operation MidnightEclipse, attributing it as the work of a single threat actor of https://ow.ly/etY6105pnfu #InceptusSecure #UnderOurProtection

Hackers Deploy Python Backdoor in Palo Alto Zero-Day Attack. Threat actors have been exploiting the newly disclosed zero-day flaw in Palo Alto Networks PAN-OS software dating back to March 26, 2024, nearly three weeks before it came to light yesterday. The network security company's Unit 42 division is?tracking?the activity under the name?Operation MidnightEclipse, attributing it as the work of a single threat actor of https://ow.ly/etY6105pnfu #InceptusSecure #UnderOurProtection