Telegram-канал "-CyberSecurityTechnologies-" — @CyberSecurityTechnologies

-CyberSecurityTechnologies-

27 Dec, 06:01

#tools
#Offensive_security
1. PowerShell PoC to bypass Entra/Intune Compliance Conditional Access Policy
https://github.com/zh54321/PoCEntraDeviceComplianceBypass
2. Svartalfheim - Stage0 Shellcode to Download a Remote Payload and Execute it in Memory
https://github.com/NtDallas/Svartalfheim

1.2k 0 15

-CyberSecurityTechnologies-

27 Dec, 06:01

PKC.pdf

1.6Мб

#Whitepaper
#cryptography
"Revolutionizing Enterprise Security: The Exciting Future of Passkeys Beyond Passwords!", 2024.

1.2k 0 9 2

-CyberSecurityTechnologies-

27 Dec, 06:01

#Malware_analysis

1. Reptile's Custom Kernel-Module Launcher
2. Rekoobe Backdoor
3. Hiding in Plain Sight: The Subtle Art of Loki Malware’s Obfuscation
4. SteelFox Trojan
5. Deobfuscating JavaScript Malware Using Abstract Syntax Trees
6. MintsLoader (+ Yara rules)

1.4k 0 27 2

-CyberSecurityTechnologies-

26 Dec, 13:36

Attacking_with_MSSQL.pdf

3.2Мб

#Whitepaper
#Red_Team_Tactics
"Attacking Modern Environments with MS-SQL Servers", 2022.

2.2k 0 76 15

-CyberSecurityTechnologies-

26 Dec, 13:36

#tools
#MLSecOps
LLM Vulnerability Scanner
https://github.com/NVIDIA/garak
]-> Framework for Security Probing LLMs (.pdf)

2.4k 0 39 15

-CyberSecurityTechnologies-

26 Dec, 06:01

Spill_the_TeA.pdf

882.8Кб

#Research
#Mobile_Security
"Spill the TeA: An Empirical Study of Trusted Application Rollback Prevention on Android Smartphones", 2024.
]-> https://github.com/HexHive/spill_the_tea/tree/sec-ae

2.5k 0 28 12

-CyberSecurityTechnologies-

26 Dec, 06:01

#WLAN_Security
1. PMKID Attacks:
Debunking the 802.11r Myth
https://www.nccgroup.com/us/research-blog/pmkid-attacks-debunking-the-80211r-myth
2. Command injection vulnerability in getWindowsIEEE8021x (SSID)
https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-cvv5-9h9w-qp2m

2.3k 0 22 11

-CyberSecurityTechnologies-

25 Dec, 11:25

#info
#Events
TOP-25 Cybersecurity Conferences in 2025:
1. ACM WiSec 2025 (June 30 - July 3)
2. BruCON 2025 (Sept. 25-26)
3. BSides SF 2025 (Apr. 26-27)
4. Cloud & Cyber Security Expo 2025 (Mar. 12-13)
5. DEF CON 33 (Aug. 7-10)
6. IEEE S&P Symposium (May 12-15)
7. EICC 2025 (June 18-19)
8. ESORICS 2025 (Sept. 22-26 )
9. EuroS&P 2025 (June 30 - July 4)
10. Hexacon 2025 (Oct 4-5)
11. ICCH 2025 (Jan. 9-10)
12. JSAC 2025 (Jan. 21-22)
13. National Cyber Summit (Sept. 23-25)
14. NDSS Symposium (Feb 24-28)
15. Nullcon Goa (Mar. 1-2)
16. OWASP LASCON 2025 (Oct. 21-22)
17. POC2025 Hacking Conference (Nov.)
18. Pwn2Own Automotive 2025 (Jan.22-24)
19. RSA Conference 2025 (Apr 28 - May 1)
20. SANS DFIR Summit & Training (Jul 24-31)
21. USENIX Security Symposium (Aug. 13-15)
22.
23. Black Hat 2025:
• Spring Trainings (Mar. 25-28)
• USA (Aug. 2-7)
• Asia (Apr. 1-4)
• Europe (Dec. 4-7)
24. ZeroTrust Summit 2025 (Feb.19)
25. Zer0Con 2025 (Apr. 10-11)

3k 0 146 41

-CyberSecurityTechnologies-

25 Dec, 06:07

Powell_Proof_pudding.pdf

1005.8Кб

#Threat_Research
#Malware_analysis
"The Proof is in the Pudding: EDR Configuration Versus Ransomware", 2024.

2.8k 0 38

-CyberSecurityTechnologies-

25 Dec, 06:07

#Fuzzing
#Kernel_Security
Finding Bugs in Linux Kernel
Part 1 - Crashing a Vulnerable Driver with Syzkaller
Part 2 - Fuzzing the Actual Kernel

2.8k 0 46 9

-CyberSecurityTechnologies-

25 Dec, 06:06

One_Solves_All.pdf

2.3Мб

#MLSecOps
#cryptography
"One Solves All: Exploring ChatGPT's Capabilities for Fully Automated Simple Power Analysis on Cryptosystems", 2024.
]-> https://github.com/haillife/One-Solves-All

2.7k 0 34 9

-CyberSecurityTechnologies-

24 Dec, 12:57

KDA_Detect.pdf

5.9Мб

#DFIR
"Kerberos Delegation Attacks, Detections and Defenses", 2024.

2.9k 0 61 11

-CyberSecurityTechnologies-

24 Dec, 12:57

#exploit
1. A Practical Guide to PrintNightmare in 2024 (updated Oct 5)
https://itm4n.github.io/printnightmare-exploitation
]-> PnP bypass

2. CVE-2024-12209:
WP Umbrella Unauthenticated LFI
https://github.com/Nxploited/CVE-2024-12209

3. CVE-2024-30085:
Windows 11 23H2 EoP
https://ssd-disclosure.com/ssd-advisory-cldflt-heap-based-overflow-pe

2.8k 0 40

-CyberSecurityTechnologies-

24 Dec, 06:00

Recovering_wpa3.pdf

1.3Мб

#WLAN_Security
#Red_Team_Tactics
"Recovering WPA-3 Network Password by Bypassing the Simultaneous Authentication of Equals Handshake using Social Engineering Captive Portal", 2024.