Bypass user mode hooks implemented by EDRs with Hell's Gate technique
Credits Daniel Feichter

redops.at/en/blog/explor…

#redteam

Interactive map of the Linux kernel. Useful to have a nice overview of the main components of the kernel

Map: makelinux.github.io/kernel/map/
Source repo: github.com/makelinux/linu…

#Linux

Great blog post by ret2eax on analysing and exploiting CVE-2020-16040 (Chrome's V8 heap corruption)

homecrew.dev/posts/cve-2020…

#chrome

Reverse engineering the runtime code integrity protection of Call of Duty: Black Ops 3
Credits Maurice Heumann

web.archive.org/web/2023052223…

#reverseengineering #infosec

Analyzing and exploiting vulnerabilities in Empire c2 framework.
Credits ACE Responder

aceresponder.com/blog/exploitin…

#c2 #infosec

Attacking cars wireless exposed communication (Tesla Model Y, NFC and Proxmark)
Interesting white paper (2022) by Josep Pi Rodriguez (@IOActive)

White paper link: act-on.ioactive.com/acton/attachme…

#automotive #cybersecurity

Vulnerability analysis of DJI drones' firmware by Nozomi Networks

Interesting: weak Wi-Fi password cracking (CVE-2023-6951) + unauthenticated video exfiltration (CVE-2023-6949)

Firmware Analysis: nozominetworks.com/blog/dji-mavic…
Vulnerability Analysis: nozominetworks.com/blog/dji-mavic…

#drone

JSON command injection in Netgear router WAN interface (pufwUpgrade)
Great blog post by McCaulay Hudson (NCC Group Research & Technology)

research.nccgroup.com/2024/02/09/puc…

#iot

Excellent CTF challenges writeups for learning the msg_msg technique for arbitrary read and write for Linux kernel exploitation

syst3mfailure.io/wall-of-perdit…
willsroot.io/2021/08/corctf…

#Linux #cybersecurity

Beginner intro to cryptography concepts with practical examples in Linux (openssl)
(credits Sergio Prado 🐧)

Part 1: sergioprado.blog/introduction-t…
Part 2: sergioprado.blog/a-hands-on-app…
Part 3: sergioprado.blog/asymmetric-key…
Part 4: sergioprado.blog/what-are-rando…

#cryptography #cybersecurity

Very interesting reading on bypassing BitLocker
Credits Urs Muller (Compass Security)

blog.compass-security.com/2024/02/micros…

#bitlocker

Useful blog post for beginners approaching ghidra for the first time by Omar

byte.how/posts/what-are…

#ghidra #cybersecurity

Linux red teaming basic techniques
Introduction by Linode

Exploitation: linode.com/docs/guides/li…
Escalation: linode.com/docs/guides/li…
Persistence: linode.com/docs/guides/li…

#Linux #cybersecurity

Introduction to techniques for bypassing anti-debugging and anti-reversing defences for reversing iOS applications
Credits Xenofon Vassilakopoulos (twelvesec)

twelvesec.com/2023/10/10/byp…

#reverseengineering

A few years old but still a very well written writeup by Andy Nguyen on zero click RCE vulnerabilities in Linux bluetooth stack (BleedingTooth)

google.github.io/security-resea…

#bluetooth

Introduction to user space Linux rootkits with examples by h0mbre

h0mbre.github.io/Learn-C-By-Cre…

#infosec #rootkit

Overview of SAST tools with references and CodeQL examples
Credits Nicole Choi (GitHub Security Lab)

github.blog/2024-02-12-the…

#sast

Vulnerability analysis of DJI drones' firmware by Nozomi Networks

Interesting: weak Wi-Fi password cracking (CVE-2023-6951) + unauthenticated video exfiltration (CVE-2023-6949)

Firmware Analysis: nozominetworks.com/blog/dji-mavic…
Vulnerability Analysis: nozominetworks.com/blog/dji-mavic…

#drone

Series by Pepe Berba about persistence in Linux environments

Map: pberba.github.io/assets/posts/c…

Auditd: pberba.github.io/security/2021/…

Accounts: pberba.github.io/security/2021/…

Systemd: pberba.github.io/security/2022/…

Scripts: pberba.github.io/security/2022/…

Generators: pberba.github.io/security/2022/…

#Linux

Great research work on TETRA (Terrestrial Trunked Radio) by Carlo Meijer, Wouter Bokslag and Jos Wetzels (security analysis and vulnerabilities)

Paper: uploads-ssl.webflow.com/64a2900ed5e9bb…
Slides: uploads-ssl.webflow.com/64a2900ed5e9bb…
Repo: github.com/MidnightBlueLa…

#tetra #wireless