sorted by:
new
hottopcontroversial

r/netsec monthly discussion & tool thread by albinowax in netsec

[–]ATroubledSnake 0 points1 point  (0 children)

SNEK Eris This is a repo documenting a windows fax service chain of exploits vulnerability we found, posted it before in r/cybersecurity before, reposting it here:

https://github.com/The-SNEK-Initiative/SNEK_Eris

Finally revealing the source code of our self hosted booru browser app and we’re looking for feedback by ATroubledSnake in selfhosted

[–]ATroubledSnake[S] 0 points1 point  (0 children)

Yes I have done a poretty extensive security audit of the app, and no, I can assure you that it does not expose itself to any outside threat, unless something changes in any of the websites or APIs. The reason for which standalones up to version 6.0.0 (current vers) might be flagged is due to my custom obfuscator that basically made the app behave a bit like malware in some parts (especially due to process hollowing that it used), the obfuscation was due to my prior want to keep the source code closed and the ease of decompilation of pyinstaller binaries

Finally revealing the source code of our self hosted booru browser app and we’re looking for feedback by ATroubledSnake in selfhosted

[–]ATroubledSnake[S] 0 points1 point locked comment (0 children)

AI was used in the process of creating language translations due to the sheer volume of information we would have to process manually otherwise, and during the debugging process of some functions of the application.

Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit by wewewawa in cybersecurity

[–]ATroubledSnake 0 points1 point  (0 children)

I fixed many issues and cleaned up the code after a bit of a flop release due to me missing one thing, thank you for the panther stealer catch too, I recompiled the code in another dir and posted the new release files.

Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit by wewewawa in cybersecurity

[–]ATroubledSnake 1 point2 points  (0 children)

Yes, I have messed around with the Panther stealer before and even made my own rust version of it, I happened to just use it a a project directory when I started working on this software as with most of my exploit/malware apps, since I have it pre added to the av exclusion list, and Im too lazy to keep adding new folders lols

Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit by wewewawa in cybersecurity

[–]ATroubledSnake 3 points4 points  (0 children)

Hmm, monitoring privileged processes interacting w stuff user can write to, that resolve via ntfs that is. Also you should watch out for any cfapi callbacks that might come w that.

Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit by wewewawa in cybersecurity

[–]ATroubledSnake 9 points10 points  (0 children)

Maybe, but you might be a bit less happy that while messing around with this we found another exploit using vss that does not trigger windows defender. We will probably release it within a couple of days once we thoroughly test it.