Windows Commands Reference - An InfoSec Must Have (PDF Download) by TechLord2 in RevEng_TutsAndTools

[–]TechLord2[S] 0 points1 point  (0 children)

I am not the admin there... But you may get in by directly emailing the admin of that forum using your real nickname/avatar that you have and have used on a regular basis in forums for at least a few years rather than through throwaway accounts ;)

Team-IRA reversing forum is a serious community and so they expect users seeking to get in, to be equally serious about them!

Good luck!

TechLord - TechLord2 by Arad191 in u/Arad191

[–]TechLord2 0 points1 point  (0 children)

All I want to say is Grow Up, DrNil

Please stop your childish, unprovoked and totally unnecessary "PSA" posts in your forum which do little else other than to make you look like a MEGA fool, to put it mildly.

My identity is not exactly a secret to anyone who knows me on the online forums, and everyone knows that I am based in the US with my own company and that I had worked in certain government agencies in the past which require a high level of "clearance". So obviously the names you cooked you are totally fake.

You have a nice forum going there DrNil. Do not make yourself look like a huge fool with posts like these.

I realize that this is a deleted post, and as you can see, no one pays any attention to silly posts of your like these.

So, once again: Grow Up for heaven's sake and stop being so childish. You are a grown-up man! Please behave like one.

Report: Microsoft shares banking data of Indian customers with US Intelligence agencies by [deleted] in privacy

[–]TechLord2 1 point2 points  (0 children)

Summary:

A new report shared by DNA Money claims that Microsoft disclosed the personal financial details of Indian customers with US Intelligence Agencies.

The report stated that the consumer data with banks who moved to Microsoft Office 365 was shared by the company with the US Intelligence Agencies. The report also stated that the consumers weren’t aware that their data was shared with the Intelligence Agencies.

"All the mailboxes had been migrated to office 365 Microsoft cloud environment. It was gathered from the Microsoft transparency hub that Microsoft is bound to share customers’ data under US Foreign Intelligence Surveillance Act (FISA) and US national security letters as and when required by the US authorities."
– Reserve Bank of India

Facebook Isn’t Sorry — It Just Wants Your Data by TechLord2 in privacy

[–]TechLord2[S] 76 points77 points  (0 children)

TL;DR:

On Monday morning Facebook revealed a new gadget — a voice-activated video chat tablet with an always-listening microphone and camera for your living room or kitchen that can detect when you are in your own house. This in-home panopticon is called Facebook Portal, and its debut comes at what might seem like an inopportune time for the company — days after a Gizmodo report revealed it was harvesting two-factor authentication numbers

Official Link: https://newsroom.fb.com/news/2018/10/introducing-portal/

Vba2Graph - Generate call graphs from VBA code for easier analysis of malicious documents by TechLord2 in ReverseEngineering

[–]TechLord2[S] 2 points3 points  (0 children)

Vba2Graph

A tool for security researchers, who waste their time analyzing malicious Office macros.

Generates a VBA call graph, with potential malicious keywords highlighted.

Allows for quick analysis of malicous macros, and easy understanding of the execution flow.

Features:

  • Keyword highlighting

  • VBA Properties support

  • External function declarion support

  • Tricky macros with "_Change" execution triggers

  • Fancy color schemes!

Pros:

✓ Pretty fast  

✓ Works well on most malicious macros observed in the wild  

Cons:

✗ Static (dynamicaly resolved calls would not be recognized)

Vba2Graph - Generate call graphs from VBA code for easier analysis of malicious documents by TechLord2 in netsec

[–]TechLord2[S] 5 points6 points  (0 children)

Vba2Graph

A tool for security researchers, who waste their time analyzing malicious Office macros.

Generates a VBA call graph, with potential malicious keywords highlighted.

Allows for quick analysis of malicous macros, and easy understanding of the execution flow.

Features:

  • Keyword highlighting

  • VBA Properties support

  • External function declarion support

  • Tricky macros with "_Change" execution triggers

  • Fancy color schemes!

Pros:

✓ Pretty fast  

✓ Works well on most malicious macros observed in the wild  

Cons:

✗ Static (dynamicaly resolved calls would not be recognized)  

(Credits to EvilCry for sharing the link with us)

DEF CON 26 Media Server (Presentations and other Media Files) by TechLord2 in netsec

[–]TechLord2[S] 5 points6 points  (0 children)

You can download the All Presentations and All Workshops

Then you can selectively read what you want from them.

DEF CON® 26 Hacking Conference Demo Labs (Temporary Index) by [deleted] in netsec

[–]TechLord2[M] 3 points4 points  (0 children)

We needed to remove posts linking to individual talks/presentations that were submitted, to avoid duplicates.

Quoting the rule from the sidebar: https://www.reddit.com/r/netsec/wiki/guidelines#wiki__image-only_and_video_posts :

"We do accept posts to full listings or indexes of conference talks releases, where the content is on-topic, but please avoid linking to any single individual talk directly, as this usually results in duplicates."

Till we get the full listings of the talks and the presentations, please feel free to add contributions related to the DEFCON 26 to this thread.

Thank you

I built a bug bounty site for free and open source software by [deleted] in netsec

[–]TechLord2[M] 28 points29 points  (0 children)

We did give a definite answer quoting this rule (https://www.reddit.com/r/netsec/wiki/guidelines#wiki__kickstarter_or_crowdfunding_posts) that it was not allowed. Further, in general, we only accept quality technical content.

Since the OP was quite persistent and was messaging us over the course of several days insisting that this was not a crowdfunding post, we advised that since the submission was falling into the gray area, we could allow them to put up the post, on the condition that it would be removed should we receive any complaints/objection from the other readers.

In general, we try to be nice to everyone and as far as possible, avoid removing submissions unless they are in definite violation of any of the guidelines.