F.P.W Library Sec [ CyberSecurity Book ]

Some useful Telegram channels @OsintBlackBox If you are interested in OSINT, the content here will be useful for you. @BlackBoxOsint If you are interested in OSINT, the content here will be useful for you. @PfkGit If you are looking for penetration testing tools, find them here. @pfk_git If you ar…

Feeding Gophers to Ghidra #Ghidra 📚 T.me/Library_Sec

SMART SPEAKER SHENANIGANS: MAKING THE SONOS ONE SING ITS SECRETS 📚 T.me/Library_Sec

Catalyzer, Small Tool For Incident Responders and SOC Analysts https://github.com/Almorabea/Catalyzer 🎞 @Library_Sec

​​Hiding Shellcode In Plain Sight This technique is very simple, a RW memory region 2048 the size of the shellcode is allocated. This region is then filled with randomized data data (RtlGenRandom), the shellcode is then placed randomly somewhere within this massive region each time. This makes it h…

Some useful Telegram channels @OsintBlackBox If you are interested in OSINT, the content here will be useful for you. @BlackBoxOsint If you are interested in OSINT, the content here will be useful for you. @PfkGit If you are looking for penetration testing tools, find them here. @pfk_git If you ar…

📚 T.me/Library_Sec

Hands-On Security in DevOps. #DevOps #Security 📚 @Library_Sec

#Fuzzing "L2Fuzz: Discovering Bluetooth L2CAP Vulnerabilities Using Stateful Fuzz Testing", 2022. Bluetooth is a wireless communication technology that al￾lows users to exchange various data in a short range, including Bluetooth Basic Rate/Enhanced Data Rate (BR/EDR) and Bluetooth Low Energy (BLE)…

#Sec_code_review "LibDB: An Effective and Efficient Framework for Detecting Third-Party Libraries in Binaries", 2022. Third-party libraries (TPLs) are important components of modern software systems. They are reused frequently during software de velopment . Open-source repository platforms and pac…

"How security professionals are being attacked: A study of malicious CVE proof of concept exploits in GitHub", 2022. CVE, which stands for Common Vulnerabilities and Expo￾sures1, is a list of publicly disclosed security flaws in software or systems, which have been assigned individual CVE IDs. ]->…

📚 T.me/Library_Sec

Кибербезопасность стратегии атак и обороны 2020 . 📚 @Library_Sec

#tools #Offensive_security "Exploring Widevine for Fun and Profit", 2022. ]-> Widevine Key Ladder Script (Python3): https://github.com/Avalonswanderer/widevine_key_ladder ]-> A tool to trace Widevine execution in Android and dump buffers: https://github.com/Avalonswanderer/wideXtractor Nowadays, p…

#Mobile_Security #Sec_code_review "Demystifying Hidden Sensitive Operations in Android apps", 2022. ]-> FlowDroid Static Data Flow Analysis Tool: https://github.com/secure-software-engineering/FlowDroid Android is the most adopted mobile operating systems in terms of users, applications and develo…