|
You are here |
synacktiv.com | ||
| | | | |
www.welivesecurity.com
|
|
| | | | | In this blog post, we provide an in-depth analysis of Linux/Ebury - the most sophisticated Linux backdoor ever seen by our researchers. It is built to steal OpenSSH credentials and maintain access to a compromised server. | |
| | | | |
volatility-labs.blogspot.com
|
|
| | | | | Month of Volatility Plugins In this blog post I will analyze the Phalanax2 rootkit using both Volatility as well as traditional malwar... | |
| | | | |
www.cybereason.com
|
|
| | | | | Cybereason GSOC observed distribution of the Bumblebee Loader and post-exploitation activities including privilege escalation, reconnaissance and credential theft. Bumblebee operators use the Cobalt Strike framework throughout the attack and abuse credentials for privilege escalation to access Active Directory, as well as abusing a domain administrator account to move laterally, create local user accounts and exfiltrate data... | |
| | | | |
endormi.io
|
|
| | | I maintain a couple of open source projects and contribute to many projects. Here are just a few of the projects that I maintain: automation - Collection of my automated tasks written in Python. awesome-dj - List of reasons why Django is awesome for web development && Django bootstrap boilerplate. devisle/advanced-react-cli - An NPM package which aims to provide a better way to install packages for your react application through an intuitive CLI. | ||