June 11, 2022

Great article on ancient warfare. I know you all subscribe for the history, so you’ll love this.

https://www.historytoday.com/archive/history-matters/no-army-no-problem

-

Francis Scarr @francis_scarr

Russian forces and soldiers from the "Donetsk people's militia" are deploying mobile propaganda stations to suppress Ukrainian TV signals and "allow Ukrainian troops to discover what the real situation is in the conflict zone" (with subtitles)

-

20 years of SIP. VoIP was one of the areas I focussed on for a while. Attacking internet telephony seemed like it would be interesting.

https://www.jdrosen.net/blog/20-years-of-sip-a-retrospective

-

Katelyn Burns @transscribe

This website is free somehow

-

Alec Muffett @AlecMuffett

Aren't we all?

-

-

Vladislav Hrcka @HrckaVladislav

The slides for my REcon talk "Under the hood of Wslink’s multilayered virtual machine" are now available here:

github.comwslink-vm-analyzer/WslinkVMREcon.pdf at master · eset/wslink-vm-analyzerWslinkVMAnalyzer is a tool to facilitate analysis of code protected by a virtual machine featured in Wslink malware - wslink-vm-analyzer/WslinkVMREcon.pdf at master · eset/wslink-vm-analyzer

-

Michael Weiss 🌻🇺🇸🇮🇪 @michaeldweiss

“Scouts working for Ukraine’s military behind enemy lines directed artillery attacks on two Russian bases in the occupied Kherson region that killed scores of enemy soldiers, according to a senior Ukrainian military official with knowledge of the attacks.”

nytimes.comBehind Enemy Lines, Scouts Help Ukrainians Execute Deadly StrikesA nascent insurgency made up of civilians or former soldiers provided information that aided Ukraine’s attack on two Russian bases, according to a senior Ukrainian military official.

There is an insurgency thing going on in Ukraine. There is also a unit of special forces that does behind the lines operations.

https://www.nytimes.com/2022/06/10/world/europe/ukraine-russia-war.html

Here is the website for the insurgents.

https://sprotyv.mod.gov.ua/action-grid/

-

raptor @0xdea

Long, detailed read that digs into the recent dirty pipe vulnerability of the Linux kernel Exploration of the Dirty Pipe Vulnerability (CVE-2022-0847)

lolcads.github.ioExploration of the Dirty Pipe Vulnerability (CVE-2022-0847)Intro This blog post reflects our exploration of the Dirty Pipe Vulnerability in the Linux kernel. The bug was discovered by Max Kellermann and described here. If you haven’t read the original publication yet, we’d suggest that you read it first (maybe also twice ;)). While Kellermann&rs…

-

Ollie Whitehouse @ollieatnccgroup

Reminds me of when @neonbunny9 did sandbox escapes of Blueray players both physical and virtual in 2015. I always hoped we would use them on engagements to pop shells by mailing Rick Roll videos on Bluerays.. .. or secret Deathstar plans research.nccgroup.com/2015/02/27/abu…

Andy Nguyen @theflow0

bd-jb: Blu-ray Disc Java Sandbox Escape affecting PS3, PS4, PS5. My talk at @hardwear_io will be uploaded in a few weeks. #hardwear_io https://t.co/gVs03Ie46q

-

Alex von Tunzelmann @alexvtunzelmann

Just perfect, too perfect, a whole history of the marketing of counterculture in one tweet: impossible to satirise in any way

Sex Pistols Official @sexpistols

The God Save The Queen NFT collection, includes three tiers of rarity 💎 Each tier features a number of artworks & NFT's will be allocated upon minting.

-

Matt Suiche @msuiche

You are talking about symbolic execution on firmwares when you can just inject commands directly and bypass authentication on routers https://t.co/pRr9H7iARU

MrR3b00t | #StandWithUkraine #DefendAsOne @UK_Daniel_Card

@NCCGroupInfosec AGHHHH LOL WTF https://t.co/UjQHfoIjQM

-

James Forshaw @tiraniddo

I must say, crack.sh is pretty impressive. 45 seconds for a NTLMv1 hash :) Of course if anyone can tell me what the password was I'd appreciate it, seems I've forgotten😂