Interesting Links

A log to keep track of media

3/21

• HALF OF CURL’S VULNERABILITIES ARE C MISTAKES

2/21

• (Very) Basic Intro to Elliptic Curve Cryptography

1/21

• It rather involved being on the other side of this airtight hatchway

• CVE Stuffing

• Privilege Escalation via Python Library Hijacking

• Linux Privilege Escalation Using Capabilities

• Stealing Your Private YouTube Videos, One Frame at a Time

• A Deep Dive Into Hyperjacking

• How I hijacked the top-level domain of a sovereign state

12/20

• Sockets In Your Shell

• Turning the frustration of a mobile game into a reverse engineering training

• Weaknesses in the Key Scheduling Algorithm of RC4

• Removing Exponential Backoff from TCP

• https://readme.localtest.me/

• The Great iPwn : Journalists Hacked with Suspected NSO Group iMessage ‘Zero-Click’ Exploit

• Parsing JSON at the CLI: A Practical Introduction to `jq` (and more!)

• Google Dork Techniques

11/20

• SSH Pivoting - Red Team Village CTF Writeup
• .git hacking
• Off-the-Record Communication, or, Why Not To Use PGP
• Exploiting X11 Unauthenticated Access
• Windows Subsystem for Linux: The lost potential

10/20

• Linux and Unix sha1sum command tutorial with examples
• https://github.com/horshark/thm_hacking_encyclopedia/blob/master/THM_hacking_encyclopedia.pdf

• https://blog.cyberhacktics.com/carving-files-from-memory-with-volatility/
• https://blog.cyberhacktics.com/memory-forensics-on-windows-10-with-volatility/

9/20

• Does CSRF prevention also prevent reflected XSS attack
• The 'javascript' resource identifier scheme
• Sources and Sinks - Code Review Basics
• Let’s play a game: what is the deadly bug here?
• https://www.benkuhn.net/autocomplete/

8/20

• Architecture Playbook
• LFI and RFI Attacks

7/20

• A parable about privacy/encryption
• CrackMapExec
• PDF Shadow Attacks

6/20

• Reverse Engineering Snapchat
• SAT solver on top of regex matcher
• What happens when you update your DNS?
• Run Your Own Authoritative DNS Servers

5/20

• PrintDemon: Print Spooler Privilege Escalation, Persistence & Stealth (CVE-2020-1048 & more)
• Security Flaws in Adobe Acrobat Reader Allow Malicious Program to Gain Root on macOS Silently
• https://emaragkos.gr/resources/
• White hat social engineering: How to become an admin of a system
• STRIDE and Threat Modeling
• Application Security Testing of Thick Client Applications
• BSides SF 2020 CTF: Infrastructure Engineering and Lessons Learned

4/20

• Security 101 Series
• Reverse shell with Netcat: some use cases
• From DnsAdmins to SYSTEM to Domain Compromise
• Microsoft Buys Corp.com So Bad Guys Can’t
• HackTheBox Basic Setup Hosts File