awesome-list/topics/cybersec.md

Cybersecurity Content

Summary

• 2023
• 2022
• 2021
• 2020
• 2018
• 2016
• Other

2023

• "A Deep Dive into Penetration Testing of macOS Applications (Part 1)"
• "Analysis on legit tools abused in human operated ransomware"
• "Analysis of VirtualBox CVE-2023-21987 and CVE-2023-21991"
• "ARM64 Reversing And Exploitation" (8ksec)
  • Part 1
  • Part 2
  • Part 3
  • Part 4
  • Part 5
  • Part 6
  • Part 7
• "Back to the Future with Platform Security"
• "Bash Privileged-Mode Vulnerabilities in Parallel Desktop and CDPATH Handling in MacOS"
• "Bee-yond Capacity: Unauthenticated RCE in Extreme Networks/Aerohive Wireless APs - CVE-2023-35803"
• "Behind the Shield: Unmasking Scudos's Defenses"
• "Breaking the Code - Exploiting and Examining CVE-2023-1829 in cls_tcindex Classifier Vulnerability"
• "Coffee: A COFF loader made in Rust"
• "CVE-2023-2008 - Analyzing and exploiting a bug in the udmabuf driver"
• "CVE-2023-26258 – Remote Code Execution in ArcServe UDP Backup"
• "Debugger Ghidra Class"
• "Dirty Pagetable: A Novel Exploitation Technique To Rule Linux Kernel"
• "Drone Security and Fault Injection Attacks"
• "Emulating IoT Firmware Made Easy: Start Hacking Without the Physical Device"
• "EPF: Evil Packet Filter"
• "ESP32-C3 Wireless Adventure A Comprehensive Guide to IoT"
• "Executing Arbitrary Code & Executables in Read-Only FileSystems"
• "Exploring Android Heap Allocations in Jemalloc 'New'"
• "Finding bugs in C code with Multi-Level IR and VAST"
• "Finding Gadgets for CPU Side-Channels with Static Analysis Tools"
• "For Science! - Using an Unimpressive Bug in EDK II to Do Some Fun Exploitation"
• "FortiNAC - Just a few more RCEs"
• "Fortinet Series 3 — CVE-2022–42475 SSLVPN exploit strategy"
• "Framing Frames: Bypassing Wi-Fi Encryption by Manipulating Transmit Queues"
• "Fuzzing Farm":
  • "Fuzzing GEGL with fuzzuf"
  • "Evaluating Performance of Fuzzer"
  • "Patch Analysis and PoC Development"
  • "Hunting and Exploiting 0-day [CVE-2022-24834]"
• "Hacking Amazon's eero 6 (part 1)"
• "Hacking Brightway scooters: A case study"
• "Hardware Hacking to Bypass BIOS Passwords"
• "How I Hacked my Car":
  • Part 1
  • Part 2
  • Part 3
  • Part 4
  • Part 5
  • Part 6
• "Intercepting Allocations with the Global Allocator"
• "Introduction to SELinux"
• "Learn Makefiles With the tastiest examples"
• "Linux rootkits explained – Part 1: Dynamic linker hijacking"
• "Linux Shellcode 101: From Hell to Shell"
• "Lord Of The Ring0":
  • Part 1
  • Part 2
  • Part 3
  • Part 4
  • Part 5
• "Low-Level Software Security for Compiler Developers"
• "mast1c0re"
  • "Introduction – Exploiting the PS4 and PS5 through a game save"
  • "Part 1 – Modifying PS2 game save files"
  • "Part 2 – Arbitrary PS2 code execution"
  • "Part 3 – Escaping the emulator"
• "Obscure Windows File Types"
• "OpenSSH Pre-Auth Double Free CVE-2023-25136 – Writeup and Proof-of-Concept"
• "PyLoose: Python-based fileless malware targets cloud workloads to deliver cryptominer"
• "Red vs. Blue: Kerberos Ticket Times, Checksums, and You!"
• "Retreading The AMLogic A113X TrustZone Exploit Process"
• "Revisiting CVE-2017-11176"
• "Shambles: The Next-Generation IoT Reverse Engineering Tool to Discover 0-Day Vulnerabilities"
• "Shell in the Ghost: Ghostscript CVE-2023-28879 writeup"
• "SRE deep dive into Linux Page Cache"
• "THC's favourite Tips, Tricks & Hacks (Cheat Sheet)"
• "The art of Fuzzing: Introduction"
• "The art of fuzzing: Windows Binaries"
• "The art of fuzzing-A Step-by-Step Guide to Coverage-Guided Fuzzing with LibFuzzer"
• "The Linux Kernel Module Programming Guide"
• "Sshimpanzee"
• "Xortigate, or CVE-2023-27997 - The Rumoured RCE That Was"
• "Your not so "Home Office" - SOHO Hacking at Pwn2Own"
• "UNCONTAINED: Uncovering Container Confusion in the Linux Kernel"
• "Windows Installer arbitrary content manipulation Elevation of Privilege (CVE-2020-0911)"

2022

• "Dumping the Amlogic A113X Bootrom"
• "exploiting CVE-2019-2215"
• "Hunting for Persistence in Linux"
  • Part 1
  • Part 2
  • Part 3
  • Part 4
  • Part 5
• "Netgear Orbi":
  • "orbi hunting 0x0: introduction, uart access, recon"
  • "orbi hunting 0x1: crashes in soap-api"
  • "nday exploit: netgear orbi unauthenticated command injection (cve-2020-27861)"
• "nday exploit: libinput format string bug, canary leak exploit (cve-2022-1215)"
• "The Old, The New and The Bypass - One-click/Open-redirect to own Samsung S22 at Pwn2Own 2022"
• "Turning Google smart speakers into wiretaps for $100k"

2021

• "Learning Linux Kernel Exploitation":
  • Part 1
  • Part 2
  • Part 3
• "Linux Kernel Exploitation":
  • "Debugging the Kernel with QEMU"
  • "Smashing Stack Overflows in the Kernel"
  • "Controlling RIP and Escalating privileges via Stack Overflow"
• "Recovering a Full PEM Private key when Half of it is Redacted"

2020

• "Hardware Hacking 101: Identifying and Dumping eMMC Flash"
• "NTLM Relay"

2018

• "CVE-2017-11176: A step-by-step Linux Kernel exploitation":
  • Part 1
  • Part 2
  • Part 3
  • Part 4
• "eMMC Data Recovery from Damaged Smartphone"

2016

• "Implementation of Signal Handling"
• "Practical Reverse Engineering"
  • "Digging Through the Firmware"
  • "Scouting the Firmware"
  • "Following the Data"
  • "Dumping the Flash"
  • "Digging Through the Firmware"
• "Understanding and Hardening Linux Containers"

Other

• "Advanced binary fuzzing using AFL++-QEMU and libprotobuf: a practical case of grammar-aware in-memory persistent fuzzing"
• "Introduction to encryption for embedded Linux"
  • "Introduction to encryption for embedded Linux developers"
  • "A hands-on approach to symmetric-key encryption"
  • "Asymmetric-Key Encryption and Digital Signatures in Practice"
• "Linux Syscalls Reference"
• "mjsxj09cm Recovering Firmware And Backdooring"