Telegram-канал "Sys-Admin Up" — @sysadm_in_up

Getting a taste of your own medicine: Threat actor MUT-1244 targets offensive actors, leaking hundreds of thousands of credentials

https://securitylabs.datadoghq.com/articles/mut-1244-targeting-offensive-actors/

Getting a taste of your own medicine: Threat actor MUT-1244 targets offensive actors, leaking hundreds of thousands of credentials

This post describes an in-depth investigation by Datadog security researchers into a threat actor dubbed MUT-1244, which targets other malicious actors as well as security practitioners and academics.

186 0 1

Sys-Admin Up

16 Dec, 19:01

Trace in Go & How to works Garbage collector

Links

Jaeger: open source, distributed tracing platform:
- https://www.jaegertracing.io/

OpenTelemetry-Go is the Go implementation of OpenTelemetry. It provides a set of APIs to directly measure performance and behavior of your software and send this data to observability platforms:
- https://github.com/open-telemetry/opentelemetry-go

Articles

Introduction to Tracing in Go with Jaeger & OpenTelemetry:
- https://medium.com/@nairouasalaton/introduction-to-tracing-in-go-with-jaeger-opentelemetry-71955c2afa39

A language-specific implementation of OpenTelemetry in Go:
- https://opentelemetry.io/docs/languages/go/

Exploring the Inner Workings of Garbage Collection in Golang : Tricolor Mark and Sweep:
- https://medium.com/@souravchoudhary0306/exploring-the-inner-workings-of-garbage-collection-in-golang-tricolor-mark-and-sweep-e10eae164a12

Memory Optimization and Garbage Collector Management in Go:
- https://betterprogramming.pub/memory-optimization-and-garbage-collector-management-in-go-71da4612a960

Docker images:

- https://hub.docker.com/r/jaegertracing/all-in-one
- https://hub.docker.com/r/jaegertracing/opentelemetry-all-in-one/

Jaeger: open source, distributed tracing platform

Monitor and troubleshoot workflows in complex distributed systems

165 0 1

Sys-Admin Up

16 Dec, 16:57

https://github.com/AggressiveUser/noxer

GitHub - AggressiveUser/noxer: Noxer is a powerful Python script designed for automating Android penetration testing tasks within the Nox Player emulator.

Noxer is a powerful Python script designed for automating Android penetration testing tasks within the Nox Player emulator. - AggressiveUser/noxer

152 0 2

Sys-Admin Up

15 Dec, 15:59

Taiga: The free and open-source project management tool

Are you find Jira alternatives? Try to Taiga:

https://taiga.io/

170 0 6

Sys-Admin Up

14 Dec, 16:42

00:02

Видео недоступно для предпросмотра

Смотреть в Telegram

𝗨𝗻𝗱𝗲𝗿𝘀𝘁𝗮𝗻𝗱𝗶𝗻𝗴 𝗛𝗼𝘄 𝗗𝗮𝘁𝗮 𝗧𝗿𝗮𝘃𝗲𝗹𝘀: 𝗧𝗵𝗲 𝟳 𝗟𝗮𝘆𝗲𝗿𝘀 𝗼𝗳 𝗢𝗦𝗜 𝗠𝗼𝗱𝗲𝗹

264 0 8

Sys-Admin Up

14 Dec, 10:27

Hate of these trackers...

182 0 1

Declawing PUMAKIT

PUMAKIT is a sophisticated loadable kernel module (LKM) rootkit that employs advanced stealth mechanisms to hide its presence and maintain communication with command-and-control servers:

https://www.elastic.co/security-labs/declawing-pumakit

Declawing PUMAKIT — Elastic Security Labs

PUMAKIT is a sophisticated loadable kernel module (LKM) rootkit that employs advanced stealth mechanisms to hide its presence and maintain communication with command-and-control servers.

190 0 2

Sys-Admin Up

11 Dec, 19:24

badram.pdf

6.6Мб

BadRam attack

216 0 3

Sys-Admin Up

11 Dec, 06:19

MITRE-ATTACK Navigator

https://github.com/CTI-Driven/Advanced-Threat-Hunting-Ransomware-Groups-Affiliates/tree/main/Known-Exploited-Vulnerabilities-By-Ransomware-Groups-KQL

Advanced-Threat-Hunting-Ransomware-Groups-Affiliates/Known-Exploited-Vulnerabilities-By-Ransomware-Groups-KQL at main · CTI-Driven/Advanced-Threat-Hunting-Ransomware-Groups-Affiliates

Advanced Threat Hunting: Ransomware Group. Contribute to CTI-Driven/Advanced-Threat-Hunting-Ransomware-Groups-Affiliates development by creating an account on GitHub.

240 0 4

Sys-Admin Up

11 Dec, 06:00

Popularization of eBPF technology and other trends in Trojan engineering.

https://news.drweb.ru/show/?i=14955&lng=ru

Популяризация технологии eBPF и другие тренды в трояностроении

Исследование очередного киберинцидента позволило вирусным аналитикам «Доктор Веб» выявить идущую хакерскую кампанию, в ходе которой проявились многие современные тенденции, применяемые злоумышленниками.

221 0 1

Sys-Admin Up

10 Dec, 18:58

Threat Advisory: Oh No Cleo! Cleo Software Actively Being Exploited in the Wild

https://www.huntress.com/blog/threat-advisory-oh-no-cleo-cleo-software-actively-being-exploited-in-the-wild

Cleo Software Actively Being Exploited in the Wild | Huntress

Huntress identified an emerging threat involving Cleo’s LexiCom, VLTransfer, and Harmony software, commonly used to manage file transfers. Read more about this emerging threat on the Huntress Blog.

220 0 1

Sys-Admin Up

7 Dec, 17:01

zizmor would have caught the Ultralytics workflow vulnerability

https://blog.yossarian.net/2024/12/06/zizmor-ultralytics-injection

zizmor would have caught the Ultralytics workflow vulnerability

232 0 4

Sys-Admin Up

7 Dec, 09:15

50 Windows Event IDs which can helpful for investigating CyberSec incidents / SIEM use cases

231 0 9

Sys-Admin Up

4 Dec, 12:02

Zabbix - SQL injection in user.get API (CVE-2024-42327)

A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from the CUser.get function which is available for every user who has API access.

Critical

https://support.zabbix.com/browse/ZBX-25623

265 0 4

Sys-Admin Up

2 Dec, 17:48

Репост из: Malware, Cats and Cryptography

Alhamdulillah, I finished writing MD MZ Book 2nd edition. More than two years have passed since then, and I wanted to supplement the book with new articles from my blog. As a result, this new edition of this book now contains almost 1000 pages.

The new version of this book is divided into five (4 + 1 bonus) chapters:
- Malware development tricks and techniques
- AV evasion tricks
- Persistence techniques
- Malware, Cryptography, Research
- Intro to linux malware development

All material in the book is based on posts from my blog.
This book is dedicated to my wife, Laura, and my children, Yerzhan and Munira. I would like to express my deep gratitude to my friends and colleagues.
Special thanks to Anna Tsyganova and Duman Sembayev.
The proceeds from the sale of this book will be used to treat Munira and charity funds from Kazakhstan:
https://cocomelonc.github.io/book/2024/11/29/mybook-2.html

Malware development book. Second edition

﷽

279 0 3