#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2026.07.15.md

Megalodon: Mass GitHub Repo Backdooring via CI Workflows - https://safedep.io/megalodon-mass-github-repo-backdooring-ci-workflows/

Mapping Virtual to Physical Addresses Using Superfetch - https://www.outflank.nl/blog/2023/12/14/mapping-virtual-to-physical-adresses-using-superfetch/

Accelerating EDR Evasion with LLM-Driven Analysis - https://specterops.io/blog/2026/06/29/llm-powered-edr-analysis/

Carbonara: The MediaTek exploit nobody served - https://itssho.my/blog/article/serving-carbonara

DoublePulsar: A User-Defined Reflective Loader in the Crystal Palace and Tradecraft Garden Era - https://memn0ps.github.io/doublepulsar-a-user-defined-reflective-loader-in-the-crystal-palace-and-tradecraft-garden-era/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2026.07.13.md

klist.exe Revisited: Internals and Further Use Cases - https://jakeotte.com/posts/klist-revisited.html

Playing a Different Game: Rethinking Modern Defense Evasion - https://c0rnbread.com/playing-a-different-game-rethinking-modern-defense-evasion/

Inferring Network Protocols from Traffic with MARISSA - https://reversea.me/index.php/inferring-network-protocols-from-traffic-with-marissa/

Rusty Bootkit - Windows UEFI Bootkit in Rust (Codename: RedLotus) - https://memn0ps.github.io/rusty-windows-uefi-bootkit/

Offensive PowerShell for Red Teamer with Defense Evasion Techniques - https://screetsec.com/blog/offensive-powershell-for-red-teamer-with-defense-evastion-techniques

#informatyka

Polecacie jakiś niedrogi VPS?

#pytanie #informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2026.07.11.md

MSFDefender: Metasploit Windows Modules Detonation & Analysis -mhttps://bloo.io/blog/msfdefender-metasploit-windows-modules-detonation-analysis

Studying LLM Workflows Until They Actually Find Cool Bugs - https://felixbillieres.github.io/posts/llm-bug-bounty-pipeline-2026/

Becoming the Machine, A Virtual Account's Guide to Total Control - https://www.abdulmhsblog.com/posts/iammachine/

Hack the Elephant One Bite at a Time: NUL byte SQL Injection in pdo_firebird and NULL Pointer Dereference in PDO via pdo_pgsql - https://swarm.ptsecurity.com/hack-the-elephant-one-bite-at-a-time-nul-byte-sql-injection-in-pdo_firebird-and-null-pointer-dereference-in-pdo-pgsql/

Discovery & Validation in the Linux Kernel (Part 3): Local vs Frontier Models h- ttps://bynar.io/blog/discovery-validation-in-the-linux-kernel-part-3-local-vs-frontier-models

#informatyka

Chat Control 1.0 przyjęty przez Parlament Europejski tylnymi drzwiami

https://pl.euronews.com/next/2026/07/10/chat-control-10-przyjety-przez-parlament-europejski-tylnymi-drzwiami

Oczywiście jak zwykle opakowane jest to w "dobro dzieci".

A to lista europosłów głosująca za skanowaniem prywatnych wiadomości w komunikatorach:

#polityka #uniaeuropejska #UE #internet #informatyka #prywatnosc #inwigilacja #cyberbezpieczenstwo

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2026.07.09.md

Breaking eBPF Security: How Kernel Rootkits Blind Observability Tools - https://matheuzsecurity.github.io/hacking/ebpf-security-tools-hacking/

TAPOcalypse Now: Exploiting TP-Link Smart Devices From Anywhere - https://labs.taszk.io/articles/post/tapocalypse/

Leanstral 1.5: Proof Abundance for All https://mistral.ai/news/leanstral-1-5/

CVE-2025-38352 (Part 1) - In-the-wild Android Kernel Vulnerability Analysis + PoC - https://faith2dxy.xyz/2025-12-22/cve_2025_38352_analysis/

Hunting Sleeping Giants: Detecting Encrypted Beacon Sleep Obfuscation - https://justruss.tech/index.php/2026/06/21/hunting-sleeping-giants-detecting-encrypted-beacon-sleep-obfuscation/

#informatyka

Microsoft śledzi użytkowników używając Windows Device ID

https://www.pcmag.com/news/a-hackers-arrest-reveals-microsoft-can-track-users-via-a-windows-device

#informatyka #komputery #orwell

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2026.07.07.md

Introduction to Writing ARM Shellcode - https://azeria-labs.com/writing-arm-shellcode/

(Quite) A Few Words About Async - https://yoric.github.io/post/quite-a-few-words-about-async/

Fantastic clear-text passwords and where to collect them (Part 1 - Linux) - https://dfir.ch/posts/fantastic_passwords_linux/

Finding Zero-Days with Any Model - https://www.provos.org/p/finding-zero-days-with-any-model/

how i ruined my vacation by reverse engineering wsc - https://blog.es3n1n.eu/posts/how-i-ruined-my-vacation/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2026.07.05.md

USB for Software Developers: An introduction to writing userspace USB drivers - https://werwolv.net/posts/usb_for_sw_devs/

Breaking AMD SEV-SNP via Memory Incoherence - https://xca-attacks.github.io/staleus/

LeHack 2026 - Payload PLZ Reloaded - https://swisskyrepo.github.io/blog/payload-plz-reloaded/

Otto Support – An MCP, Agentic-AI Security Challenge - https://bishopfox.com/blog/otto-support-an-mcp-agentic-ai-security-challenge

Win x64 Shellcode – Part 2: TEB, PEB and List of Loaded Modules - https://proteqtum.com/posts/02-win-x64-shellcode-teb-peb_en/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2026.07.03.md

TrigonLegacy - Deterministic iOS 7-9 tfp0 - https://therealclarity.github.io/blog/trigon-legacy/

Memory Safe Context Switching - https://fil-c.org/context_switches

Optimizing LLVM's bump allocator - https://maskray.me/blog/2026-06-28-optimizing-llvm-bump-allocator

Abusing GitLab CI Runners as a Command and Control Framework - https://vrls.ws/posts/abusing-gitlab-ci-runners-as-c2/

Reversing for dummies - x86 assembly and C code (Beginner/ADHD friendly) - https://0x44.cc/reversing/2021/07/21/reversing-x86-and-c-code-for-beginners.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2026.07.01.md

Bypassing Windows Defender antivirus in 2026: Evasion Techniques Using Direct Syscalls and XOR Encryption – Part 1 - https://www.hackmosphere.fr/bypass-windows-defender-antivirus-2025-part-1/

Windows of Opportunity - https://blog.otterpwn.com/research/Windows-of-Opportunity

TPU Deep Dive - https://henryhmko.github.io/posts/tpu/tpu.html

Examining circuit boards from the Space Shuttle's I/O Processor - https://www.righto.com/2026/06/space-shuttle-io-processor-boards.html

Black Box Probing: a Security Analysis of Xiaomi's MJA1 Secure Chip - https://blog.quarkslab.com/black-box-probing-a-security-analysis-of-xiaomis-mja1-secure-chip.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2026.06.29.md

The down fall of bug bounties - https://shubs.io/the-down-fall-of-bug-bounties/

Rope Optimizations, Part 1 - https://zed.dev/blog/zed-decoded-rope-optimizations-part-1

Fuzzing GPSD, Part 1: The Lexer Harness - https://xchglabs.com/blog/fuzzing-gpsd-part-one.html

Exposed RDP: The Misconfiguration that Keeps Paying Off - https://www.huntress.com/blog/exposed-rdp-misconfiguration-risks

Why I Built VeilGate: Defending Against the Rise of AI-Powered Pentest Agents - https://veilgate.dev/blog/veilgate

#informatyka

LLM-y sprawiły, że pisanie kodu nigdy nie było szybsze. Jednym z nowych problemów stał się jednak bottleneck w postaci code review. Wygenerowanie tysięcy linii kodu zajmuje dziś zaledwie kilka minut. Problem w tym, że ktoś nadal musi ten kod przeczytać, zrozumieć i ocenić. W najnowszym

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2026.06.27.md

StubZero: $148,337 RCE in Google Cloud Production - https://brutecat.com/articles/google-cloud-rce/

Introducing usbliter8 - https://ps.tc/pages/blog-usbliter8.html

Ghost-Sender - Universal Email Spoofing against Exchange Online - https://labs.infoguard.ch/posts/ghost-sender/

Exploiting CVE-2024-1065 via the Page Cache - https://kuzey.rs/posts/MaliUAF/

Reverse engineering the Qualcomm NPU compiler - https://datavorous.github.io/writing/qairt/

#informatyka

Elo na windowsie zamiast polskich znakow dzialaja mi skroty klawiszowe, albo w ogole nie ma tych polskich znakow. Dzieje sie to ostatnio i nie wiem czemu.

Tak, mam ustawiona polska klawiature.

Natomiast i tak win+spacja wlacza mi takie gowno jak w zalaczniku, ktos wie z czego? Wyglada jak z Claude Desktop, ale nie wiem czy to nie jest jakis feature windowsa

#windows #kiciochpyta #informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2026.06.25.md

CVE-2026-41096: Heap Overflow in the Windows DNS Client - https://www.m0n1x90.dev/blog/vr/cve-2026-41096

setresuid(:zap:): Glitching Google's TV Streamer from adb to root - https://raelize.com/blog/setresuid-glitching-google-tv-streamer-from-adb-to-root/

The QNAP Pattern - https://runiclabs.io/research/qnap-architecture/

Offensive C development has a structural flaw: the tooling is embarrassin - https://sibouzitoun.tech/articles/sindrkit/

Scanning malicious websites with 'infinite' number of VPN tunnels (Part 1) - https://discounttimu.substack.com/p/scanning-malicious-websites-with

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2026.06.23.md

One of the many flaws of Phi untagging: CVE-2026-4447 - https://kqx.io/post/cve-2026-4447/

A modern tale of blinkenlights - https://blog.quarkslab.com/modern-tale-blinkenlights.html

LACUNA Chain: Ghost Frames — defeats all EDR layers of call-stack-based detection - https://0xmaz.me/posts/LACUNA-Chain-Ghost-Frames-defeats-All-EDR-layers-of-call-stack-based-detection/

Windows ARM64 Internals: Pardon The Interruption! Interrupts on Windows for ARM - https://connormcgarr.github.io/windows-arm64-interrupts/

From DDS Packets to Robot Shells: Two RCEs in Unitree Robots (CVE-2026-27509 & CVE-2026-27510) - https://boschko.ca/unitree-go2-rce/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2026.06.21.md

Human Observations on Mythos Runs - https://exploitbench.ai/blog/human-observations/

How to Fetch a Moving Target with Poudriere - https://oshogbo.com/blog/91/

Rusty Rootkit - Windows Kernel Rookit in Rust (Codename: Eagle) - https://memn0ps.github.io/rusty-windows-kernel-rootkit/

The Mythos We Have At Home: A Patch-Diffing Pipeline for N-Day Generation - https://www.originhq.com/research/patch-diffing-pipeline

A Different Approach to Red Team Tool Design - https://saza.re/posts/rover/

#informatyka

Nasza firma dba o bezpieczeństwo oraz inwestuje w nowoczesne systemy aby zapobiec niebezpiecznym incydentom.

Nowoczesne systemy:

#heheszki #informatyka #programowanie

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2026.06.19.md

RCEliteLLM – LiteLLM 1.83.14: Chaining an Environment Baribale Leak with Jinja2 SSTI for Remote Code Execution - https://mccaulay.co.uk/rcelitellm-litellm-1-83-14-chaining-an-environment-variable-leak-with-jinja2-ssti-for-remote-code-execution/

Jenny was a Friend of Mine - MCPs and Friends - https://blog.zsec.uk/bullyingllms/

We've Been Here Before: Decompilers, Fuzzers, and Now AI - https://www.clearseclabs.com/blog/weve-been-here-before-ai-vulnerability-research/

SilentMoonwalk: Implementing a dynamic Call Stack Spoofer - https://klezvirus.github.io/posts/Stackmoonwalk/

"Practical Android Software Protection in the Wild" - An Appetizer - https://blog.quarkslab.com/practical-android-software-protection-in-the-wild-an-appetizer.html

#informatyka