#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.09.11.md

Stealthy Persistence With Non-Existent Executable File - https://www.zerosalarium.com/2025/09/Stealthy-Persistence-With-Non-Existent-Executable-File.html
KongTuke FileFix Leads to New Interlock RAT Variant - https://thedfirreport.com/2025/07/14/kongtuke-filefix-leads-to-new-interlock-rat-variant/
Reliable system call interception - https://blog.mggross.com/intercepting-syscalls/
CVE-2025-5333: Remote Code Execution in Broadcom Altiris IRM - https://www.lrqa.com/en/cyber-labs/remote-code-execution-in-broadcom-altiris-irm/
An unexpected journey into Microsoft Defender's signature World - https://retooling.io/blog/an-unexpected-journey-into-microsoft-defenders-signature-world

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.09.09.md

A Novel Technique for SQL Injection in PDO’s Prepared Statements - https://slcyber.io/assetnote-security-research-center/a-novel-technique-for-sql-injection-in-pdos-prepared-statements/
A Navajo weaving of an integrated circuit: the 555 timer - https://www.righto.com/2025/09/marilou-schultz-navajo-555-weaving.html
Ghosting the Sensor: Disrupting Defender for Identity Without Detection - https://cyberdom.blog/ghosting-the-sensor-disrupting-defender-for-identity-without-detection/
Exploiting Retbleed in the real world - https://bughunters.google.com/blog/6243730100977664/exploiting-retbleed-in-the-real-world
Hunting postMessage Vulnerabilities – Part 1 - https://blog.ryukudz.com/posts/postmessage-part-1/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.09.07.md

This overlooked Linux boot flaw defeats Secure Boot heres how to fix it https://nerds.xyz/2025/07/linux-initramfs-security-flaw-secure-boot-bypass/
A CT scanner reveals surprises inside the 386 processor's ceramic package  https://www.righto.com/2025/08/intel-386-package-ct-scan.html
Exploit development for IBM i https://blog.silentsignal.eu/2025/09/04/Exploit-development-for-IBM-i/
Death by a thousand slops https://daniel.haxx.se/blog/2025/07/14/death-by-a-thousand-slops/
Bypassing EDR to dump LSA secrets - Orange Cyberdefense https://www.orangecyberdefense.com/global/blog/cybersecurity/bypassing-edr-to-dump-lsa-secrets

#informatyka

Jakiś czas temu, analizując dokumentację Gita, natknąłem się na polecenie git notes. Myślałem, że znam Gita całkiem dobrze, ale to było dla mnie coś nowego. W najnowszym artykule wyjaśniam, czym są git notes i analizuję możliwości, jakie daje ta funkcja. Dowiesz się również jakie

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.09.05.md

Scanning for Post-Quantum Cryptographic Support - https://www.anvilsecure.com/blog/scanning-for-post-quantum-cryptographic-support.html
Hiding Linux Processes with Bind Mounts - https://righteousit.com/2024/07/24/hiding-linux-processes-with-bind-mounts/
SSD Advisory – Linux Kernel Pipapo Set Double Free LPE - https://ssd-disclosure.com/ssd-advisory-linux-kernel-pipapo-set-double-free-lpe/
Double Dash, Double Trouble: A Subtle SQL Injection Flaw - https://www.sonarsource.com/blog/double-dash-double-trouble-a-subtle-sql-injection-flaw/
Hunting Bugs in Linux Kernel With KASAN: How to Use it & What's the Benefit? - https://slavamoskvin.com/hunting-bugs-in-linux-kernel-with-kasan-how-to-use-it-whats-the-benefit/

#informatyka

Kolejny ranking laptopów jest już dostępny. Sprawdź jaki laptop warto kupić. Najnowszy ranking to modele do zadań uniwersalnych, biznesowyc... #komputery #informatyka #ranking #gry

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.09.03.md

Velociraptor incident response tool abused for remote access - https://news.sophos.com/en-us/2025/08/26/velociraptor-incident-response-tool-abused-for-remote-access/
Dive into PEB Walk in Malware Analysis - https://fareedfauzi.github.io/2024/07/13/PEB-Walk.html
Qualcomm DSP Kernel Internals - https://streypaws.github.io/posts/DSP-Kernel-Internals/
Application Layer Desynchronization using Opportunistic TLS - https://opossum-attack.com/
Analyzing New HijackLoader Evasion Tactics - https://www.zscaler.com/blogs/security-research/analyzing-new-hijackloader-evasion-tactics

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.09.01.md

Secure Enclaves for Offensive Operations (Part I) - https://www.outflank.nl/blog/2025/02/03/secure-enclaves-for-offensive-operations-part-i/
Threat Actors Deploy Sinobi Ransomware via Compromised SonicWall SSL VPN Credentials - https://www.esentire.com/blog/threat-actors-deploy-sinobi-ransomware-via-compromised-sonicwall-ssl-vpn-credentials
A Nightmare on EDR Street: WDAC's Revenge - https://beierle.win/2025-08-28-A-Nightmare-on-EDR-Street-WDACs-Revenge/
Revisiting Cross Session Activation Attacks - https://www.r-tec.net/r-tec-blog-revisiting-cross-session-activation-attacks.html
nOAuth Abuse Alert: Full Account Takeover of Entra Cross-Tenant SaaS Applications - https://www.semperis.com/blog/noauth-abuse-alert-full-account-takeover/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.08.28.md

OneDrive Evolution - https://malwaremaloney.blogspot.com/p/onedrive-evolution.html
How I Discovered a Libpng Vulnerability 11 Years After It Was Patched - https://blog.himanshuanand.com/posts/discovered-a-libpng-vulnerability-11-years-after-it-was-patched/
When Backups Open Backdoors: Accessing Sensitive Cloud Data via "Synology Active Backup for Microsoft 365" - https://modzero.com/en/blog/when-backups-open-backdoors-synology-active-backup-m365/
FileFix - A ClickFix Alternative - https://mrd0x.com/filefix-clickfix-alternative/
How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation - https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.08.28.md

How to Prevent Helpdesk Social Engineering Attacks -mhttps://blog.hypr.com/prevent-helpdesk-social-engineering-attacks
Applocker bypass on Lenovo machines – The curious case of MFGSTAT.zip - https://oddvar.moe/2025/07/03/applocker-bypass-on-lenovo-machines-the-curious-case-of-mfgstat-zip/
Exploiting the Synology TC500 at Pwn2Own Ireland 2024 - https://blog.infosectcbr.com.au/2025/08/01/exploiting-the-synology-tc500-at-pwn2own-ireland-2024/
GraphApiAuditEvents: The new Graph API Logs - https://kqlquery.com/posts/graphapiauditevents/
Countering EDRs With The Backing Of Protected Process Light (PPL) - https://www.zerosalarium.com/2025/08/countering-edrs-with-backing-of-ppl-protection.html

#informatyka

Cześć, mam pytanie, ostatnio kupiłem certyfikat kwalifikowanym do podpisywania dokumentów elektronicznych, z karto kryptograficzna czy cos takiego, na epuapie normalnie moge podpisać dokumenty, a w edoreczeniu wyskakuje takie coś jak na screenie, edoreczenie nie ma takiej możliwości czy trzha coś pobrać dodatkowo? Mam podpis gov i te od karty #informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.08.26.md

pyghidra-mcp: Headless Ghidra MCP Server for Project-Wide, Multi-Binary Analysis - https://clearbluejar.github.io/posts/pyghidra-mcp-headless-ghidra-mcp-server-for-project-wide-multi-binary-analysis/
CrossC2 Expanding Cobalt Strike Beacon to Cross-Platform Attacks - https://blogs.jpcert.or.jp/en/2025/08/crossc2.html
MURKY PANDA: A Trusted-Relationship Threat in the Cloud - https://www.crowdstrike.com/en-us/blog/murky-panda-trusted-relationship-threat-in-cloud/
What the NULL?! Pre-Auth Wing FTP Server RCE (CVE-2025-47812) - https://www.rcesecurity.com/2025/06/what-the-null-wing-ftp-server-rce-cve-2025-47812/
Claude is competitive with humans in (some) cyber competitions - https://red.anthropic.com/2025/cyber-competitions/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.08.24.md

Creating Processes Using System Calls - https://www.coresecurity.com/core-labs/articles/creating-processes-using-system-calls
2025 Optical Media Durability Update - https://blog.dshr.org/2025/08/2025-optical-media-durability-update.html
pyghidra-mcp: Headless Ghidra MCP Server for Project-Wide, Multi-Binary Analysis - https://clearbluejar.github.io/posts/pyghidra-mcp-headless-ghidra-mcp-server-for-project-wide-multi-binary-analysis/
Beyond Beacon: Writing BOF and a Native Rust COFF Loader - https://malware-decoded.com/rust-bof-coff-loader/
MITM6 + NTLM Relay: How IPv6 Auto-Configuration Leads to Full Domain Compromise - https://www.resecurity.com/blog/article/mitm6-ntlm-relay-how-ipv6-auto-configuration-leads-to-full-domain-compromise

#informatyka

Amerykański sąd uznał byłego pracownika za winnego sabotażu systemów IT. Spodziewając się zwolnienia, mężczyzna stworzył "kill-switch", który w momencie zamknięcia jego kont "zabił" wszystkie komputery należące do firmy. #ciekawostki #informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.08.22.md

Netexec Workshop Active Directory Lab Writeup - https://blog.anh4ckin.ch/posts/netexec-workshop2k25/
Reverse Engineering of the Lockbit Linux ESXi Variant - https://hackandcheese.com/posts/blog1_lockbit/
A Quick Dive Into The Linux Kernel Page Allocator - https://syst3mfailure.io/linux-page-allocator/
Have You Looked in the Trash? Unearthing Privilege Escalations from the Active Directory Recycle Bin - https://cravaterouge.com/articles/ad-bin/
So you want to rapidly run a BOF? Let's look at this 'cli4bofs' thing then - https://blog.z-labs.eu/2025/06/04/all-about-cli4bofs-tool.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.08.20.md

Don’t Phish-let Me Down: FIDO Authentication Downgrade - https://www.proofpoint.com/us/blog/threat-insight/dont-phish-let-me-down-fido-authentication-downgrade
Distribution of SmartLoader Malware via Github Repository Disguised as a Legitimate Project - https://asec.ahnlab.com/en/89551/
Pantheon Introduction: A Guide and Script Collection for Mythic Eventing - https://specterops.io/blog/2025/08/15/pantheon-introduction-a-guide-and-script-collection-for-mythic-eventing/
When Defenders Become the Attackers: The Elastic EDR 0-Day (RCE + DoS) - https://ashes-cybersecurity.com/0-day-research/
All You Need Is MCP - LLMs Solving a DEF CON CTF Finals Challenge - https://wilgibbs.com/blog/defcon-finals-mcp/

#informatyka

IBM 701, 1953.

"The first IBM large-scale electronic computer manufactured in quantity. The first was delivered to Los Alamos in March, 1953. It was known then as an IBM 701 Electronic Data Processing Machine. All parts and dust are original."

Źródło

#historia #starszezwoje #informatyka #programowanie

Sierpień to już koniec blogów w serwisie Dobre Programy. 1 września treści te powinny zostać usunięte <płacz>. Wirtualna Polska pozbywa się wielkiej skarbnicy wiedzy o IT 😒 Pozostaje archiwizacja wpisów poprzez wsadowe pobranie artykułów na dysk... Dobre i to... #wirtualnapolska #it #komputery #informatyka #dobreprogramy #blog #technologia

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.08.18.md

Active Directory Enumeration – ADWS - https://ipurple.team/2025/08/12/active-directory-enumeration-adws/
Driver Reverse Engineering 101 - https://eversinc33.com/posts/driver-reversing.html
Unmasking SocGholish: Silent Push Untangles the Malware Web Behind the “Pioneer of Fake Updates” and Its Operator, TA569 - https://www.silentpush.com/blog/socgholish/
Going for Broke(ring) – Offensive Walkthrough for Nested App Authentication - https://specterops.io/blog/2025/08/13/going-for-brokering-offensive-walkthrough-for-nested-app-Entra ID Incident Response: Advanced PowerShell Techniques - https://cyberdom.blog/entra-id-incident-response-advanced-powershell-techniques/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.08.16.md

Many Registered Users, Few Core Members - https://nattothoughts.substack.com/p/few-and-far-between-during-chinas
Exploiting Retbleed in the real world - https://bughunters.google.com/blog/6243730100977664/exploiting-retbleed-in-the-real-world
RV130X Firmware Analysis - https://raffo24.github.io/hardware%20hacking/FirmwareAnalysis/
We Know What You Did (in Azure) Last Summer - https://www.netspi.com/blog/technical-blog/cloud-pentesting/azure-resource-attribution-via-tenant-id-enumeration/
Zero Click, One NTLM: Microsoft Security Patch Bypass (CVE-2025-50154) - https://cymulate.com/blog/zero-click-one-ntlm-microsoft-security-patch-bypass-cve-2025-50154/
Chinese SMS Spammers Go Mobile - https://garwarner.blogspot.com/2025/08/chinese-sms-spammers-go-mobile.html

#informatyka