ITSEC Asia (@itsecasia) header
ITSEC Asia (@itsecasia) profile picture

ITSEC Asia

@itsecasia

ITSEC Asia is an international information security firm offering a wide range of high-quality information security services and solutions.

itsec.asia
Joined July 2011
  • Tweets34
  • Following353
  • Followers75
1Media
Photo by ITSEC Asia (@itsecasia)
Global #APT Research Report for the first half of 2021 Add APT Group:APT-C-59(芜琼洞),APT-C-60(伪猎者),APT-C-30(潜行者/Platinum) Report: github.com/blackorbird/APT_R…
Image from blackorbird (@blackorbird)
Image from blackorbird (@blackorbird)
Image from blackorbird (@blackorbird)
Image from blackorbird (@blackorbird)
1
24
2
73
#EuropeanCyberSecurityChallenge live results at ecsc2021.cz
Image from ITSEC Asia (@itsecasia)
RCE-0-day-for-GhostScript-9.50: RCE 0-day for GhostScript 9.50 - Payload generator #infosec #pentest #redteam github.com/duc-nt/RCE-0-day-…
Image from Florian Hansemann (@CyberWarship)
Image from Florian Hansemann (@CyberWarship)
Image from Florian Hansemann (@CyberWarship)
57
136
Sigma rule to detect file creation pattern as noticed in CVE-2021-40444 exploitation Report by @RonnyTNL teapawt.net/RonnyTNL/status/143636… Sysmon config change github.com/Neo23x0/sysmon-co… Sigma rule github.com/SigmaHQ/sigma/pul…
Image from Florian Roth ⚡️ (@cyb3rops)
Image from Florian Roth ⚡️ (@cyb3rops)
Image from Florian Roth ⚡️ (@cyb3rops)
Ronny (@RonnyTNL) profile pictureRonny@RonnyTNL10 Sep 2021
Replying to @cyb3rops @bodziurity
Here is a better view on the CreateFile with the Write's and Close.
Word writing .cab file

ALT Word writing .cab file

Word write cab, close file

ALT Word write cab, close file

1
46
2
126
ITSEC Asia retweeted
Frida (@fridadotre) profile picture
Frida@fridadotre10 Sep 2021
Frida 15.1 is out—with a feature that's been requested for years—introducing the brand new Swift bridge! 🎉 Kudos to @hot3eed of @NowSecureMobile for all of the hard work and that went into making this dream come true! ❤️🔥 frida.re/news/2021/09/03/fri…

Frida 15.1 Released

Observe and reprogram running programs, from user-mode apps down to the OS kernel, on Windows, macOS, GNU/Linux, iOS, watchOS, tvOS, Android, FreeBSD, QNX, and PlayStation 5

frida.re
2
46
6
128
ITSEC Asia retweeted
Haifei Li (@HaifeiLi) profile picture
Haifei Li@HaifeiLi10 Sep 2021
I never thought one day we could become youtubers. m.youtube.com/watch?v=Oz16xt…
11
35
We have to say there are many unseen tricks in the entire of exploit，now it's time for full chain code execution (#CVE-2021-40444)!!!
Image from RedDrip Team (@RedDrip7)
1
27
2
95
ITSEC Asia retweeted
jq0904 (@jq0904) profile picture
jq0904@jq090410 Sep 2021
CVE-2021-40444 is so bad🤦‍♂️
16
434
42
1,276
Cheatsheets for Authentication and Key Agreements in 2G, 3G, 4G, and 5G arxiv.org/abs/2107.07416
Image from Denis Laskov 🇮🇱 (@it4sec)
Image from Denis Laskov 🇮🇱 (@it4sec)
Image from Denis Laskov 🇮🇱 (@it4sec)
Image from Denis Laskov 🇮🇱 (@it4sec)
2
67
163
Released a little tool to perform lateral movement that hide the command you are executing by registering a protocol handler. The protocol handler is executed over WMI by simply running start customhandler:// github.com/Mr-Un1k0d3r/Poiso… #redteam #pentest ❤
GitHub - Mr-Un1k0d3r/PoisonHandler: lateral movement techniques that can be used during red team...

GitHub - Mr-Un1k0d3r/PoisonHandler: lateral movement techniques that can be used during red team...

lateral movement techniques that can be used during red team exercises - Mr-Un1k0d3r/PoisonHandler

github.com
1
210
3
487
Reliably Finding and Exploiting ICS/SCADA Bugs - A walkthrough of a command inject exploit for Advantech WebAccess zerodayinitiative.com/blog/2…
Zero Day Initiative — Reliably Finding and Exploiting ICS/SCADA Bugs

Zero Day Initiative — Reliably Finding and Exploiting ICS/SCADA Bugs

Full disclosure: I love SCADA software. I love the endless teaching opportunities available with a simple install. Looking for your first stack-based buffer overflow? Try SCADA. SQL Injection? Try...

zerodayinitiative.com
2
4
Security without pentests
22
717
112
2,079
ITSEC Asia retweeted
Dirk-jan (@_dirkjan) profile picture
Dirk-jan
@_dirkjan14 Oct 2019
[Blog] Office 365 was vulnerable to network attacks due to a vulnerability in Microsoft Teams. Here's a demo of an attacker obtaining access to all emails and OneDrive/SharePoint files if the victim joins an attacker controlled network. Details: dirkjanm.io/office-365-netwo…
8
451
12
792
ITSEC Asia retweeted
Furrtek (@furrtek) profile picture
Furrtek@furrtek11 Oct 2019
The 36 pages of reverse-engineered schematics for the original Game Boy chip (minus CPU) are on Github: github.com/furrtek/DMG-CPU-I… #Gameboy #Nintendo
Image from Furrtek (@furrtek)
23
333
10
1,072
Припинено діяльність масштабного сервісу для анонімної реєстрації різних акаунтів у месенджерах, соцмережах та поштових сервісах, який використовувався у злочинних цілях, зокрема для псевдомінування. cyberpolice.gov.ua/news/kibe…
Image from Cyberpolice Ukraine (@CyberpoliceUA)
Image from Cyberpolice Ukraine (@CyberpoliceUA)
Image from Cyberpolice Ukraine (@CyberpoliceUA)
Image from Cyberpolice Ukraine (@CyberpoliceUA)
7
20
5
36
Oooops, French engineer working for @thalesgroup DMS has his 2 computers (Personal & Professional) stolen. The computers contain military documents encrypted and allegedly concerning submarines radar systems. Official investigation opened at Versailles court. ↘️
Militaires'Actu (@MilitairesActu) profile pictureMilitaires'Actu@MilitairesActu25 Sep 2019
L’ordinateur volé contenait des données #militaires sensibles #Thales militairesactu.fr/2019/09/lo…
Image from Militaires'Actu (@MilitairesActu)
1
31
3
36
As someone who makes TONS of arch diagrams explaining concepts involving @kubernetesio, I have just hit the JACKPOT. Did you know that the community has a set of icons in their GitHub repo? Thank you to the folks who make and maintain these!!! github.com/kubernetes/commun…
Image from Vic Iglesias (@vicnastea)
11
128
3
403
ITSEC Asia retweeted
T31m0 (@t31m0) profile picture
T31m0@t31m07 Sep 2019
Metasploit module for CVE-2019-0708 #BlueKeep github.com/RickGeex/msf-modu…
GitHub - RickGeex/msf-module-CVE-2019-0708: Metasploit module for CVE-2019-0708 (BlueKeep) -...

GitHub - RickGeex/msf-module-CVE-2019-0708: Metasploit module for CVE-2019-0708 (BlueKeep) -...

Metasploit module for CVE-2019-0708 (BlueKeep) - https://github.com/rapid7/metasploit-framework/tree/5a0119b04309c8e61b44763ac08811cd3ecbbf8d/modules/exploits/windows/rdp - RickGeex/msf-module-CVE-...

github.com
3
3
Load more