The /r/netsec Monthly Discussion Thread - May 2018 Security News & Discussion

---

• The /r/netsec Monthly Discussion Thread - May 2018
• [Basics] Understanding LM, NTLM, and their Network counterparts - Because so many people, still don't get the difference.
• A Collection of Python Scripts for UAC Bypass,Privilege Escalation, Dll Hijack and Many More Techniques (See Comment)
• Custom domains on GitHub Pages gain support for HTTPS
• 7-Zip: From Uninitialized Memory to Remote Code Execution
• Revealed: North Korea's AV software, SiliVaccine, contains large chunks of exact match code from Trend Micro's AV.
• Finding a Privilege Escalation Vulnerability in CylancePROTECT
• [Tool]; Get all credentials in #DVR (cve-2018-9995)
• The Catch 22 of Base64: Attacker Dilemma from a Defender Point of View
• Who’s Watching the Watchers (Vol. II): Norton Core Secure WiFi Router
• Windows Kernel Exploitation Tutorial Part 8: Use After Free - Arbitrary Code Execution through a Callback Function
• AWS considers domain fronting a ToS violation and threatens to suspend accounts
• injectify: Perform advanced MiTM attacks on websites with ease

The /r/netsec Monthly Discussion Thread - May 2018 Posted: 30 Apr 2018 09:35 PM PDT Overview Questions regarding netsec and discussion related directly to netsec are welcome here. Rules & Guidelines Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary. Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely. If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely. Avoid use of memes. If you have something to say, say it with real words. All discussions and questions should directly relate to netsec. No tech support is to be requested or provided on /r/netsec. As always, the content & discussion guidelines should also be observed on /r/netsec. Feedback Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox. submitted by /u/AutoModerator [link] [comments]

[Basics] Understanding LM, NTLM, and their Network counterparts - Because so many people, still don't get the difference. Posted: 01 May 2018 10:07 AM PDT submitted by /u/vysec [link] [comments]

A Collection of Python Scripts for UAC Bypass,Privilege Escalation, Dll Hijack and Many More Techniques (See Comment) Posted: 30 Apr 2018 07:59 PM PDT submitted by /u/TechLord2 [link] [comments]

Custom domains on GitHub Pages gain support for HTTPS Posted: 01 May 2018 10:43 AM PDT submitted by /u/PRIVACYx05i4shUl [link] [comments]

7-Zip: From Uninitialized Memory to Remote Code Execution Posted: 01 May 2018 05:03 AM PDT submitted by /u/landave [link] [comments]

Revealed: North Korea's AV software, SiliVaccine, contains large chunks of exact match code from Trend Micro's AV. Posted: 01 May 2018 07:14 AM PDT submitted by /u/_marklech_ [link] [comments]

Finding a Privilege Escalation Vulnerability in CylancePROTECT Posted: 01 May 2018 12:28 PM PDT submitted by /u/ryhanson [link] [comments]

[Tool]; Get all credentials in #DVR (cve-2018-9995) Posted: 01 May 2018 06:28 AM PDT submitted by /u/capitan_alfa [link] [comments]

The Catch 22 of Base64: Attacker Dilemma from a Defender Point of View Posted: 01 May 2018 04:37 AM PDT submitted by /u/whitehattracker [link] [comments]

Who’s Watching the Watchers (Vol. II): Norton Core Secure WiFi Router Posted: 01 May 2018 12:37 PM PDT submitted by /u/cbolat [link] [comments]

Windows Kernel Exploitation Tutorial Part 8: Use After Free - Arbitrary Code Execution through a Callback Function Posted: 30 Apr 2018 09:07 PM PDT submitted by /u/TechLord2 [link] [comments]

AWS considers domain fronting a ToS violation and threatens to suspend accounts Posted: 01 May 2018 01:18 PM PDT submitted by /u/kpcyrd [link] [comments]

injectify: Perform advanced MiTM attacks on websites with ease Posted: 30 Apr 2018 06:02 AM PDT submitted by /u/A520B1 [link] [comments]

You are subscribed to email updates from /r/netsec - Information Security News & Discussion. To stop receiving these emails, you may unsubscribe now.	Email delivery powered by Google
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States