[ IoTDevice ]  My slides "Infecting Internet of Things" are available here: https://my.owndrive.com/index.php/s/x3JNZJvRW2bvfxw #defcamp (cc: @ DefCampRO) #IoT #malware

[ Linux ]  Notes about CVE-2016-7117 Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c https://blog.lizzie.io/notes-about-cve-2016-7117.html

[ Others ]  A glance into Hack.lu 2016 and the 2017 edition announced! https://www.circl.lu/pub/press/20161031/ @ hack_lu @ circl_lu @ secin_lu

[ Others ]  OpenSSL Security Advisory https://mta.openssl.org/pipermail/openssl-announce/2016-November/000087.html

[ Others ]  rubber ducky scripts collection for redTeaming https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Payloads

[ Pentest ]  tplmap : Automatic Server-Side Template Injection Detection and Exploitation Tool : https://github.com/epinna/tplmap

[ Pentest ]  BIGINT Overflow Error Based #sqli old but ... https://osandamalith.com/2015/07/08/bigint-overflow-error-based-sql-injection/ #PenTest

[ Popular Software ]  Unrestricted access to Office 365 can be risky. Navneet Singh explains how to enable it safely http://oak.ctx.ly/r/588at

[ Popular Software ]  Reflected Cross-Site Scripting vulnerability in W3 Total Cache plugin https://goo.gl/fb/jULOe6 #FullDisclosure

[ Popular Software ]  Information disclosure race condition in W3 Total Cache WordPress Plugin https://goo.gl/fb/4m3Ku4 #FullDisclosure

[ Protocol ]  OAuth 2.0 Hack Exposes 1 Billion Mobile Apps to Account Hijacking https://threatpost.com/oauth-2-0-hack-exposes-1-billion-mobile-apps-to-account-hijacking/121889/

[ ReverseEngineering ]  New blog post: "Leaking EPROCESS address of the specific SYSTEM processes" http://blog.rewolf.pl/blog/?p=1683

[ ReverseEngineering ]  Anti reverse engineering. Malware vs Antivirus Software https://www.pelock.com/articles/anti-reverse-engineering-malware-vs-antivirus-software

[ Rootkit ]  Linux LD_PRELOAD rootkit (x86 and x86_64 architectures) https://github.com/mempodippy/vlany

[ SCADA ]  Siemens discloses local privilege escalation bug in #SCADA gear - http://bit.ly/2eFTjys

[ ThreatIntelligence ]  Utilizing Memory & Network Forensics for scalable Threat Detection Response : https://player.vimeo.com/video/188841308 cc @ attrc

[ Tools ]  weevely3 : Weaponized web shell : https://github.com/epinna/weevely3

[ Tools ]  One-gadget RCE in Ubuntu 16.04 libc https://kimiyuki.net/blog/2016/09/16/one-gadget-rce-ubuntu-1604/ #Exploit #libc

[ Tools ]  New Ponce v0.2 release with native Linux, OSX and Windows support and multiple bug fixes! Check it out https://t.co/KHiTxxOBRG

[ Windows ]  Windows Security Hardening Through Kernel Address Protection : http://j00ru.vexillium.org/blog/04_12_11/Windows_Kernel_Address_Protection.pdf (pdf) cc @ j00ru #b2b