ITSEC Newsletter 2024-11-21

Author

Henrik Falk
November 21, 2024

The Definitive Guide to Linux Process Injection

We will describe the OS features that facilitate process injection in Linux, and the different injection primitives they allow. We will cover techniques that have been previously described, and also highlight injection variants that were previously not documented. We will conclude by covering detection and mitigation strategies for the highlighted techniques. In addition to this blog post, we are releasing a GitHub repository containing a comprehensive set of proof-of-concept (PoC) code for the different injection primitives described in the post.

www.akamai.com/blog/security-research/the-definitive-guide-to-linux-process-injection

x64 Assembly & Shellcoding 101 - Part 6

Today is reverse shell day! I’m sure most of you were hoping we’d eventually be able to discuss writing a reverse shell using x64 assembly, and today just so happens to be that day. We’re going to start out slow though, as this is hands down the most difficult portion of our series yet. Traditional TCP-based reverse shells are fascinating to me as they use the Standard Input/Output/Error handle of the CreateProcessA API to exchange information via the created process; the command shell.

g3tsyst3m.github.io/shellcoding/assembly/debugging/x64-Assembly-&-Shellcoding-101-Part-6

Paged Out! #5 November 2024

Hi! It’s me again, your human editor AGA. I like meeting you like this :) Look! Here we are, back with another Issue! How the time flies, it feels like yesterday Paged Out! returned with Issue #3, then we blinked twice, and found ourselves on track with Issue #5 on our hands. Magic (or it’s just how time works, one or the other, I guess).

pagedout.institute/download/PagedOut_005.pdf