thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

Neo23x0

Guide to Use Nextron's Sigma EVTX Checker

It's a fast go-based scanner for Linux, Windows, and macOS that applies Sigma rules and outputs the matches as JSON.

Clone the Sigma Repository and cd into it

git clone https://github.com/SigmaHQ/sigma.git
cd sigma

TarlogicSecurity

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

kmahyyg

Private Sub Worksheet_SelectionChange(ByVal target As Range)
Application.ScreenUpdating = True
On Error Resume Next
If InStr(ActiveCell, "fq") Then
With ActiveCell.Interior
    .Color = vbRed
    End With
With ActiveCell.Font
    .Color = vbWhite
    .Bold = True

artizirk

systemd-nspawn container architecture

This short document will show how to turn systemd-nspawn into a usable containeration system.

Those instructions here should work under Arch Linux and Debian 10 (Buster)

Host requirements

• systemd-nspawn and machinectl (systemd-container package under Debian)
• dnsmasq
• debootstrap

miguelmota

import time
from selenium import webdriver

driver = webdriver.Chrome('./chromedriver')
driver.get('https://ui.lkqd.com/login')
assert 'LKQD' in driver.title

time.sleep(2)
username_field = driver.find_element_by_name('username')
username_field.send_keys('myusername')

IgnoredAmbience

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE fontconfig SYSTEM "fonts.dtd">
<!--
Noto Mono + Color Emoji Font Configuration.

Currently the only Terminal Emulator I'm aware that supports colour fonts is Konsole.

Usage:
0. Ensure that the Noto fonts are installed on your machine.
1. Install this file to ~/.config/fontconfig/conf.d/99-noto-mono-color-emoji.conf

garyconstable

import argparse
from multiprocessing import Process
import logging
logging.getLogger("scapy.runtime").setLevel(logging.ERROR)
from scapy.all import *
import signal
import threading
from sys import platform

henrik

tmux cheatsheet

As configured in my dotfiles.

start new:

tmux

start new with session name: