PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

ProxyBlobing into your network

blog.quarkslab.com | research | #cloud | #red-team | #proxy | #azure | #tool | #socks5 | #network
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarkslab built a SOCKS5 proxy that tunnels traffic through Azure Blob Storage, abusing a wildcard firewall allowance to reach the internet from a restricted VDI during an assumed-breach test.
Published
Collected

Related coverage

tool · github.com
Peach: Single-user, Local-first Personal Media Library and Management System
Offers a privacy-respecting, local-first alternative for media library indexing and playback, combining cloud-drive integration with automated scraping while keeping sensitive viewing data strictly local.
vulnerability · horizon3.ai
[CVE-2021-38647] OMIGOD – RCE Vulnerability in Multiple Azure Linux Deployments
# OMIGOD – RCE Vulnerability in Multiple Azure Linux Deployments Zach Hanley September 16, 2021 Attack Blogs Overview On September 14, multiple vulnerabilities were discovered by researchers at...
blog · specterops.io
Head in the Clouds: Microsoft Azure
# Head in the Clouds: Microsoft Azure Author Christopher Maddalena Read Time 8 mins Published Sep 16, 2018 ##### Share * Introduction * Head in the Clouds – Christopher Maddalena – Medium * In the...
research · blog.quarkslab.com
Bypassing Android Hardware Attestation from the Analyst's Chair
Hardware key attestation lets an Android app prove to its backend that a key lives in secure hardware on a locked, verified device. It is also the wall that stops a security analyst working on a rooted phone. This article opens the mechanism from the analyst's chair, from the certificate chain and the attestation extension down to the root of trust, then shows a simple bypass that never touches the secure hardware. We relay the attestation to a clean device and splice a genuine chain back into the target app with a Frida hook. A companion repository ships the validation backend, the demo apps and the instrumentation, so the whole setup can be run and inspected rather than taken on faith.
research · blog.quarkslab.com
SightHouse: Automated function identification
Quarkslab presents SightHouse, an open-source reverse-engineering tool that retrieves program metadata and identifies functions already known from other libraries, binaries or online source code.
research · blog.quarkslab.com
Getting started with Wirego
An introduction to Wirego, a Quarkslab tool that funnels Wireshark's plugin API over ZMQ so reverse engineers can write dissectors in friendly languages such as Python or Go.
Back