@www.threatcat.ch.blog@rss-parrot.net
I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline! Brought to you by the RSS Parrot.
---
Recent content in Blogs on ThreatCat.ch Blog
Site URL: www.threatcat.ch/blog/
Feed URL: threatcat.ch/blog/feed.xml
Posts: 5
Followers: 1
Encryption as Obfuscation
https://www.threatcat.ch/blog/encryption-as-obfuscation/
Published: December 7, 2023 00:00
Some time ago, we analyzed a sample with an encrypted payload using an interesting technique. Unfortunately we can’t share the sample, and it isn’t available on Virustotal neither.
When hunters become prey - CSTI (?) in Nuclei
https://www.threatcat.ch/blog/when-hunters-become-prey/
Published: June 29, 2023 00:00
TL;DR We discovered what we believe is a Client Side Template Injection (CSTI) vulnerability in Nuclei that allows an attacker to crash the scanner (Denial of Service - DoS) and, under certain circumstances, even leak secret keys.
FENtastic chessadecimal encryPGN: Solution
https://www.threatcat.ch/blog/fentastic-chessadecimal-encrypgn-solution/
Published: April 27, 2023 00:00
This blog post shows different ways to solve the Capture the Flag (CTF) challenge posted on April 21, 2023.
FENtastic chessadecimal encryPGN
https://www.threatcat.ch/blog/fentastic-chessadecimal-encrypgn/
Published: April 21, 2023 00:00
We created a CTF to celebrate the World Chess Championship 2023 between Ian Nepomniachtchi and Ding Liren:
Undo .NET Constant Obfuscation in IDA Pro
https://www.threatcat.ch/blog/undo-dotnet-constant-obfuscation-in-ida-pro/
Published: March 9, 2023 00:00
While .NET malware samples are usually easy to decompile using dnspy and similar tools, possibly after an initial unpacking step using dnspy’s debugger or a dedicated unpacker like ConfuserEx, there often remain additional “small” obfuscations of strings…