Collaborate Disseminate
As a follow up to yesterday&#;x26;#;39;s how-to, I thought hashing might a thing to cover. We use hashes all the time, but it&#;x26;#;39;s annoying that md5sum, sha1sum and sha256sum aren&#;x26;#;39;t part of the windows command set – or are they? Yup, it turns out that they most definitely are part of PowerShell:
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, May 15th 2020 https://isc.sans.edu/podcastdetail.html?id=6998, (Fri, May 15th)
Looking at our patch Tuesday list, I looked a bit closer at CE-2020-1048 (Print Spooler Privilege Escalation) and Microsoft&#;x26;#;39;s ratings for that one. Microsoft rated this as:
I don&#;x26;#;39;t know about you, but I find myself doing conversions from decimal to hex and binary several times per day. For me, working out binary equivalents of decimal numbers is something I do all the time to verify subnet masks, network and broadcast addresses – also in answering “is this IP in the same subnet or in an adjacent network?” Conversions of the same type crop up all the time in decoding constructs in packets. Wireshark and Burp will both often anticipate what you want to do on this score, but not always.
Continue reading Base Conversions and Creating GUI Apps in PowerShell, (Thu, May 14th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, May 14th 2020 https://isc.sans.edu/podcastdetail.html?id=6996, (Thu, May 14th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, May 13th 2020 https://isc.sans.edu/podcastdetail.html?id=6994, (Wed, May 13th)
This month we got an average Patch Tuesday with patches for 111 vulnerabilities total. Sixteen of them are critical and, according to Microsoft, none of them was previously disclosed or are being exploited.
Continue reading Microsoft May 2020 Patch Tuesday, (Tue, May 12th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, May 12th 2020 https://isc.sans.edu/podcastdetail.html?id=6992, (Tue, May 12th)
Malicious Excel 4 macro documents become more prevalent. They are so obfuscated now, that analysis requires calculations of many formulas.
Continue reading Excel 4 Macro Analysis: XLMMacroDeobfuscator, (Mon, May 11th)