Count Upon Security
countuponsecurity.com
Cybersecurity
Claim pageClaim
Follow
Overview
News
Salaries
Products
People
Growth
Offices
Financials
News
FireEye Endpoint Security (HX) - Supplementary Tools
Today I am going to write a few notes about tools that should be part of your toolkit in case you use FireEye Endpoint Security product a.k.a. as HX. If you don't use FireEye HX, this post likely has no interest for you. I tend to use HX when performing l
Read more
Report
Notes on Linux Memory Analysis - LiME, Volatility and LKM's
The post below contains some notes I wrote about Linux memory forensics using LiME and Volatility to analyze a Red Hat 6.10 memory capture infected with Diaphormine and Reptile, two known Linux Kernel Module rootkits. Back in 2011, Joe Sylve, Lodovico, Ma
Read more
Report
Six Years ago …
On 4th of November 2012, Count Upon Security was born. This weekend was it's 6th anniversary! I started this project has hobby in my spare time. I wanted to share with the IT Security community material and illustrations which I thought could be useful. T
Read more
Report
Digital Forensics - PlugX and Artifacts left behind
When an attacker conducts an intrusion using A, B or C technique, some of his actions leave artifact X, Y or Z behind. So, based on the scenario from the last article about PlugX, I collected a disk image and memory image from the domain controller. Over
Read more
Report
Malware Analysis - PlugX - Part 2
Following my previous article on PlugX, I would like to continue the analysis but now use the PlugX controller to mimic some of the steps that might be executed by an attacker. As you know the traditional steps of an attack lifecycle follow, normally, a p
Read more
Report
Intro to American Fuzzy Lop - Fuzzing with ASAN and beyond
In the previous article I showed how easily you could run American Fuzy Lop (AFL) to fuzz an open source target. I used a 64-bit system and used AFL to fuzz the 64-bits version of tcpdump. Today, I'm going to fuzz the 32-bit version of tcpdump. Why the 32
Read more
Report
Intro to American Fuzzy Lop - Fuzzing in 5 steps
After attending the workshop on "Vulnerability Discovery and Triage Automation" given by the well-known security researcher Richard Johnson, I rolled up my sleeves and started practicing. Essentially, looking at the different tools and techniques that wer
Read more
Report
Blockchain & Brainwallet cracking
The blockchain is the underlying technology that enables the bitcoin cryptocurrency to exist. A foundational component of this technology is its complex cryptosystem. The blockchain cryptosystem re…
Read more
Report
RIG Exploit Kit Analysis - Part 3
Over the course of the last two articles (part 1 & part 2), I analyzed a recent drive-by-download campaign that was delivering the RIG Exploit Kit . In this article, I will complete the analysi…
Read more
Report
RIG Exploit Kit Analysis - Part 2
Continuing with the analysis of the RIG exploit kit, let's start where we left off and understand the part that contains the malicious Adobe Flash file.We saw, in the last post, that the RIG…
Read more
Report
Show more news