/dev/random🔒 SSL Verified

Table of Contents

• ↓ Hack.lu 2023 Wrap-Up
• ↓ [SANS ISC] macOS: Who’s Behind This Network Connection?
• ↓ [SANS ISC] Python Malware Using Postgresql for C2 Communications
• ↓ [SANS ISC] More Exotic Excel Files Dropping AgentTesla
• ↓ [SANS ISC] Have You Ever Heard of the Fernet Encryption Algorithm?
• ↓ [SANS ISC] Quick Malware Triage With Inotify Tools
• ↓ Top Alternatives to rootshell.be

6-Month Traffic Trend Estimate

Official Contact & Profiles

Visual representation extracted from rootshell.be

Content Snippets from rootshell.be

""If the enemy leaves a door open, you must rush in." – Sun Tzu"

"[Edit: Sorry for the “bullet-point” style, it was a lot of details to compile in this blog post] We were back at the Alvisse Parc Hotel after a break of four years! In 2022, only a light CTI summit was organized (see my wrap-up), but this year, hack.lu was back"

"Today, I published the following diary on isc.sans.edu: “macOS: Who’s Behind This Network Connection?“: When you must investigate suspicious behavior or work on an actual incident, you could be asked to determine who’s behind a network connection. From a pure network point of view, your firewall or any network security"

"Today, I published the following diary on isc.sans.edu: “Python Malware Using Postgresql for C2 Communications“: For modern malware, having access to its C2 (Command and control) is a crucial point. There are many ways to connect to a C2 server using tons of protocols, but today, HTTP remains very common"

Key Topics & Focus Areas for rootshell.be:

Hack.lu 2023 Wrap-Up

[SANS ISC] macOS: Who’s Behind This Network Connection?

[SANS ISC] Python Malware Using Postgresql for C2 Communications

[SANS ISC] More Exotic Excel Files Dropping AgentTesla

[SANS ISC] Have You Ever Heard of the Fernet Encryption Algorithm?

[SANS ISC] Quick Malware Triage With Inotify Tools