patchy

Patchy GCP OSパッチ管理を悪用した自動横移動と永続化。詳しくは私のブログ記事を参照。 Patchyは主に2つのモード、横移動と永続化で構成されています。永続化モードでは、有効なサービスアカウント認証情報を使用してパッチジョブまたはデプロイを作成します。横移動モードは、プロジェクト内のすべてのComputeインスタンスへのアクセスを試みます。使用するには、メタデータAPIが利用可能なGCP環境内にいる必要があります。横移動には、攻撃的な動作を試みずに悪用が可能かどうかを確認できるモードがあります（環境が安全かどうかを確認するのに適しています）。...

Advisory ROSA-SA-2025-2905

Software: sudo 1.8.23 OS: rosa-server79 packageevrstring: sudo-1.8.23-11.0.1.res7.3 CVE-ID: CVE-2025-32463 BDU-ID: 2025-07765 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the sudo system administration program is related to the inclusion of functions from an invalid controlled area when using the...

5 Steps For Securing Your Remote Work Space

Use a VPN ------------ Whether you’re connecting to company resources or a Zoom call, use a virtual private network VPN. VPNs encrypt all of your online traffic to prevent hackers from capturing data in transit. Be sure to use a well-known VPN – they are widely available in software marketplaces...

App Layering 2.x/3.x: Best Practices

A consolidation of the various layering best practices to apply in the OS and App layers. For App Layering 4.x Best Practices, please refer here:https://support.citrix.com/article/CTX225952 Operating System Layer Have one Operating System layer per Operating System Windows 7 32-bit, Windows 7...

[VMInjector] DLL Injection tool to unlock guest VMs

Overview: VMInjector is a tool designed to bypass OS login authentication screens of major operating systems running on VMware Workstation/Player, by using direct memory manipulation. Description: VMInjector is a tool which manipulates the memory of VMware guests in order to bypass the operation...