I guess i am too stupid (read: unexperienced) to get #anyrun running in my #NixOS #NixFlakes. The #HomeManager description in the readme confuses me where to put it in my config.
https://github.com/Kirottu/anyrun

I started learning some #rust and made 2 plugins for the #anyrun launcher.

The first one integrates with #cliphist to access the clipboard history https://github.com/benoitlouy/anyrun-cliphist

The second integrates with #1password to access usernames, passwords and one-time passwords https://github.com/benoitlouy/anyrun-op

anyrun is a native wayland laucher https://github.com/Kirottu/anyrun

#mlget has been updated. Grab the latest copy from: https://github.com/xorhex/mlget/releases

Features Added:
- Downloaded file is hashed and compared against the hash requested. Hopefully this will help detect when APIs change.
- #URLScanIO source added! Making this the 16th source queried!!

Bug Fixes:
- #Malpedia works again

Breaking Changes:
- If using #JoeSandbox, delete and recreate the config entries as the URL was updated to be inline with how the rest of the URLs are formatted (/v2 was moved from the code to the config)

Other Changes:
- Fix minor typos and remove #AnyRun reference from the help menu as that option is not available yet.

#malware

#mlget has been updated. Grab the latest copy from: https://github.com/xorhex/mlget/releases

Features Added:
- Downloaded file is hashed and compared against the hash requested. Hopefully this will help detect when APIs change.
- #URLScanIO source added! Making this the 16th source queried!!

Bug Fixes:
- #Malpedia works again

Breaking Changes:
- If using #JoeSandbox, delete and recreate the config entries as the URL was updated to be inline with how the rest of the URLs are formatted (/v2 was moved from the code to the config)

Other Changes:
- Fix minor typos and remove #AnyRun reference from the help menu as that option is not available yet.

#malware

Surprise!!! I have another write-up out and ready for you today!!! This time, checking to see if IP's are malicious, then looking for malicious DNS and shortened URLs. Good times, go check out my write-up and let me know what you think!!

#tryhackme #DNS #PyramidofPain #AnyRun



https://medium.com/@haircutfish/tryhackme-pyramid-of-pain-task-3-ip-address-easy-task-4-domain-names-simple-fc054b424823

How to recognize possible #stealer? It tries to access sensitive files (e.g. browser cookies, credential stores, crypto wallets, steam keys) followed by the data upload.

One example: #Redline #stealer. Accessing sensitive data followed by data upload including list of user processes, passwords and screenshot.

#CyberChef recipe for extracting screenshot:
https://gchq.github.io/CyberChef/#recipe=To_Hex('None',0)Regular_expression('User%20defined','89504e470d0a1a0a.*49454e44ae42.%7B4%7D',true,true,false,false,false,false,'List%20matches')Render_Image('Hex')

#anyrun sample: https://app.any.run/tasks/39f5008c-b5c3-4917-ab0c-f3e48ac13dc9/

#malware #dfir #infostealer #malwareanalysis