All posts by cK-bot

■□□□□ Kali Linux 2021.1 released: Tweaked DEs and terminals, new tools, Kali ARM for Apple Silicon Macs. https://t.me/cKure/6968

■■■□□ Lazarus targets defense industry with ThreatNeedle. https://securelist.com/lazarus-threatneedle/100803/ https://t.me/cKure/6967

■■■■□ Alleged PoC (untested) for CVE-2021-21972. https://github.com/QmF0c3UK/CVE-2021-21972-vCenter-6.5-7.0-RCE-POC/blob/main/CVE-2021-21972.py https://t.me/cKure/6966

■□□□□ Shodan query for CVE-2021-21972: https://www.shodan.io/search?query=http.title%3A%22ID_VC_Welcome%22 https://t.me/cKure/6965

■■□□□ Airplane maker Bombardier data posted on ransomware leak site following FTA hack. https://www.zdnet.com/article/airplane-maker-bombardier-data-posted-on-ransomware-leak-site-following-fta-hack #DataLeak https://t.me/cKure/6962

■■■■■ A Journey Combining Web Hacking and Binary Exploitation in Real World! https://blog.orange.tw/2021/02/a-journey-combining-web-and-binary-exploitation.html https://t.me/cKure/6961

■□□□□ Microsoft president asks Congress to force private-sector orgs to publicly admit when they’ve been hacked. This comes after SolarWinds cyber massacre. https://t.me/cKure/6960

■■■■■ Code Execution: VMware warns of critical remote code execution flaw in vSphere HTML5 client. https://go.theregister.com/feed/www.theregister.com/2021/02/23/vmware_vsphere_critical_bugs/ https://t.me/cKure/6959

■□□□□ Using Intruder to Brute Force Authorization Header https://hogarth45.medium.com/using-intruder-to-authorization-headers-161fd873824a https://t.me/cKure/6958

■■■□□ Finding XXE https://www.bugcrowd.com/blog/how-to-find-xxe-bugs/ https://t.me/cKure/6957