All posts by cK-bot

■□□□□ Interesting thread. #UnitedStates , #China APT-41 https://mobile.twitter.com/CNMF_CyberAlert/status/1306961432433623044 https://t.me/cKure/5563

■■□□□ Interesting thread: https://mobile.twitter.com/UnderTheBreach/status/1306943381919215620 https://t.me/cKure/5562

■■■■□ Iranian APT going after Iranian dissidents and expats. This espionage operation is active since at least 2014 and includes: Windows TrojansAndroid Backdoor Telegram spear-phishing https://research.checkpoint.com/2020/rampant-kitten-an-iranian-espionage-campaign/ | #Iran https://t.me/cKure/5561

■■■□□ Hack tricks. ︎Find JavaScript files ︎ffuf -w js_files.txt -u FUZZ -mr "sourceMappingURL"︎Download sourcemap: https://github.com/chbrown/unmap︎Browse configs or just grep for API keys/Creds Source: Paul Seekamp https://t.me/cKure/5560

■■□□□ U.S. Treasury Sanctions Hacking Group Backed by Iranian Intelligence. #UnitedStates https://thehackernews.com/2020/09/iranian-hackers-sanctioned.html https://t.me/cKure/5559

■■■□□ #UnitedStates https://go.theregister.com/feed/www.theregister.com/2020/09/17/dot_pentesers_expose_wifi/ https://t.me/cKure/5556

■■■■■ https://go.theregister.com/feed/www.theregister.com/2020/09/18/ransomware_germany_hospital/ https://t.me/cKure/5554

■■■□□ RCE in SpamTitan gateway. It is an email spam detector. Writeup: https://sensepost.com/blog/2020/clash-of-the-spamtitan/ PoC: https://github.com/sensepost/ClashofSpamTitan https://t.me/cKure/5553

■■■□□ My favourite method to ID real IP when your target is hiding behind cloudflare. https://github.com/pielco11/fav-up https://t.me/cKure/5552

● Credible Source: Kremlin acquires access to entire telegram databases. Access was given by telegram itself. We could not verify the claim independently. https://t.me/cKure/5550