All posts by cK-bot

■■■■■ ICYMI: Metasploit-6 framework under active construction https://blog.rapid7.com/2020/08/06/metasploit-6-now-under-active-development/amp/ https://t.me/cKure/5158

■■■□□ IoT / #SCADA: Hacking the PLC via Its Engineering Software. https://www.darkreading.com/vulnerabilities—threats/hacking-the-plc-via-its-engineering-software/d/d-id/1338612?_mc=rss_x_drr_edt_aud_dr_x_x-rss-#SCADA: Hacking the PLC via Its Engineering Software. https://www.darkreading.com/vulnerabilities—threats/hacking-the-plc-via-its-engineering-software/d/d-id/1338612?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple https://t.me/cKure/5159

■■■■■ Exploiting Android Messengers with WebRTC: Part 3. https://googleprojectzero.blogspot.com/2020/08/exploiting-android-messengers-part-3.html https://t.me/cKure/5156

■■■■■ Researcher Finds New Office Macro Attacks for Apple's MacOS. https://www.darkreading.com/endpoint/researcher-finds-new-office-macro-attacks-for-macos/d/d-id/1338610?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple | #BlackHat https://t.me/cKure/5155

■■■■■ #DataLeak: 20GB of Intel source code leaked online. https://www.bleepingcomputer.com/news/security/intel-leaks-20gb-of-source-code-and-docs-backdoors-m#DataLeak: 20GB of Intel source code leaked online. https://www.bleepingcomputer.com/news/security/intel-leaks-20gb-of-source-code-and-docs-backdoors-mentioned/ https://t.me/cKure/5150

■■■■□ TLS Poison: A #tool that allows for generic SSRF via TLS, as well as CSRF via image tags in most browsers. https://github.com/jmdx/TLS-po#tool that allows for generic SSRF via TLS, as well as CSRF via image tags in most browsers. https://github.com/jmdx/TLS-poison/ https://t.me/cKure/5149

■■■■■ Solving PortSwigger Lab: Developing a custom gadget chain for Java deserialization. https://jorgectf.gitlab.io/post/portswigger-java-custom-gadget-chain/ https://t.me/cKure/5148

■■■■□ #DataLeak: Interesting thread: https://mobile.twitter.com/deletescape/status/1291405688204402689 https://t.me/cKure/5147

■■□□□ Reflected XSS example. https://medium.com/@jonathanbouman/reflected-xss-at-fotoservice-hema-nl-af344ef63433 https://t.me/cKure/5146

■■■□□ RCE: Remote Code Execution bug bounty. https://medium.com/@viveik.chauhan/blind-remote-code-execution-b9c4e119f7c3 https://t.me/cKure/5144