All posts in Uncategorized

■■■■■ #DataLeak: 20GB of Intel source code leaked online. https://www.bleepingcomputer.com/news/security/intel-leaks-20gb-of-source-code-and-docs-backdoors-m#DataLeak: 20GB of Intel source code leaked online. https://www.bleepingcomputer.com/news/security/intel-leaks-20gb-of-source-code-and-docs-backdoors-mentioned/ https://t.me/cKure/5150

■■■■□ TLS Poison: A #tool that allows for generic SSRF via TLS, as well as CSRF via image tags in most browsers. https://github.com/jmdx/TLS-po#tool that allows for generic SSRF via TLS, as well as CSRF via image tags in most browsers. https://github.com/jmdx/TLS-poison/ https://t.me/cKure/5149

■■■■■ Solving PortSwigger Lab: Developing a custom gadget chain for Java deserialization. https://jorgectf.gitlab.io/post/portswigger-java-custom-gadget-chain/ https://t.me/cKure/5148

■■■■□ #DataLeak: Interesting thread: https://mobile.twitter.com/deletescape/status/1291405688204402689 https://t.me/cKure/5147

■■□□□ Reflected XSS example. https://medium.com/@jonathanbouman/reflected-xss-at-fotoservice-hema-nl-af344ef63433 https://t.me/cKure/5146

■■■□□ RCE: Remote Code Execution bug bounty. https://medium.com/@viveik.chauhan/blind-remote-code-execution-b9c4e119f7c3 https://t.me/cKure/5144

■■■■□ Open Source Code: Trojan Horse for Attacks? On June 2, it was revealed that the Octopus Scanner malware had infected at least 26 open source code repositories on GitHub. Once downloaded, the malware specifically targets the Apache NetBeans Java integrated development environment (IDE), which is used to create applications from modular components, and executes a remote…

■■■□□ Porn Clip Disrupts Virtual Court Hearing for Alleged Twitter Hacker. https://krebsonsecurity.com/2020/08/porn-clip-disrupts-virtual-court-hearing-for-alleged-twitter-hacker/ https://t.me/cKure/5142

■■□□□ Twitter fixed security bug in underlying Andros OS affecting version 8 and 9 of Android. The attacker with local privilege escalation could access private messages in pain text from the malicious app installer on the victims phone . https://threatpost.com/twitter-fixes-high-severity-flaw-affecting-android-users/158060/ https://t.me/cKure/5140

■■■■■ Exploit code: Pi-hole 4.3.2 – Remote Code Execution (Authenticated). https://www.exploit-db.com/exploits/48727 https://t.me/cKure/5139