All posts in February 2021

■■□□□ SQL Triggers Used by Hackers to Compromise User Database. https://www.ehackingnews.com/2021/02/sql-triggers-used-by-hackers-to.html https://t.me/cKure/6985

■■■■□ Unprotected Private Key Allows Remote Hacking of PLCs. https://www.ehackingnews.com/2021/02/unprotected-private-key-allows-remote.html https://t.me/cKure/6984

■□□□□ Hunting Headers for SSRF. https://speakerdeck.com/aditya45/hunting-headers-for-ssrf https://t.me/cKure/6983

■■□□□ Queries to find solarwinds presence. https://www.microsoft.com/security/blog/2021/02/25/microsoft-open-sources-codeql-queries-used-to-hunt-for-solorigate-activity/ https://t.me/cKure/6982

■□□□□ Microsoft Releases Free Tool for Hunting SolarWinds Malware. https://t.me/cKure/6981

■■□□□ Malicious Firefox extension allowed hackers to hijack Gmail accounts. https://www.bleepingcomputer.com/news/security/malicious-firefox-extension-allowed-hackers-to-hijack-gmail-accounts/ https://t.me/cKure/6980

■□□□□ Chinese hackers target Tibetans with malicious Firefox extension. https://www.infosecurity-magazine.com:443/news/chinese-hackers-tibet-malicious/ #China #Tibet https://t.me/cKure/6979

■■■■■ Invoke-PSImage: Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute. https://github.com/peewpw/Invoke-PSImage https://t.me/cKure/6977

■□□□□ Ransomware cheat-sheet. https://docs.google.com/spreadsheets/d/e/2PACX-1vRCVzG9JCzak3hNqqrVCTQQIzH0ty77BWiLEbDu-q9oxkhAamqnlYgtQ4gF85pF6j6g3GmQxivuvO1U/pubhtml# https://t.me/cKure/6976

■■□□□ Archive: This Microsoft feature costed severely on malware developers. ● Almost all of mine became ineffective after this. https://www.microsoft.com/security/blog/2016/03/22/new-feature-in-office-2016-can-block-macros-and-help-prevent-infection/ https://t.me/cKure/6974