All posts in May 2021

■■■■□ Siembol: open-source, real-time Security Information & Event Management tool https://github.com/G-Research/siembol https://t.me/cKure/8033

■■■□□ Israel : #OpIsrael campaign claims another victim as the adversary parts open upload URL for other hackers to test. https://www.cs.huji.ac.il/course/2009/bioskill/Lesson10/upload.html https://t.me/cKure/8032

■■■□□ Corsair_Scan – A Security Tool To Test Cross-Origin Resource Sharing (CORS). https://github.com/Santandersecurityresearch/corsair_scan https://t.me/cKure/8031

■■■■□ 📢 Data-Leak: Al-Quds Electronic Army claim to have penetrated Israeli social media accounts under #OpIsrael campaign (targeting Israel 🇮🇱) In their message (ckure could confirm its authenticity) “Cyber units are present in the field, with the grace of God and his success. The joint cyber units have managed to penetrate Zionist social media accounts.”…

■■■■■ Magecart Group 12 unleashes stealthy PHP skimmer against vulnerable Magento e-commerce sites. https://portswigger.net/daily-swig/magecart-group-12-unleashes-stealthy-php-skimmer-against-vulnerable-magento-e-commerce-sites https://t.me/cKure/8022

■■■■■ One-click reflected XSS in www.instagram.com due to unfiltered URI schemes leads to account takeover. https://ysamm.com/?p=695 https://t.me/cKure/8021

■■■■□ Identify a Facebook user by his phone number despite privacy settings set. https://ysamm.com/?p=691 https://t.me/cKure/8020

■□□□□ Interesting thread wrt. Windows 10 wherein apparently ‘localmachine’ can be pinged. https://mobile.twitter.com/NinjaParanoid/status/1394356506993205250 https://t.me/cKure/8019

■□□□□ Privacy: Apple sent my data to the FBI, says boss of controversial research paper trove Sci-Hub. https://go.theregister.com/feed/www.theregister.com/2021/05/17/sci_hub_apple_fbi_claim/ https://t.me/cKure/8017