All posts tagged cyber

■■■■□ Intel CPU interconnects can be exploited by malware to leak encryption keys and other info, academic study finds. Side-channel ring race ‘hard to mitigate with existing defenses’. https://go.theregister.com/feed/www.theregister.com/2021/03/08/intel_ring_flaw/ https://t.me/cKure/7091

■■■□□ Netiquette: MacOS network monitor. https://objective-see.com/products/netiquette.html https://t.me/cKure/7090

■■■■■ CVE-2021-26855 SSRF-Exchange Server. https://github.com/Udyz/CVE-2021-26855 https://t.me/cKure/7089

■□□□□ Brave Browser is About to Launch its Own Search Engine. Brave is a free and open-source web browser based on the Chromium web browser that had been established by Brave Software, Inc. https://t.me/cKure/7088

■■□□□ Microsoft Office 365 gets protection against malicious XLM macros. https://www.bleepingcomputer.com/news/security/microsoft-office-365-gets-protection-against-malicious-xlm-macros/ https://t.me/cKure/7087

■■■■■ OffensivePipeline v0.8.2 releases: download, compile and obfuscate C# tools for Red Team exercises https://securityonline.info/offensivepipeline-download-compile-and-obfuscate-c-tools-for-red-team-exercises/ https://t.me/cKure/7086

■□□□□ #Russia linked APT groups leveraged the Lithuanian nation’s technology infrastructure to launch cyber-attacks against targets worldwide. https://t.me/cKure/7084

■■■□□ Chameleon – Customizable Honeypots For Monitoring Network Traffic, Bots Activities And Username\Password Credentials (DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres And MySQL) https://github.com/qeeqbox/chameleon https://t.me/cKure/7083

■■□□□ packetStrider – A Network Packet Forensics Tool For SSH. packetStrider for SSH is a packet forensics tool that aims to provide valuable insight into the nature of SSH traffic, shining a light into the corners of SSH network traffic where golden nuggets of information previously lay in the dark. https://github.com/benjeems/packetStrider https://t.me/cKure/7082

■■■□□ RCE via war upload in Tomcat using path traversal. https://blog.defmax.io/rce-via-war-upload-in-tomcat-using-path-traversal-e0f11898016e https://t.me/cKure/7081