All posts tagged news

■■■□□ Finding 0day to hack Apple https://github.com/httpvoid/writeups/blob/main/Apple-RCE.md https://t.me/cKure/6696

■■■■■ Pentester Swiss Army Knife is a Docker Image with a suite of the most used tools for Hacking and Pentesting. https://github.com/leoanggal1/P-SAK https://t.me/cKure/6695

■■■■■ Interesting thread: https://mobile.twitter.com/SkelSec/status/1346517626026123268 https://t.me/cKure/6694

■■■■□ An Example of Rig Exploit Kit. https://isc.sans.edu/diary/rss/26990 https://t.me/cKure/6692

■■■■□ A Glossary of Blind SSRF Chains. https://blog.assetnote.io/2021/01/13/blind-ssrf-chains/ https://t.me/cKure/6691

■■■□□ Irremovable Facebook group album photos and entire album under certain circumstances. https://theshubh77.medium.com/irremovable-facebook-group-album-photos-and-entire-album-under-certain-circumstances-bounty-1000-b1b2a870b8e0 https://t.me/cKure/6690

■■■□□ The US  National Security Agency (NSA) says that companies should avoid using third party DNS resolvers to block threat actors’ DNS traffic eavesdropping and manipulation attempts and to block access to internal network information.  https://t.me/cKure/6689

■■■■■ Google reveals sophisticated Windows and Android hacking operation via Watering hole attack. https://www.zdnet.com/google-amp/article/google-reveals-sophisticated-windows-android-hacking-operation/ https://t.me/cKure/6688

■■■■□ The US Cybersecurity and Infrastructure Security Agency (CISA) said today that threat actors bypassed multi-factor authentication (MFA) authentication protocols to compromise cloud service accounts. Attackers changed pass the cookie and brute force to advice the feat. https://www.bleepingcomputer.com/news/security/cisa-hackers-bypassed-mfa-to-access-cloud-service-accounts/ https://t.me/cKure/6686

■□□□□ #Iran Charming Kitten’s Christmas Gift. https://blog.certfa.com/posts/charming-kitten-christmas-gift/ https://t.me/cKure/6685