All posts by cK-bot

■■■□□ Tool: OWASP Maryam is a modular open-source framework based on OSINT and data gathering. It is designed to provide a robust environment to harvest data from open sources and search engines quickly and thoroughly. https://github.com/saeeddhqan/Maryam https://t.me/cKure/13100

■■■■□ OSINT: Interesting thread in Israel-Palestine war at Gaza. https://twitter.com/earshot_ngo/status/1715381907230232929 https://t.me/cKure/13099

■■■■■ ZerohDay: Samsung Galaxy S23 hacked twice on first day of Pwn2Own Toronto. https://www.bleepingcomputer.com/news/security/samsung-galaxy-s23-hacked-twice-on-first-day-of-pwn2own-toronto/ https://t.me/cKure/13098

● Pwn2Own Toronto [Day 1] [Day 2] https://youtu.be/xc1yERrNMjA https://t.me/cKure/13096

■■■■□ Citrix Bleed exploit lets hackers hijack NetScaler accounts. https://www.bleepingcomputer.com/news/security/citrix-bleed-exploit-lets-hackers-hijack-netscaler-accounts/ https://t.me/cKure/13092

■■■■□ Privacy: Examining Predator Mercenary Spyware. https://securityboulevard.com/2023/10/examining-predator-mercenary-spyware/ https://t.me/cKure/13091

■■■■□ Android trojan spotted in the wild can record audio and phone calls. A banking trojan named SpyNote is once again ‘smishing’ its way into your financial information. Here’s your best defense. https://www.zdnet.com/article/android-trojan-spotted-in-the-wild-can-record-audio-and-phone-calls/ https://t.me/cKure/13090

■■■□□ Android and Windows devices aren’t safe from Flipper Zero either. The Bluetooth spam feature that was initially used to inundate, and even crash, iPhones has now been expanded to cover Android and Windows devices. https://www.zdnet.com/article/now-android-and-windows-devices-arent-safe-from-flipper-zero-either/ https://t.me/cKure/13089

The outstanding stealth of Operation Triangulation. https://securelist.com/triangulation-validators-modules/110847/ https://t.me/cKure/13088

■■■■□ PoC Exploits Released for Citrix and VMware Vulnerabilities. Tracked as CVE-2023-34051 (CVSS score: 8.1), the high-severity vulnerability relates to a case of authentication bypass that could lead to remote code execution. https://thehackernews.com/2023/10/alert-poc-exploits-released-for-citrix.html https://t.me/cKure/13087