All posts by cK-bot

■■■■□ A Azure Exploitation Toolkit for Red Team & Pentesters. https://github.com/SikretaLabs/BlueMap https://t.me/cKure/14881

■□□□□ Exploiting OS Command Injection — A Real-World Scenario. https://medium.com/@m_kasim2/exploiting-os-command-injection-a-real-world-scenario-4a2db1733137 https://t.me/cKure/14880

■■■■■ Hackers now use ZIP file concatenation to evade detection. https://www.bleepingcomputer.com/news/security/hackers-now-use-zip-file-concatenation-to-evade-detection/ https://t.me/cKure/14879

■■□□□  Amazon confirms employee data breach after vendor hack Amazon confirmed a data breach involving employee information after data allegedly stolen during the May 2023 MOVEit attacks was leaked on a hacking forum. https://www.bleepingcomputer.com/news/security/amazon-confirms-employee-data-breach-after-vendor-hack/ https://t.me/cKure/14878

■■■■□ From HTTP to RCE – How to leave backdoor in IIS. https://cicada-8.medium.com/from-http-to-rce-how-to-leave-backdoor-in-iis-cbef8249eba9 https://t.me/cKure/14877

■■■■■ Iran based hacker group hacks personal devices of Israeli operatives, spies and commanders in their recent Cyber-Attack amid ongoing genocide by Israel on native Palestinian population. The Iranian hacking group known as “Handala” breached the personal computer of Israel’s retired army general Benny Gantz, exposing sensitive and personal images. https://t.me/cKure/14873

■■■□□ CSRF + POST Body Param Reflection = POST-Based XSS. https://blog.bhuwanbhetwal.com.np/csrf-post-body-param-reflection-post-based-xss-a-brainfuck https://t.me/cKure/14871

■■□□□ Are Bengal Cats legal in Australia? Hackers are targeting people who type these six words into their computer. https://nypost.com/2024/11/09/tech/hackers-are-targeting-people-who-type-these-six-words-into-their-computer/ https://t.me/cKure/14870

Sandfly 5.2 – Linux Stealth Rootkit File and Directory De-Cloaking. https://sandflysecurity.com/about-us/news/sandfly-5-2-linux-stealth-rootkit-file-and-directory-de-cloaking/ https://t.me/cKure/14868

■■■■□ Multiple new macOS sandbox escape vulnerabilities. https://www.kandji.io/blog/macos-audit-story-part1 Slides: https://github.com/jhftss/jhftss.github.io/blob/main/res/slides/A%20New%20Era%20of%20macOS%20Sandbox%20Escapes.pdf https://t.me/cKure/14867