All posts tagged cyber

■■■■■ Browser Exploitation on Windows! CVE-2019-0567, A Microsoft Edge Type Confusion Vulnerability (Part 2): https://connormcgarr.github.io/type-confusion-part-2/ CVE-2019-0567, A Microsoft Edge Type Confusion Vulnerability (Part 3): https://connormcgarr.github.io/type-confusion-part-1/ https://t.me/cKure/13691

■■■■■ HiddenVM — Use any desktop OS without leaving a trace. https://github.com/aforensics/HiddenVM https://t.me/cKure/13689

■■■■□ Pwned by the Mail Carrier – How does MS Exchange on-premises compromise Active Directory? https://posts.specterops.io/pwned-by-the-mail-carrier-0750edfad43b https://t.me/cKure/13688

Security researchers have released a proof-of-concept (PoC) exploit for a critical vulnerability in Fortinet’s FortiClient Enterprise Management Server (EMS) software, which is now actively exploited in attacks. Tracked as CVE-2023-48788, this security flaw is an SQL injection in the DB2 Administration Server (DAS) component discovered and reported by the UK’s National Cyber Security Centre (NCSC).…

■■■■□ TP-Link TDDP Buffer Overflow Vulnerability. TP-Link’s TDDP programs listening on UDP port 1040, fails to properly verify data length during parsing, leading to memory overflow destroying the memory structure and causing a denial of service. https://boschko.ca/tp-link-tddp-bof/ https://t.me/cKure/13686

■■■■■ A simple mutator engine that focuses on finding unknown classes of injection vulnerabilities. https://github.com/kleiton0x00/Todesstern https://t.me/cKure/13684

■■■□□ Lynis – Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional. https://github.com/CISOfy/lynis https://t.me/cKure/13683

Major cyber-security incident may have occurred in Israel as anonymous hacks amid Jewish genocide and extermination of Muslims in Gaza and West Bank. The information was shared by Israeli media. 》Hackers infiltrating Dimona nuclear reactor, stealing data. We have targeted some servers of the baby killer regime’s nuclear organisations. In this operation, while wiping and…

■■■■■ [Linux Kernel Exploitation 0x0] Debugging the Kernel with QEMU. https://blog.k3170makan.com/2020/11/linux-kernel-exploitation-0x0-debugging.html https://t.me/cKure/13677

■■■■■ Ghidriff: Ghidra Binary Diffing Engine | clearbluejar. https://clearbluejar.github.io/posts/ghidriff-ghidra-binary-diffing-engine/ https://t.me/cKure/13675