Designing The Adversary Simulation Lab
https://www.mdsec.co.uk/2020/04/designing-the-adversary-simulation-lab/
https://www.mdsec.co.uk/2020/04/designing-the-adversary-simulation-lab/
MDSec
Designing The Adversary Simulation Lab - MDSec
As some of you will know, we have recently entered into the Red Team training space. Before deciding to create our course now known as “Adversary Simulation and Red Team...
🇮🇱: Hackers who breached Israeli insurance firm demand $1m to keep data private.
https://www.timesofisrael.com/hackers-who-breached-israeli-insurance-firm-demand-1m-to-keep-data-private/amp/
https://www.timesofisrael.com/hackers-who-breached-israeli-insurance-firm-demand-1m-to-keep-data-private/amp/
The Times of Israel
Hackers who breached Israeli insurance firm demand $1m to keep data private
Group warns sum will double every 24 hours, and say they'll sell the documents if ransom money not paid within 3 days
Researchers Discover New Obfuscation-As-a-Service Platform
https://www.darkreading.com/cloud/researchers-discover-new-obfuscation-as-a-service-platform/d/d-id/1339609
via Dark Reading
https://www.darkreading.com/cloud/researchers-discover-new-obfuscation-as-a-service-platform/d/d-id/1339609
via Dark Reading
Dark Reading
Researchers Discover New Obfuscation-As-a-Service Platform
Researchers detail how a Android APK obfuscation service automates detection evasion for highly malicious apps.
The #CERT Coordination Center (CERT/CC) has released information on 33 vulnerabilities, known as AMNESIA:33, affecting multiple embedded open-source Transmission Control Protocol/Internet Protocol (#TCP/IP) stacks. A remote attacker could #exploit some of these vulnerabilities to take control of an affected system.
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
a denial of service bug worth 1000$
https://hackerone.com/reports/1018037
https://hackerone.com/reports/1018037
HackerOne
Basecamp disclosed on HackerOne: a very long name in hey.com can...
Summary :
=========
after trying to change my initial name to something long i found out that their are no limits to how long it can be , so i directly changed it to something very long {F1050497}...
=========
after trying to change my initial name to something long i found out that their are no limits to how long it can be , so i directly changed it to something very long {F1050497}...
PoC exploits for CVE-2020-17143 and CVE-2020-17141 which demonstrate the XXE bugs against Exchange Server.
- Low privileged authentication only
- CVE-2020-17141 is interesting because its in the EWS API
https://srcincite.io/pocs/cve-2020-17143.py.txt
https://srcincite.io/pocs/cve-2020-17141.py.txt
- Low privileged authentication only
- CVE-2020-17141 is interesting because its in the EWS API
https://srcincite.io/pocs/cve-2020-17143.py.txt
https://srcincite.io/pocs/cve-2020-17141.py.txt