NEW BOT Телеграм, страница - 431028214

HackerOne

11K subscribers

644 photos

31 videos

79 files

2.74K links

Community : @Sec0x01
@Bug0x

Download Telegram

About

Blog

Apps

Platform

11K subscribers

Laravel <= v8.4.2 debug mode: Remote code execution

https://www.ambionics.io/blog/laravel-debug-rce

Laravel <= v8.4.2 debug mode: Remote code execution

Ambionics Security team discovered an RCE in Laravel, when the framework is in debug mode.

2.59K viewsAdeL, 04:04

SolarLeaks site claims to sell data stolen in SolarWinds attacks.

Attackers' website: http://solarleaks.net/

https://www.bleepingcomputer.com/news/security/solarleaks-site-claims-to-sell-data-stolen-in-solarwinds-attacks/

BleepingComputer

SolarLeaks site claims to sell data stolen in SolarWinds attacks

A website named 'SolarLeaks' is selling data they claim was stolen from companies confirmed to have been breached in the SolarWinds attack.

2.98K viewsDmitriy, 04:58

https://secret.club/2021/01/14/vbox-escape.html

Escaping VirtualBox 6.1: Part 1

This post is about a VirtualBox escape for the latest currently available version (VirtualBox 6.1.16 on Windows). The vulnerabilities were discovered and exploited by our team Sauercl0ud as part of the RealWorld CTF 2020/2021. The vulnerability was known…

2.59K viewsAmir Kiani, 07:24

#Malware_analysis
1. Obfuscated DNS Queries
https://isc.sans.edu/diary/rss/26992
2. Detecting Mylibot, Unseen DGA Based Malware
https://blogs.akamai.com/sitr/2021/01/detecting-mylobot-unseen-dga-based-malware-using-deep-learning.html
3. Advanced Emotet Updates
https://www.netskope.com/blog/you-can-run-but-you-cant-hide-advanced-emotet-updates

SANS Internet Storm Center

Obfuscated DNS Queries - SANS Internet Storm Center

Obfuscated DNS Queries, Author: Guy Bruneau

2.9K viewsAdeL, 11:07

https://blog.certfa.com/posts/charming-kitten-christmas-gift/

Charming Kitten’s Christmas Gift - Certfa Lab

During the Christmas holidays and the beginning of the new year, the Charming Kitten group, the Iranian state-backed hackers, have begun a targeted phishing campaign of espionage against different individuals to collect information.

2.83K viewsAmir Kiani, 06:09

Espressif IoT Development Framework: 71 выстрел в ногу
https://habr.com/ru/post/538292/?utm_campaign=538292&utm_source=habrahabr&utm_medium=rss

Espressif IoT Development Framework: 71 выстрел в ногу

Один из наших читателей обратил наше внимание на Espressif IoT Development Framework. Он нашёл ошибку в коде проекта и поинтересовался, смог бы её найти статиче...

3.28K viewsAdeL, 13:54

github.com/sundowndev/hacker-roadmap

GitHub - sundowndev/hacker-roadmap: A collection of hacking tools, resources and references to practice ethical hacking.

A collection of hacking tools, resources and references to practice ethical hacking. - sundowndev/hacker-roadmap

3.31K viewsAmir Kiani, 12:50

GerdaOS: a custom ROM to liberate the heart of Kai

Welcome to the home page of world's first custom ROM for Nokia 8110 4G and (in the future) other KaiOS based phones that aims for users' privacy, security and freedom to control everything about their own devices.

Our mission is to liberate Kai's heart, as in "The Snow Queen" Hans Christian Andersen. Hence the name.

💡 See it in action!
https://streamable.com/zi50r

👉🏼 Key features 👈🏼

✅ Say no to ads and tracking. By default.

✅ Install what you want, not they.

✅ Overcome the limits and multitask.

✅ Be the master of your own device.

✅ Shape the future.

💡 GerdaOS Frequently Asked Questions
https://gitlab.com/project-pris/system/-/wikis/GerdaOS-FAQ#which-hardware-does-gerdaos-work-on

https://gerda.tech/

Watch GerdaOS (alpha) on Nokia 8110 4G TA-1048: boot, file manager, packages, multitasking, screenshots, browser tweaks | Streamable

Watch "GerdaOS (alpha) on Nokia 8110 4G TA-1048: boot, file manager, packages, multitasking, screenshots, browser tweaks" on Streamable.

3.1K viewsAdeL, 18:18

http://blog.sevagas.com/?Bypass-Defender-and-other-thoughts-on-Unicode-RTLO-attacks

Bypass Defender and other thoughts on Unicode RTLO attacks - [ Sevagas]

I have been looking a bit into Unicode and Right-To-Left-Override phishing attacks lately. Mainly because I noticed that Windows Defender was (...)

2.63K viewsAmir Kiani, 22:05

https://youtu.be/tY6hMT3NR9I

APK Obfuscation Using Obfuscapk

In this video, I'm taking about obfuscating APK. The most important thing is the flow of the obfuscators. In addition, testing the APK after obfuscating is an essential task. If there is an error, you should fix it in smali code and then, proceed to the next…

2.58K viewsMir Saman Tajbakhsh, 20:47

https://blog.cobalt.io/bypassing-the-protections-mfa-bypass-techniques-for-the-win-8ef6215de6ab?gi=98ca363f0d77

Bypassing the Protections — MFA Bypass Techniques for the Win

Multi-Factor Authentication (MFA) often known as Two-Factor Authentication (2FA) is an added layer of protection added to an application…

2.49K viewsAmir Kiani, 21:51

https://sanderwind.medium.com/escalating-ssrf-to-rce-7c0147371c40

Escalating SSRF to RCE

Retrieving AWS metadata and use it for RCE

2.92K viewsAmir Kiani, 21:54

Actively Exploited Windows Kernel EoP Bug Allows Takeover

https://ift.tt/3aTMgl3

Actively Exploited Windows Kernel EoP Bug Allows Takeover

Microsoft addressed 56 security vulnerabilities for February Patch Tuesday — including 11 critical and six publicly known. And, it continued to address the Zerologon bug.

2.35K viewsAdeL, 00:24

https://unit42.paloaltonetworks.com/bendybear-shellcode-blacktech/

BendyBear: Novel Chinese Shellcode Linked With Cyber Espionage Group BlackTech

The novel Chinese shellcode "BendyBear" is one of the most sophisticated, well-engineered and difficult-to-detect samples employed by an APT.

2.92K viewsAmir Kiani, 23:23

https://blog.zsec.uk/out-of-band-xxe-2/

ZephrSec - Adventures In Information Security

XXE - Things Are Getting Out of Band

XXE Out of Band testing, explaining how to execute XXE OOB attacks over HTTP & FTP. Additional explanation on XXE RCE.

2.32K viewsAmir Kiani, 17:33

Secret Chat in Telegram Left Self-Destructing Media Files On Devices

https://ift.tt/3piprMS

2.56K viewsAdeL, 10:23

The “P” in Telegram stands for Privacy

https://ift.tt/3pa0BP7

Security Affairs

The "P" in Telegram stands for Privacy - Security Affairs

Security expert Dhiraj Mishra analyzed the popular instant messaging app Telegram and identified some failures in terms of handling the users' data.

2.5K viewsAdeL, 13:04

Vulnerabilities in TCP/IP Stacks Allow for TCP Connection Hijacking, Spoofing

https://ift.tt/3aV0txY

Vulnerabilities in TCP/IP Stacks Allow for TCP Connection Hijacking, Spoofing

Improperly generated ISNs (Initial Sequence Numbers) in nine TCP/IP stacks could be abused to hijack connections to vulnerable devices, according to new research from Forescout.

2.72K viewsAdeL, 16:03

Microsoft Is Seeing A Big Spike In Web Shell Use

https://ift.tt/3agwMZf

Microsoft is seeing a big spike in Web shell use

Spike shows just how useful and hard to detect these simple programs can be.

2.76K viewsAdeL, 20:24

https://dorks.faisalahmed.me/

dorks.faisalahmed.me

Bug Bounty Helper

2.7K viewsAmir Kiani, 18:28

Watch "Practical RF Hardware and PCB Design Tips" on YouTube
https://youtu.be/_Hfzq1QES-Q

Practical RF Hardware and PCB Design Tips - Phil's Lab #19

Some tips for when designing hardware and PCBs with simple RF sections and components. These concepts have aided me well when designing 4-layer embedded systems PCBs.

Topics: critical trace lengths, stackups, controlled impedance traces (microstrip, stripline)…

2.77K viewsAdeL, 12:16