🚨 FreePBX SQLi & RCE (CVE-2025-57819) - v1.1.0 Updated!

Read-only checker update: multi-host scans + structured output for fast CI/IR.

Usage:
🗂️ -L / --list - scan hosts from a .txt (one per line, # = comment)
📄 Per-host JSON reports → out/ (--out-dir)
🔴 vulnerable.txt - quick list of vulnerable hosts + params
⏱️ --delay - pause between hosts (default 1.5s)
🛡️ Read-only checks (error/boolean/time-based). Proxy-friendly (Burp/ZAP).

Get it here:
👉 GitHub:
🔗 https://github.com/xV4nd3Rx/CVE-2025-57819_FreePBX-PoC

🚀 Kali Linux 2025.3 Released - New Tools & Wi-Fi Enhancements

The latest update to Kali Linux is here, bringing powerful new tools, Wi-Fi improvements, and NetHunter updates.

🔧 What’s New

• 10 new tools: Caido, DiE, Gemini CLI, krbrelayx, ligolo-mp, llm-tools-nmap, mcp-kali-server, patchleaks, vwifi-dkms, and more.
• Wi-Fi & Nexmon: Expanded support for Broadcom/Cypress chips with monitor & injection modes.
• Kali NetHunter: New device support (Samsung S10), CARsenal improvements, UI fixes.
• Xfce VPN panel: More flexible IP copy options.
• ARMel dropped, Magisk kernel modules added (experimental).

🔄 How to Update

For those updating from a previous version, you can use the following commands to upgrade to the latest version.

echo "deb http://http.kali.org/kali kali-rolling main contrib non-free non-free-firmware" | sudo tee /etc/apt/sources.list

sudo apt update && sudo apt -y full-upgrade

cp -vrbi /etc/skel/. ~/

[ -f /var/run/reboot-required ] && sudo reboot -f

CorsairAPI - async, OpenAPI-aware recon & payload generator for APIs.
It auto-discovers Swagger/OpenAPI, parses robots/sitemap, probes subdomains, and exports clean artifacts (results.csv, oas_endpoints.txt, oas_payloads.jsonl) for Burp/ZAP or pipelines.

Why it’s handy?

🔎 Smart discovery (OpenAPI, HTML hints, robots/sitemap)
⚙️ Modes: stealth / medium / aggressive
🤖 Interactive setup (mode, UA, depth) or pure CLI
🧪 Schema-driven request/payload generation
📊 CSV now logs findings even with depth=0 (incl. found tags)

Get it here 👉 https://github.com/xV4nd3Rx/CorsairAPI

Stars & feedback welcome! ⭐

Metasploit Weekly Wrap-Up - Sep 26, 2025

🧩 Cron Persistence refresh - cron-based persistence now aligned with the new persistence mixin (multi/persistence/cron). Cleaner internals, same effect.

🔥 FreePBX /admin/ajax.php SQLi → RCE (CVE-2025-57819) - new module (unix/http/freepbx_unauth_sqli_to_rce) abuses SQLi to write a cron job for code execution. Auth bypass + SQLi chain, wide impact on v15/16/17. Patch fast.

Update with msfupdate and read the full wrap-up here 👉 https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-09-26-2025

🚩 The Huntress CTF is back!

🕵️‍♀️ Now in its third year, the competition runs October 1 – October 31 with new challenges every single day.
💻 Free to play. Register anytime — even while the game is live!
⏳ Play at your own pace, whenever you want.

🔗 Sign up here: ctf.huntress.com

🚨 Break into Cybersecurity for FREE 🚨

Want to become a SOC Analyst but don’t know where to start?
Here are free certifications & learning paths to kickstart your career ⬇️

✅ Cisco – Security Operations Center (SOC)
✅ Cisco – Junior Cybersecurity Analyst
✅ TryHackMe – SOC Level 1
✅ LetsDefend – SOC Analyst Learning Path
✅ Splunk – Free training on monitoring & SIEM

No excuses now – these resources can help you build real SOC skills without spending a money 💸

📌 Save this list & start your SOC journey today.

📢FREE COMPTIA EXAM VOUCHER!📢

CompTIA launched a new certification (CompTIA SecAI+) and is offering FREE vouchers for those that qualify.

Domains & weights:
 1) Basic AI Concepts Related to Cyber — 17%
 2) Securing AI Systems — 40%
 3) AI-assisted Security — 24%
 4) AI Governance, Risk & Compliance — 19%

✅ Check eligibility and register here: https://lnkd.in/diQcCAn4

If you qualify, take, and pass the beta exam, you will earn the new CompTIA SecAI+ certification at no cost.

📅 Take the beta exam by October 17, 2025, to receive an incentive.
⏳ The beta exam period ends on October 31, 2025.

⚠️ New Free Learning path: NoSQL injection ⚠️

This learning path covers the detection, exploitation, and prevention of NoSQL injection vulnerabilities.

You’ll learn:
🔶 The core principles behind NoSQL injection and the different types of attacks.
🔶 How to perform both syntax and operator injection to read and manipulate data.
🔶 How to extract data from a database after you've successfully injected a query.
🔶 How to use timing-based injection to find vulnerabilities when a server doesn't provide a direct response.
🔶 Learning to secure your applications against these types of attacks.

Begin your journey: https://portswigger.net/web-security/learning-paths/nosql-injection

It's Cybersecurity Awareness Month — how will you train your team: phishing sims, tabletop drills, or live exercises? 🛡️✨

🔹 GoPhish — lightweight, open-source phishing campaign server for quick training. (https://getgophish.com)
🔸 Evilginx — phishing-proxy (https://github.com/kgretzky/evilginx2).
🔹 King Phisher — campaign management + tracking for advanced internal tests. (https://github.com/rsmusllp/king-phisher)
🔸 Social-Engineer Toolkit (SET) — social-engineering framework with phishing templates. (https://github.com/trustedsec/social-engineer-toolkit)

⚠️ Use only with explicit authorization, legal approval, and an incident-response plan.

Interesting article, I recommend reading it. Incidentally, my first accepted bug on BugBounty was about CORS.

“My amma always said “Don’t talk to strangers from different neighborhoods!” but these web applications were having full conversations with anyone who asked! 😂”

Get it here 👉 https://infosecwriteups.com/cors-misadventures-how-misconfigured-origins-turned-me-into-an-accidental-admin-2107aa1768d6

🚀 Hidden API Endpoints — The Hacker’s Shortcut

Every major platform hides forgotten or undocumented APIs - and that’s where attackers often strike first. These silent endpoints can expose sensitive data, bypass authentication, or open full admin access.

🔍 Key takeaways:

• Hidden APIs = attack surface.
• Often left unmonitored, unpatched, or exposed via staging/dev systems.
• Security through obscurity never works.

⚔️ Defensive checklist:

1. Inventory all API endpoints (including shadow & internal).
2. Enforce auth + rate limiting everywhere.
3. Audit logs for unknown request paths.
4. Automate API discovery in recon pipelines.

Read full breakdown 👉 thehackerslog.substack.com/p/hidden-api-endpoints-the-hackers

#BugBounty #APIsecurity #Infosec #Recon

💥 YOU CAN NOT MISS THIS! GIVEAWAY! 💥

👉 Certified Offensive Security Junior (COSJ)

RedOps Academy has made their course FREE for 24 hours!

All enrolled students will enjoy lifetime access — so you can keep learning and revisiting the labs anytime.

☠️ Cross-Site Scripting (XSS) Attacks ☠️

🤖Gemini CLI to Your Kali Linux Terminal To Automate Penetration Testing Tasks 🤖

👉 Feel free to use! 👈

With the release of Kali Linux 2025.3, a major update introduces an innovative tool that combines artificial intelligence and cybersecurity: the Gemini Command-Line Interface (CLI).

This new open-source package integrates Google's powerful Gemini AI directly into the terminal, offering penetration testers and security professionals an intelligent assistant designed to streamline and automate complex security workflows.

🛠️ Installation 🛠️

#kali_linux #pentest_os #red_team

☠️ Kubernetes for Pentesters ☠️

A selection of articles on practical Kubernetes penetration testing:

👉 Kubernetes for Pentesters: Part 1
👉 A Pentester’s Approach to Kubernetes Security — Part 1
👉 A Pentester’s Approach to Kubernetes Security — Part 2

#red_team #kubernetes

The new 👉 https://cs.github.com 👈 search allows for regex, which means brand *new* regex GitHub Dorks are possible!

Eg, find SSH and FTP passwords via connection strings with:

/ssh:\/\/.*:.*@.*target\.com/
/ftp:\/\/.*:.*@.*target\.com/

#info_security #red_team #osint

Hack The Box Challenges

Something stirs in the shadows... and it’s coming for your flags! 🎃
Hack The Boo returns this October with some spooky Challenges. Dare to face your fears?

📆 22-27 October: Practice CTF to polish your skills
📆 24-27 October: The competition!

Register for free 👉 Here

#HackTheBox #HTB #Cybersecurity #CTF #Halloween #Hackers

🔸Today we'll talk about logs.🔸

🔹 What2Log is an open project that centralizes recommendations on what logs to collect and how to configure them for various systems.

🔹 It helps SOC analysts quickly identify the right log sources and standardized configurations, streamlining detection creation and log audit processes.

👉 What2Log 👈

🐳 Docker - How It Works 🐳

Docker is a containerization platform that lets you package your app and all its dependencies into lightweight, portable containers.

Each container runs on the same Docker Engine, sharing the OS kernel but staying completely isolated - with its own filesystem, processes, and network.

🔹 Core Components:

🧩 Image - a blueprint containing code, libraries, and configs.
📦 Container - a running instance of that image.
⚙️ Docker Engine - runs and manages containers.
☁️ Docker Hub - the global registry for sharing images.

💡 Philosophy:

“If it works on my machine - it works everywhere.”

#docker #containerization

Docker Security - Quick Guide 🔒

Keeping your containers secure means minimizing attack surface, scanning for vulnerabilities, and enforcing runtime policies.

🔧 Essential Practices:

🔸 Run container as non-root

docker run --user 1000:1000 nginx:latest

🔸 Scan Docker image for vulnerabilities

docker scan myimage:latest

🔸 Apply default seccomp security profile

docker run --security-opt seccomp=default.json myimage

🧰 Top 3 Docker Security Tools:

Trivy
🔹 All-in-one vulnerability scanner for container images, OS packages, and IaC.

Docker Bench for Security
🔹 Automated noscript to check for common Docker security best practices.

Cosign
🔹 Tool for signing and verifying container images to ensure integrity and trust:

Key takeaway:
👉 Always scan, sign, and sandbox - secure containers start with secure images.

#docker #containerization #security

⚠️ CVE-2025-24813 Apache Tomcat as Actively Exploited with 9.8 CVSS ⚠️

🔥 PoC: https://github.com/brs6412/CVE-2025-24813

🎯 6.7m+ Results are found on the https://en.fofa.info nearly year.

🔗 FOFA Link: https://en.fofa.info/result?qbase64=YXBwPSJBUEFDSEUtVG9tY2F0Ig%3D%3D

FOFA Query:app="APACHE-Tomcat"

🔖 Refer: https://securityonline.info/cisa-flags-apache-tomcat-cve-2025-24813-as-actively-exploited-with-9-8-cvss/

#OSINT #FOFA #CyberSecurity #Vulnerability