NEW BOT Телеграм, страница

Run Hydra on Android to bruteforce passwords in Termux

How to crack a password of HTTP, SSH, VNC services using Hydra
Full video: https://www.instagram.com/tv/CIN7bDFghz9/

6.74K viewsedited 16:37

👍 31 👎 8 💬

Android Security & Malware

iOS 1-day hunting: uncovering and exploiting CVE-2020-27950 kernel memory leak
https://www.synacktiv.com/publications/ios-1-day-hunting-uncovering-and-exploiting-cve-2020-27950-kernel-memory-leak.html

Synacktiv

iOS 1-day hunting: uncovering and exploiting CVE-2020-27950 kernel

5.83K views23:02

👍 14 👎💬

Android Security & Malware

Android AdFraud found on Google Play Store
Within the interval of several seconds it loads list of websites inside the invisible WebView
https://vms.drweb.com/virus/?i=22891890

Dr.Web

Android.Mixi.44.origin — Dr.Web Malware denoscription library

A malicious program which main purpose is to open web links as well as to load and display websites on-top of other apps windows. It was originally found in the app called Eye Care - Your close Eye Care Assistant (its another name is Eye Care Mini —— 急速护眼)…

5.78K views07:32

👍 12 👎💬

Android Security & Malware

Google discovered iOS zero-click Wi-Fi wormable exploit
Remotely triggered an unauthenticated kernel memory corruption vulnerability which causes all iOS devices in radio-proximity to reboot, with no user interaction.
Exploiting this vulnerability it is possible to run arbitrary code on any nearby iOS device and steal all the user data.
This security issue is fixed now.
https://googleprojectzero.blogspot.com/2020/12/an-ios-zero-click-radio-proximity.html

Blogspot

An iOS zero-click radio proximity exploit odyssey

Posted by Ian Beer, Project Zero NOTE: This specific issue was fixed before the launch of Privacy-Preserving Contact Tracing in iOS 13.5 in...

6.12K views09:16

👍 15 👎💬

Android Security & Malware

Apktool v2.5.0 Released
https://connortumbleson.com/2020/12/02/apktool-v2-5-0-released/

Connor Tumbleson

Apktool v2.5.0 Released

Apktool v2.5.0 has been released with a year of fixes, features and Android 11 support.

9.08K views14:40

👍 35 👎💬

Android Security & Malware

Vulnerability in Google Play Core Library Remains Unpatched in Google Play Applications
If an attacker uses file traversal, the payload is written to the verified folder, and is automatically loaded into the vulnerable application and executed within its scope.
https://research.checkpoint.com/2020/vulnerability-in-google-play-core-library-remains-unpatched-in-google-play-applications/

Check Point Research

Vulnerability in Google Play Core Library Remains Unpatched in Google Play Applications - Check Point Research

Research by: Aviran Hazum, Jonathan Shimonovich Overview: A new vulnerability for the Google Play Core Library was published in late August, which allows Local-Code-Execution (LCE) within the scope of any application that has the vulnerable version of the…

👍1

6.84K views12:37

👍 32 👎💬

Android Security & Malware

The Facebook Messenger Leaking Access Token Of Million Users to third party site
https://medium.com/bugbountywriteup/how-i-found-the-facebook-messenger-leaking-access-token-of-million-users-8ee4b3f1e5e3

Medium

How I Found The Facebook Messenger Leaking Access Token Of Million Users

Hi everyone,

7.24K views07:38

👍 21 👎 1 💬

Android Security & Malware

ASLR & the iOS Kernel — How virtual address spaces are randomised
https://bellis1000.medium.com/aslr-the-ios-kernel-how-virtual-address-spaces-are-randomised-d76d14dc7ebb

Medium

ASLR & the iOS Kernel — How virtual address spaces are randomised

In this blog post I wanted to take a look at ASLR and how the iOS kernel implements it for user-space processes.

6.3K views08:01

👍 12 👎💬

Android Security & Malware

Deep Dive into an Obfuscation-as-a-Service for Android Malware
https://www.stratosphereips.org/blog/2020/12/03/deep-dive-into-an-obfuscation-as-a-service-for-android-malware

Stratosphere Laboratory

Deep Dive into an Obfuscation-as-a-Service for Android Malware — Stratosphere Laboratory

While confined in our homes studying the interactions of individuals involved in the spread of the Android banking Trojan botnet (known as Geost), we encountered a unique opportunity: investigate an automated obfuscation-as-a-service platform for Android…

6.06K views14:50

👍 15 👎💬

Android Security & Malware

More than 20 million Gionee phones secretly implanted with Trojan Horses to make money
https://www.gizmochina.com/2020/12/05/more-than-20-million-gionee-phones-secretly-implanted-with-trojan-horses-to-make-money/

Gizmochina

More than 20 million Gionee phones secretly implanted with Trojan Horses to make money

Recently, the China Judgment Document Network published a verdict on the illegal control of computer information systems found to have been executed on Gionee phones. According to the court details, more than 20 million Gionee phones were intentionally inflicted…

6.95K views09:36

👍 17 👎💬 2

Android Security & Malware

Rana Android malware family, attributed by the US government to the Iran-linked APT39 group (also known as Chafer, Cadelspy, Remexi, and ITG07)
https://blog.reversinglabs.com/blog/rana-android-malware

ReversingLabs

Rana Android Malware

Your past catches up, sooner or later...

7.7K views12:38

👍 17 👎 4 💬

Android Security & Malware

Microsoft Edge for Android Spoofing Vulnerability (CVE-2020-17153)
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2020-17153

8.61K views17:54

👍 20 👎💬

Android Security & Malware

Cellebrite’s New Solution for Decrypting the Signal App
http://web.archive.org/web/20201210150311/https://www.cellebrite.com/en/blog/cellebrites-new-solution-for-decrypting-the-signal-app/

7.81K views10:06