NEW BOT Телеграм, страница

This open-source collaborative effort to share global AI security standards, regulations, and knowledge aims to mitigate risk and boost AI cybersecurity for all.

1.24K views16:31

Daily Security

Thanks to great minds from Oxorio for such a cool list🙏

❤2

1.09K views15:17

Daily Security

Forwarded from Investigations by ZachXBT

It appears Ripple was hacked for ~213M XRP ($112.5M)

Source address
rJNLz3A1qPKfWCtJLPhmMZAfBkutC2Qojm

So far the stolen funds have been laundered through MEXC, Gate, Binance, Kraken, OKX, HTX, HitBTC, etc

Theft addresses
rGhR13XyM43WdDaSMznHd5rZ4cJatybvEg
rHQVKntyfkDCPhEBL2ctryuEAkDZgckmmV
rLsUemhuBZtF44rqqzneb2F9JgyrRYYd4t
rKPERax7t9iFvT3RHXn5nifyNpzp9a4hBa
rpjs4HLX1gJoEenH69PsQmXaXY22QhCYAT
rLRhugR4ysNa2xkt4E6fKN8krs9jatCp6w
rnCyeUNvfDbtTagGEPjBfTCBz6EqJjf2Uj
rHVjfYzTaB8MzSoQGqpzH9barZr85QsZW7

😱3❤1👍1

1.07K views14:11

Daily Security

Forwarded from Hacker News

macOS Sonoma 14.4 removes critical functions from the fileproviderctl command
Article, Comments

MacRumors Forums

fileproviderctl on Sonoma 14.4 - here we f#@%ng go again

14.4 (23E5180j) seems to have gimped the fileproviderctl command again. This happened before where they completely broke the command on 13.6. Feels like there's ONE guy whose job it is to compile...

1.17K views17:55

Daily Security

https://medium.com/dedaub/phantom-functions-and-the-billion-dollar-no-op-c56f062ae49f

PoC: https://github.com/SunWeb3Sec/DeFiVulnLabs/blob/main/src/test/phantom-permit.sol

Medium

Phantom Functions and the Billion-Dollar No-op

By the Dedaub team

🔥3

1.01K viewsedited 00:34

Daily Security

https://www.trust-security.xyz/post/permission-denied

Trust Security

Permission denied - The story of an EIP that sinned

On 24/08 Trust Security disclosed a variety of DOS issues to 30+ projects through Immunefi and private bug bounty programs. In total $50k from 15 projects were paid out. We'll start with a technical denoscription of the issue for those of you who like to get…

2.2K views17:40

Daily Security

Understanding Security Vulnerabilities in SNARKs
https://arxiv.org/pdf/2402.15293v1.pdf

1.08K views15:16

Daily Security

Forwarded from Anon

Hi, guys. Would be grateful for your support❤️

BUSD BEP20
0x06009Fd4D3a8a8D00b4b402EE133369651eDf516

USDT BEP20
0x06009Fd4D3a8a8D00b4b402EE133369651eDf516

USDC ERC20
0x06009Fd4D3a8a8D00b4b402EE133369651eDf516

USDT ERC20
0x06009Fd4D3a8a8D00b4b402EE133369651eDf516

Matic
0x06009Fd4D3a8a8D00b4b402EE133369651eDf516

TRX
TPyHztRbhq4SgRogmHHhUeAJpYjfrpmvab

1.06K views16:25

Daily Security

https://t.co/WVFRnCtvWd

Medium

Web2.5 Security

This is an article about pentesting blockchain infrastructure, wallets, and custodial apps. We did numerous security reviews of such…

1.15K views21:32

Daily Security

https://mixbytes.io/blog/audit-zk-application-example-tornado-cash

mixbytes.io

Audit of a ZK application on example: Tornado Cash

Explore the security analysis of ZK applications, focusing on Circom and featuring Tornado Cash. Uncover critical code sections, delve into ZK algorithm security, and gain insights into real-world analysis methods.

❤4🔥1

1.24K views08:23

Daily Security

https://blog.openzeppelin.com/top-10-blockchain-hacking-techniques-of-2023

Openzeppelin

Top 10 Blockchain Hacking Techniques 2023

Top 10 Blockchain Hacking Techniques. The smart contract exploits of 2023 often use creative and composability to exploit rounding errors.

🔥4❤1

1.25K views20:43

Daily Security

https://cointelegraph.com/news/polygon-zkevm-mainnet-beta-sequencer-issues

Cointelegraph

Polygon zkEVM down due to issues with blockchain sequencer

Polygon emphasized its efforts to quickly address the issue while also highlighting that the release of the second-generation zkEVM is only weeks away.

❤1

1.28K views18:12

Daily Security

Take a look, guys 😉
https://medium.com/@eceorsel/bypassing-jailbreak-detection-with-ghidra-a-deep-dive-af74ebd40613

Medium

Bypassing Jailbreak Detection with Ghidra: A Deep Dive

In this post, we’ll explore how to bypass jailbreak detection by breaking down and analyzing assembly code.

❤6

1.4K views12:44

Daily Security

Sharing is caring

👎2

1.42K viewsedited 20:24

Daily Security

https://github.com/slowmist/solana-smart-contract-security-best-practices

GitHub

GitHub - slowmist/solana-smart-contract-security-best-practices

Contribute to slowmist/solana-smart-contract-security-best-practices development by creating an account on GitHub.

👍6

1.22K views13:46

Daily Security

https://open.substack.com/pub/defihacklabs/p/unveiling-a-new-scam-malicious-modification?r=35gba4&utm_medium=ios

DeFiHackLabs’s Substack

Unveiling a New Scam: Malicious Modification of RPC Node Links to Steal Assets

Author: SlowMist Background According to feedback from our partner imToken, a new type of cryptocurrency scam has recently emerged. This scam typically occurs in the context of physical transactions offline and uses USDT as the method of payment. The fraud…

1.23K views13:44

Daily Security

Don’t abuse please😅

- A selection of the best Telegram OSINT bots (Phones, punched numbers)
https://hackyourmom.com/en/servisy/dobirka-krashhyh-osint-botiv-telegram-telefony-probyv-nomera/

- (Search for information on Telegram)
https://hackyourmom.com/en/servisy/dobirka-krashhyh-osint-botiv-telegram-poshuk-informacziyi-u-telegram/

- Transportation tracking tools
https://hackyourmom.com/en/kibervijna/instrumenty-dlya-vidstezhennya-transportu-avia/

- Deciphering terrain, deep geoanalysis of video in the context of OSINT
https://hackyourmom.com/en/kibervijna/rozshyfrovuyemo-misczevist-glybokyj-geoanaliz-video-u-konteksti-osint/

- Computer forensics
https://hackyourmom.com/en/kibervijna/kompyuterna-kryminalistyka-forenzyka-dobirka-korysnyh-posylan/

- Offensive Osint Tools
https://github.com/wddadk/Offensive-OSINT-Tools

- OSINT CTF
https://hackyourmom.com/en/kibervijna/osint-ctf-challenges/
https://gralhix.com/list-of-osint-exercises/

- Location tracking
https://github.com/IvanGlinkin/CCTV

-Cool database
https://osintkit.net/login
bot (https://news.1rj.ru/str/osintkit_bot)
https://ohshint.gitbook.io/oh-shint-its-a-blog/osint/osint-wtf

- Roadmap
https://osintph.medium.com/osint-learning-path-20817eb5232e

- Blue team training

https://hackyourmom.com/en/osvita/dobirka-majdanchykiv-dlya-trenuvannya-blue-team/

- Dorks Builder
https://analystresearchtools.com

- Osint toolbox
https://github.com/The-Osint-Toolbox

- Best attack surface visualization tools
https://netlas.io/blog/best_attack_surface_visualization_tools/
bigdomaindata.com/reverse-whois/

- Github
https://sourcegraph.com
https://grep.app

- Games
https://www.geohub.gg/
https://news.1rj.ru/str/molfar_global/3235
https://news.1rj.ru/str/molfar_global/3181
Nite team 4
-Dorks advanced
https://github.com/cipher387/Dorks-collections-list

Tools:
- Malfar bot
@osintkit_bot
- phind.com

-Faceagle for images
https://faceagle.com/

- Bellingcat tools
https://www.bellingcat.com/resources/2024/09/24/bellingcat-online-investigations-toolkit/

- Molfar tools
https://molfar.com/en/useful-apps

❤4

1.37K viewsedited 11:00

Daily Security

Forwarded from Investigations by ZachXBT

It appears the crypto exchange Rain was likely exploited for $14.8M on April 29, 2024 after their BTC, ETH, SOL, and XRP wallets saw suspicious outflows. Funds were quickly transferred to instant exchanges and swapped for BTC and ETH.

As of now Rain has yet to make any statement about the incident.

Stolen funds currently sit
137.9 BTC
bc1q53aawrkpt5lvk2e30z36unvmhqqdru7q4rprp2
1881 ETH
0x197bc094f990261fd6841342901c451858756c28

❤1

904 views13:50

Daily Security

Forwarded from Cyber Detective

YouTube channel search tools with multiple search filters

channelcrawl.com
channelcrawler.com
aitoolskit.ai/youtube-channel-search/output
channelcrawler.com/
aitoolskit.ai/youtube-channel-search/output
ytubetool.com/tools/youtube-channel-search

#osint #socmint

1.01K views21:45

Daily Security

Might be interesting

https://amalmurali.me/posts/git-rce/

amalmurali.me

Exploiting CVE-2024-32002: RCE via git clone

A new RCE in Git caught my attention on a recent security feed, labeled CVE-2024-32002. Given Git’s ubiquity and the widespread use of the clone command, I was instantly intrigued. Could something as routine as cloning a repository really open the door to…

941 viewsedited 12:00