NEW BOT Телеграм, страница

Zero-Click #PoC Trigger for CVE-2021-1965 (Qualcomm SnapDragon WiFi Driver #RCE)

https://github.com/parsdefense/CVE-2021-1965/blob/main/CVE-2021-1965-poc.c

https://source.codeaurora.org/quic/qsdk/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn/commit/?id=a426e5e1668fff3dfe8bde777a9340cbc129f8df

#exploit #Qualcomm #snapdragon
@securation

1.65K views17:57

Security Analysis

https://jpt.spe.org/industrial-internet-of-things-raises-new-security-implications

JPT

Industrial Internet of Things Raises New Security Implications

The goal of this paper is to aid oilfield security planning and design processes through improved recognition of the cyber-physical security effects arising from the implementation of the industrial Internet of Things.

🎉1

1.63K views13:54

Security Analysis

⭕️ نگاهی به شکار تهدیدات سایبری با استفاده از sysmon

https://www.darkoperator.com/blog/2018/10/5/operating-offensively-against-sysmon
#log #monitoring #sysmon
@securation

Shell is Only the Beginning

Operating Offensively Against Sysmon

Sysmon is a tool written by Mark Russinovich that I have covered in multiple blog post and even wrote a PowerShell module called Posh-Sysmon to help with the generation of configuration files for it. Its main purpose is for the tracking of potentially malicious…

👍3

2.24K viewsedited 09:35

Security Analysis

https://aaryanapex.medium.com/bug-bounty-bypassing-endpoints-55254df2cbff

👍1

2.03K views15:19

Security Analysis

https://www.politico.eu/article/ukraine-russia-eu-cyber-attack-security-help/

POLITICO

EU to mobilize cyber team to help Ukraine fight Russian cyberattacks

European civilian-military officials will help Kyiv fend off Russian hackers.

1.79K views20:38

Security Analysis

https://professionalhackers.in/ssrfire-an-automated-ssrf-finder-just-give-the-domain-name-and-your-server-and-chill-also-has-options-to-find-xss-and-open-redirects/

1.91K views07:17

Security Analysis

⭕️ BurpSuite plugin intended to help with nuclei template generation

https://github.com/projectdiscovery/nuclei-burp-plugin
#burpsuite #nuclei #generation
@securation

GitHub

GitHub - projectdiscovery/nuclei-burp-plugin: Nuclei plugin for BurpSuite

Nuclei plugin for BurpSuite. Contribute to projectdiscovery/nuclei-burp-plugin development by creating an account on GitHub.

👍5🔥2

1.87K views18:37

Security Analysis

https://www.benteveo.kiwi/blog/automating-bug-bounties

👍1

1.86K views09:38

Security Analysis

تحلیل آسیب پذیری جدید RCE که روی PFsense کشف شده

https://www.shielder.it/advisories/pfsense-remote-command-execution/
#pfsense #rce
@securation

Shielder

Shielder - Remote Code Execution in pfSense <= 2.5.2

pfSense <= 2.5.2 allows authenticated users to inject arbitrary sed-specific code, which leads to an Arbitrary File Write, resulting in a Remote Code Execution. The vulnerability is also exploitable through a Cross-Site Request Forgery.

👍1👎1

1.93K views11:07

Security Analysis

https://kailashbohara.com.np/blog/2022/02/04/bypassing-PHP-functions-to-read-system-file/

👍3

1.92K views18:29

Security Analysis

⭕️ Http request smuggling vulnerability scanner

https://github.com/Sh1Yo/request_smuggler
#http #smuggling #tool
@securation

GitHub

GitHub - Sh1Yo/request_smuggler: Http request smuggling vulnerability scanner

Http request smuggling vulnerability scanner. Contribute to Sh1Yo/request_smuggler development by creating an account on GitHub.

1.97K views09:28

Security Analysis

https://twitter.com/xxNB65/status/1497825651004485634

Twitter

NB65

Looks like the Russian state had a little bit of an issue with their Gas compressor. Can someone say, leaking gas, turned off fans, deleted configurations/profiles, access to the file system & an inevitable shutdown? #Ukraine

1.77K views08:32

Security Analysis

⭕️ انجمن هکینگ Raidforums توسط پلیس مصادره شد :)

⭕️ مدیران انجمن هک Raidforum میگویند دامنه رسمی این سایت (Raidforums.com) توسط پلیس مصادره شده و مدیر اصلی سایت ( با نام کاربری Omnipotent ) مدت زیادی است که مفقود شده و احتمالا دستگیر شده است!

این سایت از انجمن‌ساز MyBB استفاده میکند و چند هفته پیش به علت ضعف امنیتی و عدم به‌روز‌رسانی دیتابیس این انجمن هک شد و هکرها بعد از دانلود اطلاعات جداول دیتابیس را Drop کردند که هکرهای دیگر نتوانند به دیتابیس انجمن دسترسی پیدا کنند.

- نکته قابل توجه این است که اکثر دیتاهایی که بصورت عمومی از سرویس های ایرانیان فروخته میشد در این فروم قرار میگرفت!

یکی از مدیران قدیمی این سایت به نام Jaws در تلگرام اعلام کرد که سایت جدیدی با آدرس **.to راه اندازی کرده و از کاربران قدیمی خواست در Raidforums.com لاگین نکنند!

انجمن Raidforums یکی از بزرگترین سایتهای هک تحت وب بود که بیشتر برای درز اطلاعات و خرید و فروش دیتابیس‌ مورد توجه قرار داشت.

#hack #raidforums
@securation

👍3

2.3K views05:44

Security Analysis

https://github.blog/2022-02-22-github-advisory-database-now-open-to-community-contributions/

The GitHub Blog

GitHub Advisory Database now open to community contributions

Anyone can now provide additional information and context to further the community’s understanding and awareness of security advisories.

👍3

1.63K views18:39

Security Analysis

⭕️Auto-separated x86 ISA reference page

https://namazso.github.io/x86/
@securation

1.57K views21:39