Guzzle security bypass | CVE-2022-29248
NAME Guzzle security bypass Platforms Affected:Guzzle Guzzle 7.0.0 Guzzle Guzzle 6.5.4 Guzzle Guzzle 7.4.1 Risk Level:8 Exploitability:Unproven Consequences:Bypass Security DESCRIPTION
Vulnerabilities
Data Breach
LockBit 2.0 Ransomware Victim: ils[.]theinnovatecompanies[.]com
NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the
News
GitHub: Nearly 100,000 NPM Users’ credentials stolen in the April OAuth token attack
GitHub provided additional details into the theft of its integration OAuth tokens that occurred in April, with nearly 100,000 NPM users’ credentials.
Bug Bounty
HackerOne Bug Bounty Disclosure: control-character-filtering-misses-leading-and-trailing-whitespace-in-file-and-folder-namesbydavid_h1
Programme HackerOne Nextcloud Submitted by david_h1 Report Control character filtering misses leading and trailing whitespace in file and folder names
Tools
Stunner – Tool To Test And Exploit STUN, TURN And TURN Over TCP Servers
Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers. TURN is a protocol mostly
CISA News
CISA: CISA and DoD Release 5G Security Evaluation Process Investigation Study
CISA and DoD Release 5G Security Evaluation Process Investigation Study CISA and the Department of Defense (DoD) have released their
Cobalt Strike Beacon Detections
![Cobalt Stike Beacon Detected – 39[.]108[.]142[.]219:80](https://www.redpacketsecurity.com/wp-content/uploads/2021/11/Cobalt-Strike-390x205.jpg "Cobalt Stike Beacon Detected – 39[.]108[.]142[.]219:80")
Cobalt Stike Beacon Detected – 39[.]108[.]142[.]219:80
Cobalt Strike Beacon Detection Alerts
![Cobalt Stike Beacon Detected – 101[.]34[.]6[.]83:7777](https://www.redpacketsecurity.com/wp-content/uploads/2021/11/Cobalt-Strike-130x90.jpg "Cobalt Stike Beacon Detected – 101[.]34[.]6[.]83:7777")
Hack The Box
Hack The Box Walkthrough Guide To: BREACH
Follow this step by step guide to complete the challenge.
Extract the zip file to see what files and folders are available, next …
Tutorials
Empire 4.5
It has been another exciting week for the team. First we are just a week away for our inaugural course