GitDorker – A Tool To Scrape Secrets From GitHub Through Usage Of A Large Repository Of Dorks
GitDorker is a tool that utilizes the GitHub Search API and an extensive list of GitHub dorks that I've compiled...
News
The value of cybersecurity integration for MSPs
For modern Managed Service Providers (MSPs), gone are the days of disparate workflows, and that’s really for the best. Imagine...
Expert opinion: how the digital currency of the Bank of Russia will change the future of the country
Announcing the possible appearance of the digital ruble, the Russian Central Bank joined dozens of world Central banks that have...
Iranian Hacker Group Using New Tools to Target Government Agencies of Broader Middle East Region
In the part of their attacks on companies and government agencies in the broader Middle East region, an Iranian cyberattack...
On the trail of the XMRig miner
As protection methods improve, the developers of miners have had to enhance their own creations, often turning to non-trivial solutions....
Oregami – IDA Plugins And Scripts For Analyzing Register Usage Frame
""" What is this register used for? Hmm.. I'll just rename it to veryuniquename, do a textual search, and find...
NTLMRawUnHide – A Python3 Script Designed To Parse Network Packet Capture Files And Extract NTLMv2 Hashes In A Crackable Format
NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format....
What’s New in InsightAppSec and tCell: Q3 2020 in Review
Here at Rapid7, we’ve been quite busy continuously improving, expanding functionality, and testing new features for feedback with our customers...
XSS to TSS: tech support scam campaign abuses cross-site scripting vulnerability
Tech support browser lockers continue to be one of the most common web threats. Not only are they a problem...
United States rejected Putin’s offer to cooperate on cybersecurity
The US authorities for the first time publicly responded to the proposal of Russian President Vladimir Putin to resume cooperation...
Mobile Versions of Several Browsers Found Vulnerable to Address Bar Spoofing Flaws
Several mobile browsers including Firefox, Chrome, and Safari were found vulnerable to an ‘address bar spoofing’ flaw which when exploited...
Life of Maze ransomware
In the past year, Maze ransomware has become one of the most notorious malware families threatening businesses and large organizations....
MalwareSourceCode – Collection Of Malware Source Code For A Variety Of Platforms In An Array Of Different Programming Languages
Malware Source Code Collection!!! DISCLAIMER !!! We do not take any responsibility for any damage done by the code in...
Pwndoc – Pentest Report Generator
PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx...
This One Time on a Pen Test: Thanks for Sharing Your Wi-Fi
Each year, Rapid7 penetration testers complete hundreds of internally and externally based penetration testing service engagements. This post is part...
Brute force attacks increase due to more open RDP ports
While leaving your back door open while you are working from home may be something you do without giving it...
The Russian Embassy denies the US charge of six Russians in hacking
The Russian Embassy in Washington denies US accusations against Russian citizens of hacking and destabilizing activities around the worldRussia has...
Russian military companies were reportedly attacked by hackers from North Korea
North Korean hacker group Kimsuky has reportedly conducted several attacks on the Russian military-industrial complex in order to obtain military...
UK National Cyber Security Centre Reveals Russia’s Plan to Disrupt Tokyo Olympics
The UK National Cyber Security Centre recently revealed that in an attempt to completely disrupt the 'world's premier sporting event'...
Zap-Hud – The OWASP ZAP Heads Up Display (HUD)
The HUD is new interface that provides the functionality of ZAP directly in the browser. Learn more: Blog: Hacking with...
PatchChecker – Web-based Check For Windows Privesc Vulnerabilities
This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application (running on...
Vulntober: Multiple Mobile Browser Address Bar Spoofing Vulnerabilities
Today, we're announcing a coordinated vulnerability disclosure publication with our longtime mobile hacker friend, Rafay Baloch. If you'd like to...
A week in security (September 12 – September 18)
Last week on Malwarebytes Labs, we looked at journalism’s role in cybersecurity on our Lock and Code podcast, gave tips...
Emotet Returns: Here’s a Quick Look into new ‘Windows Update’ attachment
Emotet Malware was first discovered by security researchers in the year 2014, but, the threats by Emotet have constantly evolved...
