Covert-Tube – Youtube As Covert-Channel – Control Systems Remotely And Execute Commands By Uploading Videos To Youtube
A program to control systems remotely by uploading videos to Youtube using Python to create the videos and the listener,...
hacking
Google warns of APT28 attack attempts against 14,000 Gmail users
Google warned more than 14,000 Gmail users that they have been the target of nation-state spear-phishing campaigns. On Wednesday, Google...
Apache rolled out a new update in a few days to fix incomplete patch for an actively exploited flaw
Apache Software Foundation has released HTTP Web Server 2.4.51 to completely address a vulnerability that has been actively exploited in...
FIN12 ransomware gang don’t implement double extortion to prioritize speed
Researchers detailed the activities of the FIN12 ransomware group that earned million of dollars over the past years. Researchers from...
Attack-Surface-Framework – Tool To Discover External And Internal Network Attack Surface
ASF aims to protect organizations acting as an attack surface watchdog, provided an “Object” which might be a: Domain, IP...
PoC exploit for 2 flaws in Dahua cameras leaked online
A proof of concept exploit for two authentication bypass vulnerabilities in Dahua cameras is available online, users are recommended to...
SpoolSploit – A Collection Of Windows Print Spooler Exploits Containerized With Other Utilities For Practical Exploitation
A collection of Windows print spooler exploits containerized with other utilities for practical exploitation.SummarySpoolSploit is a collection of Windows print...
Twitch data breach updates: login credentials or card numbers not exposed
An anonymous individual has leaked the source code and data of the popular video streaming platform Twitch via a torrent...
Operation GhostShell: MalKamak APT targets aerospace and telco firms
Operation GhostShell: Threat actors used ShellClient malware in cyberespionage campaigns aimed at companies in the aerospace and telecommunications sectors. Hackers...
Exclusive: Researchers dumped Gigabytes of data from Agent Tesla C2Cs
Resecurity researchers dumped Gigabytes of data from Agent Tesla C2Cs, one of the most well-known cyberespionage tools suffers a data...
Twitch source code and sensitive data leaked online
An anonymous individual has leaked the source code and data of the popular video streaming platform Twitch via a torrent...
Smersh – A Pentest Oriented Collaborative Tool Used To Track The Progress Of Your Company’S Missions
Smersh is a pentest oriented collaborative tool used to track the progress of your company's missions and generate rapport.Preview front...
Arizona governor announces the launch of Command Center to protect state computer systems
The governor of Arizona, Doug Ducey, has announced the launch of a Cyber Command Center to address the thousands of...
Scrummage – The Ultimate OSINT And Threat Hunting Framework
VERSION 3.6Code efficiency enhancements and bug fixes for plugins, and improved logging.Significant UI/UX enhancements.Organisation specific settings and configurations, allowing for...
UK newspaper The Telegraph exposed a 10TB database with subscriber data
The UK media outlet The Telegraph has leaked 10 TB of subscriber data after failing to properly secure one of...
LANtenna attack allows exfiltrating data from Air-Gapped systems via Ethernet cables
Boffins devised a new technique, dubbed LANtenna, to exfiltrate data from systems in air-gapped networks using Ethernet cables as a...
pFuzz – Helps Us To Bypass Web Application Firewall By Using Different Methods At The Same Time
pFuzz is an advanced red teaming fuzzing tool which we developed for our research. It helps us to bypass web...
Apache patch a zero-day flaw exploited in the wild
Apache has addressed two vulnerabilities, one of which is a path traversal and file disclosure flaw in its HTTP server...
Unnamed Ransomware gang uses a Python script to encrypt VMware ESXi servers
An unnamed ransomware gang used a custom Python script to target VMware ESXi and encrypt all the virtual machines hosted...
CarPunk – The Car Hacking Toolkit
CARPUNK IS VERY SIMILAR TO CANghost, ONLY THE DEFFERENCE IS, IT COMES WITH OPTIONS TO ENABLE OR DISABLE INTERFACE AND...
Telco service provider giant Syniverse had unauthorized access since 2016
Syniverse service provider discloses a security breach, threat actors have had access to its databases since 2016 and gained some...
Dark web marketplace White House announces end to its operations
The dark web marketplace White House Market shuts down its operation, last week its operators announced that they were retiring....
Misconfigured Apache Airflow servers leak thousands of credentials
Experts discovered many misconfigured Apache Airflow servers exposed online that were leaking sensitive information from prominent tech firms. Apache Airflow is an...
BurpCrypto – A Collection Of Burpsuite Encryption Plug-Ins, Support AES/RSA/DES/ExecJs(execute JS Encryption Code In Burpsuite)
Burpcrypto is a collection of burpsuite encryption plug-ins, supporting AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite).Build$ mvn packageUsage中文使用说明Download the precompiled jar...
