All posts by cK-bot

Researchers from China’s Pangu Lab have disclosed details of a “top-tier” backdoor put to use by the Equation Group, an advanced persistent threat (APT) with alleged ties to the cyber-warfare intelligence-gathering unit of the U.S. National Security Agency (NSA). https://www.pangulab.cn/en/post/the_bvp47_a_top-tier_backdoor_of_us_nsa_equation_group/ https://thehackernews.com/2022/02/chinese-experts-uncover-details-of.html https://t.me/cKure/10761

■■□□□ Website of Russia’s VEB Bank was briefly struck offline following Biden’s remarks that the financial institution is part of the U.S. sanctions package. The site cited a db error. https://t.me/cKure/10759

■■□□□ Aurora incident response. https://github.com/cyb3rfox/Aurora-Incident-Response https://t.me/cKure/10758

■■■□□ SSRFire – An Automated SSRF Finder. Just Give The Domain Name And Your Server And Chill! Also Has Options To Find XSS And Open Redirects. https://github.com/ksharinarayanan/SSRFire https://t.me/cKure/10757

■■■□□ Banking World Rocked After Leak Exposes 18,000 Credit Suisse Accounts. https://www.infosecurity-magazine.com/news/leak-exposes-18000-credit-suisse/ https://t.me/cKure/10756

■■■■□ Servisnet Tessa MQTT Credentials Dump (Unauthenticated) (Metasploit). https://cxsecurity.com/issue/WLB-2022020102 https://t.me/cKure/10755

■□□□□ Threat actors have stolen and flipped high-valued NFTs from the users of the world’s largest NFT exchange, OpenSea. NFTs have 0 intrinsic value but wrt ctypto around 1.7M USD + were stolen. https://t.me/cKure/10754

■■■□□ Analyzing a PJL directory traversal vulnerability – exploiting the Lexmark MC3224i printer (part 2). https://research.nccgroup.com/2022/02/18/analyzing-a-pjl-directory-traversal-vulnerability-exploiting-the-lexmark-mc3224i-printer-part-2/ https://t.me/cKure/10753

■■■■□ Automated OSINT (tool) via Reconator https://github.com/gokulapap/Reconator https://t.me/cKure/10750

■■■■□ Cobalt Strike replacements. https://github.com/EmpireProject/Empire https://github.com/bats3c/shad0w https://github.com/Ne0nd0g/merlin https://github.com/BC-SECURITY/Starkiller https://github.com/nettitude/PoshC2 https://github.com/cobbr/Covenant https://github.com/mhaskar/Octopus https://t.me/cKure/10749