All posts by cK-bot

■■■■■ SQL Injection in WordPress core (CVE-2022–21661) https://cognn.medium.com/sql-injection-in-wordpress-core-zdi-can-15541-a451c492897 https://t.me/cKure/10517

■■□□□ https://mrd0x.com/twitter-recap-part-1 https://t.me/cKure/10516

■■■■□ Linux kernel exploit development. https://breaking-bits.gitbook.io/breaking-bits/exploit-development/linux-kernel-exploit-development https://t.me/cKure/10515

■■■■□ Hunt-Sleeping-Beacons https://github.com/thefLink/Hunt-Sleeping-Beacons https://t.me/cKure/10514

■■■■■ Mobile Security Testing Guide. https://mobile-security.gitbook.io/mobile-security-testing-guide/ https://t.me/cKure/10512

■■□□□ Zero-Day: Interesting thread about iOS 15.2 0-day exploit (low success rate due to recent security mitigations by Apple) (dev – jsherma100). https://t.co/B2YDYAIBS4 https://t.me/cKure/10511

■■■■□ CVE-2021-38000: Chrome Intents Logic Flaw https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-38000.html https://t.me/cKure/10510

■■■□□ How Web3 apps and wallets inevitably depend on centralized services like OpenSea, Infura, and Alchemy, which don’t even provide authenticated responses – Moxie Marlinspike. https://twitter.com/0xAsm0d3us/status/1479836324592947200 https://t.me/cKure/10509

■□□□□ Bypass Defender AV static detection: Name the malicious file DumpStack.log Defender doesn’t scan it. https://twitter.com/mrd0x/status/1479094189048713219 https://t.me/cKure/10508

https://en.wikipedia.org/wiki/Tek_Fog https://t.me/cKure/10507