All posts by cK-bot

■■■■□ Exploiting CSP in Webkit to Break Authentication & Authorization. https://threatnix.io/blog/exploiting-csp-in-webkit-to-break-authentication-authorization/ https://t.me/cKure/10170

■■■■□ Interesting thread on iphone. iPhone X iOS 14.8 activation lock bypassed successfully with Signal by iRemoval Pro (via – twitter.com/ObaidaBachiri). https://twitter.com/Yalujb/status/1461739181772705797 https://t.me/cKure/10169

■□□□□ Russia vs Ukraine Is a coordinated cyberattack brewing in the escalating Russian-Ukrainian conflict? https://securityboulevard.com/2021/11/is-a-coordinated-cyberattack-brewing-in-the-escalating-russian-ukrainian-conflict/ https://t.me/cKure/10168

■■□□□ Blinder is a tool that will help you simplify the exploitation of blind SQL injection https://github.com/Mogenn/Blinder https://t.me/cKure/10167

■■□□□ A curated list of resources for learning about application security. Contains books, websites, blog posts, and self-assessment quizzes. https://github.com/paragonie/awesome-appsec https://t.me/cKure/10166

■■■□□ Tool: AFLTriage AFLTriage is a tool to triage crashing input files using a debugger. It is designed to be portable and does not require any run-time dependencies, besides libc and an external debugger. https://github.com/quic/AFLTriage Guide: https://securityonline.info/afltriage-triage-crashing-input-files-using-a-debugger/ https://t.me/cKure/10165

■□□□□ SOC Prime Quick Hunt delivers one-click threat hunting capabilities to security teams. https://www.helpnetsecurity.com/2021/11/20/soc-prime-quick-hunt/ https://t.me/cKure/10164

■□□□□ An Overview of Website Reinfection Vectors. https://securityboulevard.com/2021/11/an-overview-of-website-reinfection-vectors/ https://t.me/cKure/10163

■■■■□ Pentest tale – Dumping cleartext credentials from antivirus. https://www.exandroid.dev/2021/11/20/pentest-tale-dumping-cleartext-credentials-from-antivirus/ https://t.me/cKure/10161

■■■■■ pwnSpoof – Generates realistic spoofed log files for common web servers with customisable attack scenarios. https://github.com/punk-security/pwnspoof https://t.me/cKure/10160