All posts by cK-bot

■■■■□ Into the art of Binary Exploitation 0x000002 [Sorcery of ROP]. https://infosecwriteups.com/into-the-art-of-binary-exploitation-0x000002-sorcery-of-rop-b4658238ee62 https://t.me/cKure/9775

■■■■□ Weaponizing Reflected XSS to Account Takeover. https://infosecwriteups.com/weaponizing-reflected-xss-to-account-takeover-ae8aeea7aca3 https://t.me/cKure/9774

■■□□□ Exploiting XML External Entity (XXE) Injection Vulnerability. https://infosecwriteups.com/exploiting-xml-external-entity-xxe-injection-vulnerability-f8c4094fef83 https://t.me/cKure/9773

■■□□□ Tool: STACS, a YARA powered static credential scanner which suports binary file formats, analysis of nested archives, composable rulesets and ignore lists, and SARIF reporting. https://github.com/stacscan/stacs https://t.me/cKure/9772

■□□□□ Accenture confirms data breach after August ransomware attack. https://www.bleepingcomputer.com/news/security/accenture-confirms-data-breach-after-august-ransomware-attack/ https://t.me/cKure/9771

■■■■■ A Look At Some Real-World Obfuscation Techniques. https://research.nccgroup.com/2021/10/12/a-look-at-some-real-world-obfuscation-techniques/ https://t.me/cKure/9770

■■■■□ Japan: Data-Leak at Japanese camera manufacturer Olympus as it investigates potential Cyber-Attack. https://www.infosecurity-magazine.com/news/olympus-investigates-potential/ https://t.me/cKure/9769

■■■□□ The operators behind the pernicious TrickBot malware have resurfaced with new tricks that aim to increase its foothold by expanding its distribution channels, ultimately leading to the deployment of ransomware such as Conti. https://thehackernews.com/2021/10/attackers-behind-trickbot-expanding.html https://t.me/cKure/9768

■■■□□ Data-Leak from Iran as actor private data from membership.parastari.org (سازمان نظام پرستاری ایران) Details about leak: Files: ~43000 (jpg ,jpeg, png, pdf, xls, xlsx and …)    Classified under:     Scan birth certificate (اسکن شناسنامه)     Scan the national card (اسکن کارت ملی)     Iranian passport scan (اسکن پاسپورت ایرانی پرستاران)     Scan…

■■□□□ United States Government Warns of Insider and Ransomware Threat to Water Plants. https://t.me/cKure/9766