All posts by John Doe

■■□□□ Vuln Checklist. https://github.com/Az0x7/vulnerability-Checklist/

■■■■□ Yemeni 🇾🇪 hacker group claims their first cyber-kinetic attack. This is our first cyber physical attack to Haifa port. From now on with the obtained data from all partners of Israel via cyber breach to the infrastructures of Haifa port none of them would be safe. All of your data are in our hands.

■■■■□ Fallout: The UAE’s Cyber Security Council on Monday confirmed that 634 public and private companies and organisations were targeted of a huge global hack. The attacks leaked data from vital and strategic national sectors, state news agency. A threat actor known as rose87168 claimed to have breached Oracle Cloud’s servers, according to Dr Mohamed…

■■■■□ This Simple URL Encoding Made a researcher $50,000 in Bounties. https://www.youtube.com/watch

■■■■□ Chinese Weaver Ant hackers spied on telco network for 4 years. Researchers investigating the intrusion found multiple variants of the China Chopper backdoor and a previously undocumented custom web-shell called ‘INMemory’ that executes payloads in the host’s memory. https://www.bleepingcomputer.com/news/security/chinese-weaver-ant-hackers-spied-on-telco-network-for-4-years/

■■■■■ The Oracle Cloud Supply Chain Hack. The Oracle Cloud Supply Chain Hack

■■■■□ Cloudflare is luring web-scraping bots into an ‘AI Labyrinth’Rather than block web scrapers, Cloudflare invites them to trawl a web of useless ‘AI-generated nonsense.’ https://www.theverge.com/news/634345/cloudflare-ai-labyrinth-web-scraping-bots-training-data

🌐 Russian zero-day seller is offering up to $4 million for Telegram exploits. Russian zero-day seller is offering up to $4 million for Telegram exploits

■■■■■ Caido v0.47.0 Released – Burp Suite Alternative Web Pentesting Tool Brings New Features. Caido v0.47.0 Released – Burp Suite Alternative Web Pentesting Tool Brings New Features

■■■■□ Find open Juice S3 Bucket using lazys3 Tool Link: https://github.com/nahamsec/lazys3 Some writeups https://medium.com/p/f6ae24cdcdfa https://medium.com/securing/exploring-25k-aws-s3-buckets-f22ec87c3f2a https://suleyman-celik8.medium.com/enumerate-s3-buckets-using-lazys3-d2f5de14d31