All posts in Uncategorized

■■■□□ CSRF + POST Body Param Reflection = POST-Based XSS. https://blog.bhuwanbhetwal.com.np/csrf-post-body-param-reflection-post-based-xss-a-brainfuck https://t.me/cKure/14871

■■□□□ Are Bengal Cats legal in Australia? Hackers are targeting people who type these six words into their computer. https://nypost.com/2024/11/09/tech/hackers-are-targeting-people-who-type-these-six-words-into-their-computer/ https://t.me/cKure/14870

Sandfly 5.2 – Linux Stealth Rootkit File and Directory De-Cloaking. https://sandflysecurity.com/about-us/news/sandfly-5-2-linux-stealth-rootkit-file-and-directory-de-cloaking/ https://t.me/cKure/14868

■■■■□ Multiple new macOS sandbox escape vulnerabilities. https://www.kandji.io/blog/macos-audit-story-part1 Slides: https://github.com/jhftss/jhftss.github.io/blob/main/res/slides/A%20New%20Era%20of%20macOS%20Sandbox%20Escapes.pdf https://t.me/cKure/14867

■■■■□ Breaking Down Multipart Parsers: File upload validation bypass. https://blog.sicuranext.com/breaking-down-multipart-parsers-validation-bypass/ https://t.me/cKure/14866

■■■■□ HTTP Security Headers : A complete guide to HTTP headers. https://www.darkrelay.com/post/http-security-headers https://t.me/cKure/14865

■■■■□ Hackers Deploy CRON#TRAP for Persistent Linux System Backdoor. https://www.securonix.com/blog/crontrap-emulated-linux-environments-as-the-latest-tactic-in-malware-staging/ https://t.me/cKure/14864

■■■■■ Uncovering Apple Vulnerabilities: The diskarbitrationd and storagekitd Audit Story Part 1. https://www.kandji.io/blog/macos-audit-story-part1 https://t.me/cKure/14863

■■■■■ DogeRat: A multifunctional Telegram based Android RAT without port forwarding. https://github.com/shivaya-dav/DogeRat https://t.me/cKure/14862

■■■■□ Crafting Advanced Windows Malware. https://sid4hack.medium.com/shadows-in-rust-crafting-advanced-windows-malware-8db52c009fdb https://t.me/cKure/14861