All posts in Uncategorized

■■■□□ Exploit POC for CVE-2024-36877 https://github.com/jjensn/CVE-2024-36877 https://t.me/cKure/14584

■■■■□ From Limited file read to full access on Jenkins (CVE-2024-23897). https://xphantom.nl/posts/crypto-attack-jenkins/ https://t.me/cKure/14583

■■■■□ Dump lsass using only NTAPIS running 3 programs to create 3 JSON and 1 ZIP file and generate the Minidump later. https://github.com/ricardojoserf/TrickDump https://t.me/cKure/14581

■□□□□ An alleged conspiracy theory with evidence from AI. A chat with Alexa. https://vt.tiktok.com/ZS28YPV4y/ https://t.me/cKure/14580

ESET’s Android Malware researcher Lukas on phone hacking. youtu.be/_Jg8Ol6zbio https://t.me/cKure/14579

■■■□□ United States FBI probes cyber theft claims of Trump campaign documents hacked by Iran. https://www.livemint.com/news/world/fbi-probes-cyber-theft-claims-of-trump-campaign-documents-hacked-by-iran-11723515623259.html https://t.me/cKure/14578

■■■■■ [ Tool ] TTWAF (Test This WAF) is a Web Application Firewall (WAF) test bypass tool. You can check the list of payloads like XSS, LFI, RCE, SQLI and find one that can bypass WAF. Installation requirements: 1. First install rust 2. rustup install stable 3. rustup target add x86_64-unknown-linux-musl 4. sudo apt install…

Project Zero: ‘It Will Take All of Us to End The Era of Zero Days’. It’s becoming increasingly apparent that security research is not enough to end the era of zero days. Natalie Silvanovich https://duo.com/decipher/project-zero-it-will-take-all-of-us-to-end-the-era-of-zero-days https://t.me/cKure/14575

■■■■□ Critical Vulnerabilities in AWS Lets Attackers Gain Full-Service Remotely. https://cybersecuritynews.com/mutiple-vulnerabilities-found-in-aws/ https://t.me/cKure/14574

■■■■■Dark Skippy: Method for a malicious signing device to leak secret keys. darkskippy.com https://t.me/cKure/14572