All posts in Uncategorized

■■■□□ Pandora: A red team tool that assists into extracting/dumping master credentials and/or entries from different password managers. https://github.com/efchatz/pandora https://t.me/cKure/14889

■■□□□ Hacking Active Directory: From Reconnaissance to Exploitation -Part 2. https://medium.com/@RootRouteway/hacking-active-directory-from-reconnaissance-to-exploitation-part-2-f2630b836e73 https://t.me/cKure/14888

■□□□□ VMware makes Workstation and Fusion free for everyone. https://www.bleepingcomputer.com/news/software/vmware-makes-workstation-and-fusion-free-for-everyone/ https://t.me/cKure/14887

■□□□□ Satellite Hacking. https://www.blackhillsinfosec.com/satellite-hacking/ https://t.me/cKure/14886

■■■□□ Hackers Use Excel Files to Deliver Remcos RAT Variant on Windows. https://hackread.com/hackers-use-excel-files-remcos-rat-variant-windows/ https://t.me/cKure/14885

■■■■□ New Campaign Uses Remcos RAT to Exploit Victims. https://www.fortinet.com/blog/threat-research/new-campaign-uses-remcos-rat-to-exploit-victims https://t.me/cKure/14884

GitHub Enterprise SAML Authentication Bypass (CVE-2024-4985 / CVE-2024-9487). https://projectdiscovery.io/blog/github-enterprise-saml-authentication-bypass https://t.me/cKure/14883

■■■■□ A Azure Exploitation Toolkit for Red Team & Pentesters. https://github.com/SikretaLabs/BlueMap https://t.me/cKure/14881

■□□□□ Exploiting OS Command Injection — A Real-World Scenario. https://medium.com/@m_kasim2/exploiting-os-command-injection-a-real-world-scenario-4a2db1733137 https://t.me/cKure/14880

■■■■■ Hackers now use ZIP file concatenation to evade detection. https://www.bleepingcomputer.com/news/security/hackers-now-use-zip-file-concatenation-to-evade-detection/ https://t.me/cKure/14879