All posts in Uncategorized

■■■□□ Stowaway: A Multi-hop proxy tool for security researchers and pentesters Users can use this program to proxy external traffic through multiple nodes to the core internal network, breaking through internal network access restrictions, constructing a tree-like node network, and easily realizing management functions. https://github.com/ph4ntonn/Stowaway/ https://t.me/cKure/14748

■■■■□ Breaking down Windows critical vulnerability CVE‑2024‑38063. https://bi.zone/eng/expertise/blog/analiz-kriticheskoy-uyazvimosti-windows-cve-2024-38063/ https://t.me/cKure/14746

■■■■■ Analysis of CVE‑2024‑7965 vulnerability that allows adversaries to execute arbitrary code in the Google Chrome renderer. https://bi.zone/eng/expertise/blog/analiz-uyazvimosti-cve-2024-7965/ https://t.me/cKure/14745

■■■■□ Billionaire Pavel crumbles under French prison treatment. Telegram Changes Policy, Says It Will Provide User Data to Authorities. https://www.404media.co/telegram-changes-policy-says-it-will-provide-user-data-to-authorities/ https://t.me/cKure/14743

■■□□□ Data-Leak: Hacker uses Telegram chatbots to leak data of top Indian insurer Star Health. https://www.reuters.com/technology/cybersecurity/hacker-uses-telegram-chatbots-leak-data-top-indian-insurer-star-health-2024-09-20/ https://t.me/cKure/14742

■■□□□ Criminal phishing network resulting in over 480 000 victims worldwide busted in Spain and Latin America. https://www.europol.europa.eu/media-press/newsroom/news/criminal-phishing-network-resulting-in-over-480-000-victims-worldwide-busted-in-spain-and-latin-america https://t.me/cKure/14739

■□□□□ Flipper-One. https://www.xda-developers.com/features-flipper-one-needs-to-be-successful/ https://t.me/cKure/14737

■□□□□ Showing dominance; Google calls for halting use of WHOIS for TLS domain verifications. https://arstechnica.com/security/2024/09/google-calls-for-halting-use-of-whois-for-tls-domain-verifications/ https://t.me/cKure/14736

■■■■■ Zero-Click MediaTek Bug Opens Phones, Wi-Fi to Takeover. https://www.darkreading.com/vulnerabilities-threats/zero-click-mediatek-bug-phones-wifi-takeover https://t.me/cKure/14734

■■■■■ Heap exploitation, glibc internals and nifty tricks. https://blog.quarkslab.com/heap-exploitation-glibc-internals-and-nifty-tricks.html https://t.me/cKure/14733