All posts in Uncategorized

■■■■■ PPPwn – PlayStation 4 PPPoE RCE: A kernel remote code execution exploit for PlayStation 4 up to FW 11.00. In order to launch Mira or similar homebrew enablers, the stage2.bin payload needs to be adapted. https://github.com/TheOfficialFloW/PPPwn Zero-Day https://t.me/cKure/13960

QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things. https://github.com/P1sec/QCSuper https://t.me/cKure/13958

■■■■■ Close-Circuit Telegram Vision revolutionizes location tracking with its open-source design and Telegram API integration. Offering precise tracking within 50-100 meters, users can monitor others in real-time for logistics or safety, redefining how we navigate our surroundings. https://github.com/IvanGlinkin/CCTV https://t.me/cKure/13956

■□□□□ AWS S3 storage bucket with unlucky name nearly cost developer $1,300. https://arstechnica.com/information-technology/2024/04/aws-s3-storage-bucket-with-unlucky-name-nearly-cost-developer-1300/ https://t.me/cKure/13955

■■■■■ New Cuttlefish malware infects routers to monitor traffic for credentials. https://www.bleepingcomputer.com/news/security/new-cuttlefish-malware-infects-routers-to-monitor-traffic-for-credentials/ https://t.me/cKure/13954

■■■■■ Tracecat: Open-source SOAR. https://github.com/TracecatHQ/tracecat https://www.helpnetsecurity.com/2024/04/30/tracecat-open-source-automation-platform-soar/ https://t.me/cKure/13953

■■■□□ Linux Kernel Vulnerability (CVE-2024-26925) Let Hackers Access Unauthorized Data. https://cybersecuritynews.com/linux-kernel-vulnerability/ https://t.me/cKure/13952

■■□□□ The Only Powershell Command You Will Ever Need To Find Out Who Did What In Active Directory. PSWinReportingV2 https://evotec.pl/the-only-powershell-command-you-will-ever-need-to-find-out-who-did-what-in-active-directory/ https://t.me/cKure/13951

■■■■■ Hacking Credit Cards By Using Magspoof With Flipper Zero. https://syedzainabidi.medium.com/hacking-credit-cards-by-using-magspoof-with-flipper-zero-2f017b364d2f https://t.me/cKure/13950

■□□□□ Account compromise of “unprecedented scale” uses everyday home devices Credential-stuffing attack uses proxies to hide bad behavior. https://arstechnica.com/security/2024/04/everyday-devices-are-used-to-hide-ongoing-account-compromise-campaign/ https://t.me/cKure/13949