All posts in Uncategorized

■■■■□ TikTok fixes zero-day bug used to hijack high-profile accounts. https://www.bleepingcomputer.com/news/security/tiktok-fixes-zero-day-bug-used-to-hijack-high-profile-accounts/ https://t.me/cKure/14239

■■■■□ LightSpy Spyware’s macOS Variant Found with Advanced Surveillance Capabilities. https://thehackernews.com/2024/06/lightspy-spywares-macos-variant-found.html https://t.me/cKure/14238

■■■■□ Replicant: Reproducing a Fault Injection Attack on the Trezor One. #IoT https://voidstarsec.com/blog/replicant-part-1 https://t.me/cKure/14237

■■■■■ Extracting WhatsApp Database (or any app data) from Android 12/13 using CVE-2024-0044. https://tinyhack.com/2024/06/07/extracting-whatsapp-database-or-any-app-data-from-android-12-13-using-cve-2024-0044/ https://t.me/cKure/14236

■■■□□ File-Tunnel : Tunnel TCP connections through a file. https://labs.jumpsec.com/whats-in-a-name-writing-custom-dns-tunnelling-protocol-on-the-fly-exploiting-unexpected-aws-lambda-misconfiguration-all-in-a-web-app-pen-test-part-1/ https://t.me/cKure/14235

■■■■□ What’s in a Name? Writing custom DNS tunnelling protocol, exploiting unexpected AWS Lambda misconfiguration – in a web app Pen test (Part 1). https://labs.jumpsec.com/whats-in-a-name-writing-custom-dns-tunnelling-protocol-on-the-fly-exploiting-unexpected-aws-lambda-misconfiguration-all-in-a-web-app-pen-test-part-1/ https://t.me/cKure/14234

■■■□□ Chisel-Strike: A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities. https://github.com/m3rcer/Chisel-Strike https://t.me/cKure/14233

■■□□□ TotalRecall: This tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC’s activity snapshots. https://github.com/xaitax/TotalRecall https://t.me/cKure/14232

■□□□□ Cadiclus – Privilege Escalation Tool for Linux Systems that use PowerShell. https://github.com/tjnull/pentest-arsenal/tree/main/Cadiclus https://t.me/cKure/14231

■■■■■ Search & Parse Password Leaks. https://github.com/JoelGMSec/LeakSearch https://t.me/cKure/14228