All posts in Uncategorized

■■■■■ [Tool] Ip2region (2.0 – xdb): Offline IP address manager framework and locator, support billions of data segments, 10 ms searching performance. https://github.com/lionsoul2014/ip2region https://t.me/cKure/13646

■■■■□ Security Flaws within ChatGPT Allowed Access to Accounts On Third-Party Websites and Sensitive Data. https://salt.security/blog/security-flaws-within-chatgpt-extensions-allowed-access-to-accounts-on-third-party-websites-and-sensitive-data https://t.me/cKure/13645

■□□□□ Google paid $10 million in bug bounty rewards last year. https://www.bleepingcomputer.com/news/google/google-paid-10-million-in-bug-bounty-rewards-last-year/ https://t.me/cKure/13644

■■■□□ Proof of Concept for Path Traversal in Apache Struts “CVE-2023-50164”. https://github.com/dwisiswant0/cve-2023-50164-poc https://t.me/cKure/13643

■■■■■ VCURMS: New Java RATs Unleashed in Sophisticated Phishing Scheme. https://securityonline.info/vcurms-new-java-rats-unleashed-in-sophisticated-phishing-scheme/ https://t.me/cKure/13642

■■■■■ CVE-2024-21378 — Remote Code Execution in Microsoft Outlook. https://www.netspi.com/blog/technical/red-team-operations/microsoft-outlook-remote-code-execution-cve-2024-21378 https://t.me/cKure/13640

Android Native Library Exploitation Challenge. https://devilinside.me/blogs/android-native-library-exploitation-challenge https://t.me/cKure/13639

¤ ARM Exploitation – Defeating DEP – executing mprotect() https://blog.3or.de/arm-exploitation-defeating-dep-executing-mprotect ¤ ARM Exploitation – Defeating DEP – execute system() https://blog.3or.de/arm-exploitation-defeating-dep-execute-system ¤ ARM Exploitation – Setup and Tools https://blog.3or.de/arm-exploitation-setup-and-tools ¤ ARM Exploitation: Return oriented Programming (Building ROP Chains) https://blog.3or.de/arm-exploitation-return-oriented-programming https://t.me/cKure/13637

■■■■■ ADCS + PetitPotam NTLM Relay: Obtaining krbtgt Hash with Domain Controller Machine Certificate. https://www.ired.team/offensive-security-experiments/active-directory-kerberos-abuse/adcs-+-petitpotam-ntlm-relay-obtaining-krbtgt-hash-with-domain-controller-machine-certificate https://t.me/cKure/13636

■■■□□ SysWhispers2 analysis. https://blog.krakz.fr/notes/syswhispers2/ https://t.me/cKure/13635