All posts in Uncategorized

■■■□□ Ovrdrive USB is an open-source, privacy-oriented USB flash drive that can self-destruct (Crowdfunding). https://www.cnx-software.com/2024/02/10/ovrdrive-usb-open-source-privacy-oriented-usb-flash-drive-that-can-self-destruct/ https://t.me/cKure/13537

HTTP Downgrade attacks with SmuggleFuzz. https://moopinger.github.io/blog/smugglefuzz/fuzzing/smuggling/2024/01/31/SmuggleFuzz.html https://t.me/cKure/13536

■□□□□ Tech Hacker group’s (lockbit) site taken over by law enforcement. https://www.bbc.com/news/technology-68344987 https://t.me/cKure/13535

■□□□□ The Lockbit website gets taken down. https://t.me/cKure/13533 https://t.me/cKure/13534

■■■■□ Microsoft Outlook flaw opens door to 1-click remote code execution attacks. CVE-2024-21413: https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-21413 https://www.csoonline.com/article/1308164/microsoft-outlook-flaw-opens-door-to-1-click-remote-code-execution-attacks.html https://t.me/cKure/13532

■■■■□ Data-Leak amid ongoing cyber-war between United States and allies with Russia as hackers released technical documentation for the products of the Russian High-Precision Systems and Technologies scientific production association. https://mil.in.ua/en/news/hackers-released-technical-documentation-for-the-products-of-the-russian-high-precision-systems-and-technologies-scientific-production-association/ https://t.me/cKure/13531

■□□□□ Data-Leak at Etisalat UAE ● The breach is likely from a contractor and does not possess organizational threat as of preliminary analysis by our researcher. https://izoologic.com/region/middle-east/uaes-etisalat-faces-security-threats-from-lockbit-ransomware/ https://t.me/cKure/13530

BurpSuite’s chromium browser adds a header as it sends the request across to the server. Sec-Ua* ● I found it when one website blocked my requests for a normal login (with a 302 redirect to WAF’s soft error). This is over a half year old story. Thought of sharing. https://t.me/cKure/13527

A tool that allegedly bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell. https://github.com/Sh3lldon/FullBypass https://t.me/cKure/13524

■■■□□ Use Postman with the Microsoft Graph API. https://learn.microsoft.com/en-us/graph/use-postman https://t.me/cKure/13522