All posts in Uncategorized

■■■■■ Indetectables Toolkit : The essential toolkit for reversing, malware analysis and cracking. https://github.com/indetectables-net/toolkit https://t.me/cKure/13885

■■■■□ Stardust: A modern 64-bit position independent implant template. https://github.com/Cracked5pider/Stardust https://t.me/cKure/13884

■■■■■ CelestialSpark: A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode. https://github.com/Karkas66/CelestialSpark https://t.me/cKure/13883

■■■■□ Exploiting the libwebp Vulnerability, Part 2: Diving into Chrome Blink. https://www.darknavy.org/blog/exploiting_the_libwebp_vulnerability_part_2/ https://t.me/cKure/13882

■■■■□ Exploiting the libwebp Vulnerability, Part 1: Playing with Huffman Code. https://www.darknavy.org/blog/exploiting_the_libwebp_vulnerability_part_1/ https://t.me/cKure/13881

■■■■□ LSA Whisperer – Getting credentials from LSASS without accessing its memory. https://posts.specterops.io/lsa-whisperer-20874277ea3b https://t.me/cKure/13880

■■■■□ ZIP embedding attack on Google Chrome extensions. https://readme.synack.com/exploits-explained-zip-embedding-attack-on-google-chrome-extensions https://t.me/cKure/13879

■■■□□ Hackers can read your encrypted AI-assistant chats. For ‘OpenAI’, chats are readable for to flawed encryption and passive sniffing of the network traffic should be enough to compromise the confidentiality. https://www.linkedin.com/pulse/hackers-can-read-your-encrypted-ai-assistant-chats-narendra-sahoo-72daf https://t.me/cKure/13878

■■■□□ Remediation for Zero-Day, CVE-2024-3149. Update the following softwares to the mentioned version or above and change existing (NIST P521) private keys ● WinSCP 6.3.3 ● FileZilla 3.67.0 ● PuTTY 0.80 NIST P521 private keys are exposed due to biased signature generation. Details: https://www.openwall.com/lists/oss-security/2024/04/15/6 https://t.me/cKure/13876

■■■■□ Update to WinSCP 6.3.3 as older versions are vulnerable to NIST P521 private keys 🔑 biased signature generation. https://winscp.net/tracker/2285 as part of Zero-Day CVE-2024-31497. https://winscp.net/eng/docs/history#6.3.3 https://t.me/cKure/13875