All posts in Uncategorized

Exploring Hell’s Gate. Hell’s Gate makes it possible to execute direct syscalls based on dynamically retrieving the required SSNs via a combination of walking the Process Environment Block (PEB), parsing the Export Address Table (EAT) from ntdll.dll, opcode comparison from the syscall stub of the native functions and extracting the SSNs. https://redops.at/en/blog/exploring-hells-gate https://t.me/cKure/13383

■■■■□ Teenage Grand Theft Auto 6 hacker given an indefinite sentence in a secure hospital due to his ‘intent to return to cybercrime as soon as possible’. https://www.pcgamer.com/teenage-grand-theft-auto-6-hacker-given-an-indefinite-sentence-in-a-secure-hospital-due-to-his-intent-to-return-to-cybercrime-as-soon-as-possible/ https://t.me/cKure/13381

■■■■□ Hackers Prompt Emergency Google Zero-Day Attack Patch For Chrome Users. https://www.forbes.com/sites/daveywinder/2023/12/21/hackers-prompt-emergency-google-0-day-attack-patch-for-chrome-users/ https://t.me/cKure/13380

■■■□□ Chameleon Android Banking Trojan Variant Bypasses Biometric Authentication. Cybersecurity researchers have discovered an updated version of an Android banking malware called Chameleon that has expanded its targeting to include users in the U.K. and Italy. https://thehackernews.com/2023/12/new-chameleon-android-banking-trojan.html https://t.me/cKure/13379

■■□□□ Troll-A: A command line tool for extracting secrets such as passwords, API keys, and tokens from WARC (Web ARChive) files. Troll-A is an easy-to-use, comprehensive, and fast solution for finding secrets in the web archive. https://github.com/crissyfield/troll-a https://t.me/cKure/13378

■■■■■□Reflections on certificates, Part 1. https://wp.me/pblyZ3-is https://t.me/cKure/13377

Inside The ‘Magic Radio’ Protecting Russian Drones From Jamming. https://t.me/StavBPLA/195 https://www.forbes.com/sites/davidhambling/2023/12/20/inside-the-magic-radio-protecting-russian-drones-from-jamming/ https://t.me/cKure/13375

■■■■■ Subdominator: Open-source tool for detecting subdomain takeovers. https://github.com/Stratus-Security/Subdominator https://www.helpnetsecurity.com/2023/12/20/subdominator-open-source-tool-detecting-subdomain-takeovers/ https://t.me/cKure/13374

■■■□□ British Library website offline after ransomware hack. https://boingboing.net/2023/12/19/british-library-website-offline-after-ransomware-hack.html https://t.me/cKure/13373

■■■■□ SSH https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/2/ https://t.me/cKure/13372