All posts in Uncategorized

■■■□□ Gpoddity: Exploiting Active Directory Gpos Through Ntlm Relaying, And More. https://www.synacktiv.com/publications/gpoddity-exploiting-active-directory-gpos-through-ntlm-relaying-and-more https://t.me/cKure/12846

■■■■□ Cyber-War: The Computer Emergency Response Team of Ukraine (CERT-UA) on Tuesday said it thwarted a cyber attack against an unnamed critical energy infrastructure facility in the country by Russia’s APT 28 (aka Fancy Bear ). https://thehackernews.com/2023/09/ukraines-cert-thwarts-apt28s.html https://t.me/cKure/12845

■□□□□ Dubai: 23,600 free Wi-Fi hotspots in emirate, says authority as it announces new digital strategy. ● Cyber-Crime is bound to expand. However, controls and active monitoring may relieve attacks from skiddies. https://www.khaleejtimes.com/uae/dubai-23600-free-wi-fi-hotspots-in-emirate-says-authority-as-it-announces-new-digital-strategy https://t.me/cKure/12844

■■■□□ Hackers steal 10 years of patient forms from TPG Asia-backed TissuPath. Global private equity giant TPG’s Australian pathology business, TissuPath, has suffered a data breach with a decade’s worth of patient request forms being released on the dark web. https://www.afr.com/companies/healthcare-and-fitness/tpg-asia-backed-tissupath-tangled-in-data-breach-20230906-p5e2fl https://t.me/cKure/12843

■■■□□ German financial agency site disrupted by DDoS attack since Friday. https://twitter.com/BaFin_Bund/status/1698594562724290767 https://t.me/cKure/12842

■■■■□ WiFi-Pineapple-MK7_REST-Client – WiFi Hacking Workflow With WiFi Pineapple Mark VII API. https://www.kitploit.com/2023/09/wifi-pineapple-mk7rest-client-wifi.html https://t.me/cKure/12841

■□□□□ Burp Suite Sharpener: This extension should add a number of UI and functional features to Burp Suite to make working with it a bit easier. The latest version of this extension is only compatible with Burp Suite version 2023.10-22956 and above. https://github.com/irsdl/BurpSuiteSharpenerEx https://t.me/cKure/12840

■■■■□ Threat Actors Targeting Microsoft SQL Servers to Deploy FreeWorld Ransomware. https://thehackernews.com/2023/09/threat-actors-targeting-microsoft-sql.html https://t.me/cKure/12839

■■■■■ CVE-2023-29360: Logical LPE vulnerability. https://big5-sec.github.io/posts/CVE-2023-29360-analysis/ https://t.me/cKure/12838

■■■■□ OSINT Template Engine is a research-grade tool for OSINT Information gathering & Attack Surface Mapping which uses customizable templates to collect data from sources. It allows for new template creation and modification of existing ones which gives it a competitive advantage over other tools of the same category. https://github.com/3nock/OTE https://t.me/cKure/12837