All posts in Uncategorized

■■□□□ Google Chrome to shield encryption keys from promised quantum computers. https://www.theregister.com/2023/08/12/google_chrome_kem/ https://t.me/cKure/12745

■■■■□ Sandbox for automated Linux malware analysis. https://github.com/danieluhricek/LiSa https://t.me/cKure/12744

■■■■■ Open-source tool that allows users to manipulate the Android runtime. It works by hooking two specified Android methods “targetArtMethod” and “newArtMethod”. Tested on Android13. https://github.com/LaurieWired/ARTful https://t.me/cKure/12742

■■■■□ How an Open Redirection Leads to an Account Takeover? https://infosecwriteups.com/how-an-open-redirection-leads-to-an-account-takeover-73ea883055d1 https://t.me/cKure/12741

■■■□□ https://media.defcon.org/DEF%20CON%2031/DEF%20CON%2031%20presentations/ https://t.me/cKure/12740

■□□□□ CERT-In is warning Google Chrome users of high-severity vulnerabilities in specific versions of the web browser that can pose risks of phishing attacks, data breaches, and malware infections. https://www.indiatoday.in/technology/news/story/government-issues-high-risk-warning-for-google-chrome-users-asks-users-to-update-browser-immediately-2419147-2023-08-10 https://t.me/cKure/12739

■■■■□ The Chinese threat actor known as APT31 (aka Bronze Vinewood, Judgement Panda, or Violet Typhoon) has been linked to a set of advanced backdoors that are capable of exfiltrating harvested sensitive information to Dropbox. https://thehackernews.com/2023/08/researchers-shed-light-on-apt31s.html https://t.me/cKure/12738

■■■■■ NixImports – A .NET Malware Loader, Using API-Hashing To Evade Static Analysis. https://github.com/dr4k0nia/NixImports https://t.me/cKure/12736

Sites scramble to block ChatGPT web crawler after instructions emerge. User agent token: GPTBot Full user-agent string: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.0; +https://openai.com/gptbot) https://arstechnica.com/information-technology/2023/08/openai-details-how-to-keep-chatgpt-from-gobbling-up-website-data/ https://t.me/cKure/12734

■■■■□ A tool for enumerating potential hosts that are open to GSSAPI abuse over SSH within Active Directory networks. https://github.com/CCob/gssapi-abuse https://t.me/cKure/12733