All posts in Uncategorized

■■■□□ Microsoft OneNote (Version 2305 Build 16.0.16501.20074) 64-bit – Spoofing. https://www.exploit-db.com/exploits/51538 https://t.me/cKure/12555

■■■□□ Interesting thread | Android What if app developers forget to remove internal testing functionality before release? 🤔 How about using hardcoded strings for access control? 😬 Let's take a look at two cases that could be exploited by an attacker 🧵👇 pic.twitter.com/XZVagicKR3 — INTIGRITI (@intigriti) June 22, 2023 https://t.me/cKure/12554

■■□□□ Interesting thread | RAW DNS If you prefer viewing the raw DNS response from your DNS enumeration tools you can use the dnsx -raw option! 👇 Install now 👉 https://t.co/1319t7GKtL#hackwithAutomation #DNSenumeration #recon pic.twitter.com/WVMfJkO2yS — ProjectDiscovery.io (@pdiscoveryio) June 22, 2023 https://t.me/cKure/12553

■■■□□ Cyber-Crime: cl0p ransomware group claims to have ransomed Sony and PWC. cl0p claims to have exfiltrated 120GB of data and archives from PWC. Source: vx-underground | twitter https://t.me/cKure/12552

■■■■□ Camaro Dragon Hackers Strike with USB-Driven Self-Propagating Malware. https://thehackernews.com/2023/06/camaro-dragon-hackers-strike-with-usb.html https://t.me/cKure/12551

■■■■□ nOAuth: How Microsoft OAuth Misconfiguration Can Lead to Full Account Takeover https://www.descope.com/blog/post/noauth https://t.me/cKure/12550

■■□□□ DuckDuckGo browser for Windows available for everyone as public beta. https://t.me/cKure/12549

■■■■■ Apple patch fixes zero-day kernel hole reported by Kaspersky – update now!. https://nakedsecurity.sophos.com/2023/06/22/apple-patch-fixes-zero-day-kernel-hole-reported-by-kaspersky-update-now/ https://t.me/cKure/12547

■■■■□ Weaponised XSS Payloads. https://github.com/hakluke/weaponised-XSS-payloads https://t.me/cKure/12546

■■■■□ Analyzing the TriangleDB implant used in Operation Triangulation. https://securityaffairs.com/147717/malware/triangledb-implant-used-operation-triangulation.html https://t.me/cKure/12545