All posts in Uncategorized

■■■■□ State sponsored Cyber-Crime by Israel as Israeli firm Bright Data named as enabler of Philippines government DDOS attacks on opposition groups. Bright denies all in this odd tale of a leaky VPN, creepy proxy networks, 8Chan, clouds hosting wonky workloads, and Swedish digital rights org Qurium. https://go.theregister.com/feed/www.theregister.com/2021/08/26/qurium_bright_data_philippines_ddos/ https://t.me/cKure/9072

■■■□□ Widespread credential phishing campaign abuses open redirector links. https://www.microsoft.com/security/blog/2021/08/26/widespread-credential-phishing-campaign-abuses-open-redirector-links/ https://t.me/cKure/9071

■■■□□ MSSQL for Pentester: Nmap https://www.hackingarticles.in/mssql-for-pentesternmap/ https://t.me/cKure/9069

■■■□□ MSSQL for Pentester: Nmap https://www.hackingarticles.in/mssql-for-pentesternmap/ https://t.me/cKure/9069

■■■□□ Undocumented authentication bypass issue in AEM Package Manager. https://labs.detectify.com/2021/06/28/aem-crx-bypass-0day-control-over-some-enterprise-aem-crx-package-manager/ https://t.me/cKure/9068

■■■□□ Interesting thread. https://twitter.com/josephfcox/status/1430943998319923201 https://t.me/cKure/9067

■■■□□ Vulnerability in Bumble dating app reveals any user’s exact location. https://robertheaton.com/bumble-vulnerability/ https://t.me/cKure/9066

■■■■■ Offensive API Hooking. https://ilankalendarov.github.io/posts/offensive-hooking/ https://t.me/cKure/9065

■■□□□ Interesting Thread. https://twitter.com/ptracesecurity/status/1430769918048415747 https://t.me/cKure/9064

■■■■■ Cross-Site WebSocket Hijacking (CSWSH). https://infosecwriteups.com/cross-site-websocket-hijacking-cswsh-ce2a6b0747fc https://t.me/cKure/9062