All posts in Uncategorized

■■■□□ GKE Auditor – Detect Google Kubernetes Engine Misconfigurations. https://www.darknet.org.uk/2021/01/gke-auditor-detect-google-kubernetes-engine-misconfigurations https://t.me/cKure/6569

■■■■□#DataLeak: SolarWinds hackers accessed some of the source-code of Microsoft. https://thehackernews.com/2020/12/microsoft-says-solarwinds-hackers.html https://t.me/cKure/6568

■■■■□ Bad regex used in Facebook Javascript SDK leads to account takeovers in third party websites that included it. https://ysamm.com/?p=510 https://t.me/cKure/6567

■■■■■ Offensive Lateral Movement in Windows. https://posts.specterops.io/offensive-lateral-movement-1744ae62b14f https://t.me/cKure/6566

■□□□□ Fines against banks for data breaches and noncompliance more than doubled in 2020. https://portswigger.net/daily-swig/fines-against-banks-for-data-breaches-and-noncompliance-more-than-doubled-in-2020 https://t.me/cKure/6565

■■□□□#DataLeak: Emotet campaign hits Lithuania’s National Public Health Center and several state institutions. https://securityaffairs.co/wordpress/112817/malware/emotet-campaign-hit-lithuania.html https://t.me/cKure/6563

● The website was taken down. The attackers created another domain though. Apparently the domain was posted by the attacker related account in our discussion group (@ckureg). The group is followed by various blue teams and threat intel platforms that can directly take action against such domains. https://t.me/cKure/6562

■■■■■ Responder now supports SMBv2, shows if smb1 is disabled or not, which Os/Build version, if RDP is open, domain joined, last reboot, etc. And.. you get all that information in less than 5 seconds per class C. https://github.com/lgandx/Responder https://t.me/cKure/6560

■■■■□ #OSINT: Investigate Google Accounts with emails. github.com/mxrch/GHunt https://t.me/cKure/6559

■■□□□ Apple loses lawsuit against cyber security startup Corellium. https://www.hackread.com/apple-loses-lawsuit-cyber-security-startup-corellium/ https://t.me/cKure/6558