All posts in Uncategorized

■□□□□ Bug Bounty communication. https://secalert.net/COMMUNICATION_IN_BBP.html https://t.me/cKure/6339

■■□□□ Browser based malware campaign. https://www.microsoft.com/security/blog/2020/12/10/widespread-malware-campaign-seeks-to-silently-inject-ads-into-search-results-affects-multiple-browsers https://t.me/cKure/6338

■■■□□ Tactics, Techniques and Procedures (TTPs) Utilized by FireEye’s Red Team Tools. https://www-picussecurity-com.cdn.ampproject.org/c/s/www.picussecurity.com/resource/blog/techniques-tactics-procedures-utilized-by-fireeye-red-team-tools https://t.me/cKure/6337

■■□□□ SMTP plugin of wordpress allows admin password reset. https://www.zdnet.com/google-amp/article/zero-day-in-wordpress-smtp-plugin-abused-to-reset-admin-account-passwords/ https://t.me/cKure/6336

■□□□□ https://www.ehackingnews.com/2020/12/pavel-durovs-team-advised-ministry-of.html https://t.me/cKure/6335

■■■□□ Office 95 Excel 4 Macros. https://isc.sans.edu/diary/rss/26876 https://t.me/cKure/6334

■■□□□ Process hacker mod: https://github.com/processhacker/processhacker/pull/751 Source: https://mobile.twitter.com/jxy__s/status/1337678321086164992 https://t.me/cKure/6333

■■■■□ Proxify: Swiss Army Knife Proxy for rapid deployments. Supports multiple operations such as request/response dump, filtering and manipulation via DSL language, upstream HTTP/Socks5 proxy. Additionally a replay utility allows to import the dumped traffic (request/responses with correct domain name) into burp or any other proxy by simply setting the upstream proxy to proxify. https://github.com/projectdiscovery/proxify…

■□□□□ Point-of-sale terminal vendors Verifone and Ingenico have issued mitigations after researchers found the devices use default passwords. https://t.me/cKure/6331

■■■■■ Cracked hashes text file 575 MB. https://drive.google.com/file/d/1g-fMAVxGvAHoxOlABVgzp1qL8uBukQUK https://t.me/cKure/6329