All posts in Uncategorized

■■■■■ #Privacy in #Kazakhstan : Kazakhstan government is intercepting HTTPS traffic in its capital. This marks the third time since 2015 that the Kazakh government is mandating the installation of a root certificate on its citizens’ devices. https://www.zdnet.com/article/kazakhstan-government-is-intercepting-https-traffic-in-its-capital https://t.me/cKure/6261

■□□□□ Karkinos: A light-weight ‘Swiss Army Knife’ for penetration testing and hacking CTF’s. Currently, Karkinos offers the following: ︎Encoding/Decoding characters ︎Encrypting/Decrypting text or files ︎Reverse shell handling ︎Cracking and generating hashes https://github.com/helich0pper/Karkinos https://t.me/cKure/6260

■■□□□ URLBrute: Directory and subdomain scanner (in GoLang). https://github.com/ReddyyZ/urlbrute https://t.me/cKure/6259

■■■□□ #Italy : Police arrest two people who stole 10 GB secret data from the defence company Leonardo S.P.A. https://www.commissariatodips.it/notizie/articolo/comunicato-stampa-3/index.html https://t.me/cKure/6258

■■■□□ #DataLeak at Shirbit, #Israel . The Black Shadow group has released an ultimatum to release entire dump to anyone who is willing to pay. https://t.me/cKure/6257

■■■□□ ADSearch: Tool to query LDAP. https://github.com/tomcarver16/ADSearch https://t.me/cKure/6255

■■■□□ #DataLeak: Multinational human resource consulting firm Randstad NV announced that they were a victim of the Egregor ransomware. Screenshot taken from the darknet portal of attackers. https://tools.euroland.com/tools/pressreleases/GetPressRelease/?ID=3845464&lang=en-GB&companycode=NL-RAND&pid=2 https://t.me/cKure/6253

■□□□□ Cross Site Scripting (XSS) Reflected in one of the subdomains of “General Motors”. https://securitytrooper.com/en/cross-site-scripting-xss-reflected-in-one-of-the-subdomains-of-general-motorsbugbounty https://t.me/cKure/6252

■■■■■ https://github.com/0x5a455553/MARIJUANA https://t.me/cKure/6251

■■■■■ https://github.com/0x5a455553/MARIJUANA https://t.me/cKure/6251