All posts tagged cyber

■■■□□ Google Warns How Hackers Could Abuse Calendar Service as a Covert C2 Channel. https://thehackernews.com/2023/11/google-warns-of-hackers-absing-calendar.html https://t.me/cKure/13196

GCR – Google Calendar RAT Google Calendar RAT is a PoC of Command&Control (C2) over Google Calendar Events, This tool has been developed for those circumstances where it is difficult to create an entire red teaming infrastructure. To use GRC, only a Gmail account is required. The script creates a ‘Covert Channel’ by exploiting the…

■■□□□ LdrLibraryEx: A small x64 library to load dll’s into memory. https://github.com/Cracked5pider/LdrLibraryEx https://t.me/cKure/13193

■■■□□ CVE-2022-0847 eBPF: An eBPF program to detect and defense attacks on CVE-2022-0847 (DirtyPipe). https://github.com/h4ckm310n/CVE-2022-0847-eBPF https://t.me/cKure/13192

■■□□□ PrivFu: Kernel mode WinDbg extension and PoCs for token privilege investigation. https://github.com/daem0nc0re/PrivFu https://t.me/cKure/13191

■■■■■ Octopii: A Personally Identifiable Information (PII) scanner that uses Optical Character Recognition (OCR), regular expression lists and Natural Language Processing (NLP) to search public-facing locations for Government ID, addresses, emails etc in images, PDFs and documents. https://github.com/redhuntlabs/Octopii https://t.me/cKure/13189

■■■■■ DFIR Toolkit v0.9 releases: CLI tools for forensic investigation of Windows artifacts. https://securityonline.info/dfir-toolkit-cli-tools-for-forensic-investigation-of-windows-artifacts/ https://t.me/cKure/13188

■■■■□ webcopilot: enumerate subdomains of the target and detect vulnerabilities. https://github.com/h4r5h1t/webcopilot https://securityonline.info/webcopilot-enumerate-subdomains-of-the-target-and-detect-vulnerabilities/#google_vignette https://t.me/cKure/13187

■■■■■ iObfuscate: Unraveling iOS Obfuscation Techniques During this talk, I examine multiple examples of #Reverse Engineering #iOS obfuscation techniques. Obfuscation strives to hide the underlying functionality of applications. This is particularly important in iOS applications that include a plethora of additional symbol data susceptible to reversing. I also release my new repository iOS Reverse Engineering…

■■■■□ TEx – Telegram Monitor. https://github.com/guibacellar/TEx https://www.kitploit.com/2023/11/tex-telegram-monitor.html https://t.me/cKure/13185