All posts tagged cyber

■■■■□ WiFi-Pineapple-MK7_REST-Client – WiFi Hacking Workflow With WiFi Pineapple Mark VII API. https://www.kitploit.com/2023/09/wifi-pineapple-mk7rest-client-wifi.html https://t.me/cKure/12841

■□□□□ Burp Suite Sharpener: This extension should add a number of UI and functional features to Burp Suite to make working with it a bit easier. The latest version of this extension is only compatible with Burp Suite version 2023.10-22956 and above. https://github.com/irsdl/BurpSuiteSharpenerEx https://t.me/cKure/12840

■■■■□ Threat Actors Targeting Microsoft SQL Servers to Deploy FreeWorld Ransomware. https://thehackernews.com/2023/09/threat-actors-targeting-microsoft-sql.html https://t.me/cKure/12839

■■■■■ CVE-2023-29360: Logical LPE vulnerability. https://big5-sec.github.io/posts/CVE-2023-29360-analysis/ https://t.me/cKure/12838

■■■■□ OSINT Template Engine is a research-grade tool for OSINT Information gathering & Attack Surface Mapping which uses customizable templates to collect data from sources. It allows for new template creation and modification of existing ones which gives it a competitive advantage over other tools of the same category. https://github.com/3nock/OTE https://t.me/cKure/12837

■■■■■ Airstrike Attack – FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316). https://shenaniganslabs.io/2021/04/13/Airstrike.html https://t.me/cKure/12836

■■■□□ 2023 OWASP Top-10 Series: API6:2023 Unrestricted Access to Sensitive Business Flows. https://lab.wallarm.com/api62023-unrestricted-access-to-sensitive-business-flows/ https://t.me/cKure/12834

■■□□□ China’s Baidu Introduces ChatGPT Rival Ernie Bot. https://www.hackread.com/chinas-baidu-chatgpt-rival-ernie-bot/ https://t.me/cKure/12833

■■■■■ Zero-Day exploit code | noCVE-2023-34039: Proof-of-concept (PoC) exploit code has been made available for a recently disclosed and patched critical flaw impacting VMware Aria Operations for Networks (formerly vRealize Network Insight). https://thehackernews.com/2023/09/poc-exploit-released-for-critical.html https://t.me/cKure/12830

■■■□□ Exclusive! WhatsApp fixes bug without rewarding the researcher. The issue was considered, not a bug by Facebook (was not Meta when reported) and called the attack ‘theoretical’. Skype had the exact same bug registered under CVE-2019-0622. ● The researcher (Asim K) shared evidences including the video and comments from now Meta team and we…