All posts tagged cyber

■■■■■ Weaponized Browser-in-the-Middle (BitM) for Penetration Testers. https://github.com/fkasler/cuddlephish https://t.me/cKure/12704

■■■■□ Mantra:「」A tool used to hunt down API key leaks in JS files and pages. https://github.com/MrEmpy/Mantra https://t.me/cKure/12703

Damn Exploitable Android App – Abusing Info Leaks to bypass ASLR. https://www.mobilehackinglab.com/blog/damn-exploitable-android-app-abusing-info-leaks-to-bypass-aslr https://t.me/cKure/12702

■■□□□ United States: Hacking tool Flipper Zero tracked by intelligence agencies, which fear white nationalists may deploy it against the power grid. https://www.dailydot.com/debug/flipper-zero-racially-motivated-extremists-fusion-center-alert-nypd/ https://t.me/cKure/12701

Another approach of Threadless injection discovered by x.com/_EthicalChaos_ in c that loads a module into the target process and stomps it, and reverting back memory protections and original memory state. ● This is untested code and could have unintended consequences. https://github.com/TheD1rkMtr/D1rkInject https://t.me/cKure/12700

■■■□□ Tool: Enhanced version of secretsdump.py from Impacket. Adds multi-threading and accepts an input file with a list of target hosts for simultaneous secrets extraction. https://github.com/fin3ss3g0d/secretsdump.py https://t.me/cKure/12698

DPRK based KIMSUKY caught via typo viz. User-Agent attribution. https://asec.ahnlab.com/ko/55646/ https://t.me/cKure/12696

■■■■□ LFI-FINDER is an open-source tool available on GitHub that focuses on detecting Local File Inclusion (LFI) vulnerabilities. https://github.com/capture0x/LFI-FINDER/ https://t.me/cKure/12695

■■■■■ Cyber-Terrorism from Indian state: APT Bahamut Targets Individuals with Android Malware Using Spear Messaging https://www.cyfirma.com/outofband/apt-bahamut-targets-individuals-with-android-malware-using-spear-messaging/ https://t.me/cKure/12694

■■■■□ Hackers steal Signal, WhatsApp user data with fake Android chat app. https://www.bleepingcomputer.com/news/security/hackers-steal-signal-whatsapp-user-data-with-fake-android-chat-app/ https://t.me/cKure/12693