All posts tagged cyber

■■■□□ A generic UEFI bootkit used to achieve initial usermode execution. It works with modifications. https://github.com/realoriginal/bootlicker https://t.me/cKure/12149

■■■□□ Hardware Debugging for Reverse Engineers Part 1: SWD, OpenOCD and Xbox One Controllers. https://wrongbaud.github.io/posts/stm-xbox-jtag/ https://t.me/cKure/12148

■□□□□ A POST-XSS exploitation tool. https://github.com/t3l3machus/toxssin https://t.me/cKure/12147

■■■□□ Tool: CVE-Vulnerability-Information-Downloader. Downloads Information from NIST (CVSS), first.org (EPSS), and CISA (Exploited Vulnerabilities) and combines them into one list. Reports from vulnerability scanners like OpenVAS can be enriched with this information to prioritize remediation. The repository also contains a PowerBI template to show how such a dashboard can be created. https://github.com/trinitor/CVE-Vulnerability-Information-Downloader https://t.me/cKure/12146

■■□□□ The DoNot APT (aka APT-C-35). https://labs.k7computing.com/index.php/the-donot-apt/ https://t.me/cKure/12145

■■■■□ Networking Pivoting via SSH – Scanning with Nessus Professional behind a Firewall or NAT. https://www.adamcouch.co.uk/networking-pivoting-via-ssh-scanning-with-nessus-behind-a-firewall-or-nat/ https://t.me/cKure/12144

■■■□□ Cyber-Attack, United States: Dish Network goes offline after likely cyberattack, employees cut off. https://www.bleepingcomputer.com/news/security/dish-network-goes-offline-after-likely-cyberattack-employees-cut-off/ https://t.me/cKure/12143

■■■□□ Hacking Apple: Two Successful Exploits and Positive Thoughts on their Bug Bounty Program. https://blog.infiltrateops.io/hacking-apple-two-successful-exploits-and-positive-thoughts-on-their-bug-bounty-program-963efe7518f6 https://t.me/cKure/12142

■■■■□ How I Broke Into a Bank Account With an AI-Generated Voice. https://www.vice.com/en/article/dy7axa/how-i-broke-into-a-bank-account-with-an-ai-generated-voice https://t.me/cKure/12141

■■□□□ Russian teleco ‘Convex’ had 150k unique email breached earlier this month by “Anonymous”, alleging illegal government surveillance. Data included IP and physical addresses, phone numbers and names. https://www.hackread.com/anonymous-data-leak-russia-isp-convex/ https://t.me/cKure/12140