■■■■■ Zero-Day: A critical remote code execution (RCE) flaw discovered impacting multiple services related to Microsoft Azure could be exploited by a malicious actor to completely take control of a targeted application. The vulnerability is achieved through CSRF (cross-site request forgery) on the ubiquitous SCM service Kudu. https://thehackernews.com/2023/01/new-microsoft-azure-vulnerability.html https://t.me/cKure/12076
All posts tagged cyber
January 20, 2023 at 12:15PM
■■■■■ Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. https://github.com/ustayready/golddigger https://t.me/cKure/12075
January 20, 2023 at 11:11AM
Exploiting null-dereferences in the Linux kernel. https://googleprojectzero.blogspot.com/2023/01/exploiting-null-dereferences-in-linux.html https://t.me/cKure/12074
January 20, 2023 at 11:11AM
■■■■□ A tiny tool to identify and remediate common misconfigurations in Active Directory Certificate Services. https://github.com/TrimarcJake/Locksmith https://t.me/cKure/12073
January 20, 2023 at 11:07AM
■■■■□ MemProcFS is an easy and convenient way of viewing physical memory as files in a virtual file system. https://github.com/ufrisk/MemProcFS https://t.me/cKure/12072
January 20, 2023 at 10:23AM
■■■■□ PoC for cve-2022-47966 affecting ManageEngine Products. https://github.com/shameem-testing/PoC-for-ME-SAML-Vulnerability https://twitter.com/_M_Shahnawaz/status/1616039880894648320 https://t.me/cKure/12071
January 19, 2023 at 01:06PM
■■■■■ EntryBleed: Breaking KASLR under KPTI with Prefetch. (CVE-2022-4543)https://www.willsroot.io/2022/12/entrybleed.html https://t.me/cKure/12070
January 18, 2023 at 10:46AM
■■■□□ Over 4,000 Sophos Firewall devices vulnerable to RCE attacks viz. CVE-2022-3236. https://nvd.nist.gov/vuln/detail/CVE-2022-3236 https://www.bleepingcomputer.com/news/security/over-4-000-sophos-firewall-devices-vulnerable-to-rce-attacks/ https://t.me/cKure/12069
January 17, 2023 at 11:29PM
■■■■■ Reverse Engineering Yaesu FT-70D Firmware Encryption. 1https://landaire.net/reversing-yaesu-firmware-encryption/ https://t.me/cKure/12068
January 17, 2023 at 08:43AM
● Site ckure.org has been revamped with content from older website and can be used as an alternate to this telegram channel to share news links, if the receiver has no telegram. Additionally, all articles re-posted on the site can be searched (case insensitive) for various terms. Let us know over email or whatsapp if…