All posts tagged cyber

■■■■□ Violent Fungus C2: command and control (C2) software suite. https://github.com/sogonsec/ViolentFungus-C2 https://t.me/cKure/9604

■■■■□ Keep your shellcode (mostly) encrypted in memory using single step encryption/decryption. https://gist.github.com/jackullrich/ce3b5263e05c88548b175f4f21909384 https://twitter.com/winternl_t/status/1444043800557543426 https://t.me/cKure/9603

■■■■□ Italy : Telecom Italia Red Team Research (RTR) laboratory led by Massimiliano Brolli reported three new flaws in Oracle GlassFish and Nokia NetAct. ︎CVE-2021-26597 ︎CVE-2021-26596 ︎CVE-2021-3314 https://securityaffairs.co/wordpress/122832/security/oracle-glassfish-nokia-netact-flaws.html https://t.me/cKure/9602

■■■□□ Remote Command Execution in Visual Studio Code Remote Development Extension. https://www.shielder.it/advisories/remote-command-execution-in-visual-studio-code-remote-development-extension/ https://t.me/cKure/9601

■■■□□ Tool: pwncat, a post-exploitation platform for Linux targets. It started out as a wrapper around basic bind and reverse shells and has grown from there. It streamlines common red team operations while staging code from your attacker machine, not the target. https://github.com/calebstewart/pwncat https://t.me/cKure/9599

■■■□□ PoC for CVE-2021-3129 (Laravel). https://github.com/knqyf263/CVE-2021-3129 https://t.me/cKure/9598

■■■□□ China : Chinese speaking Hackers Used a New Rootkit to Spy on Targeted Windows 10 Users. https://thehackernews.com/2021/10/chinese-hackers-used-new-rootkit-to-spy.html https://t.me/cKure/9597

■■■□□ GriftHorse Android malware hit 10 million devices in 70 countries. https://www.hackread.com/grifthorse-android-malware-70-countries/ https://t.me/cKure/9596

■□□□□ Privacy: IKEA has removed hidden security cameras from its warehouse in Peterborough, England, after an employee spotted one in the ceiling void while using the toilet. https://t.me/cKure/9595

■■□□□ Apple Pay Can be Abused to Make Contactless Payments From Locked iPhones. https://thehackernews.com/2021/10/apple-pay-can-be-abused-to-make.html https://t.me/cKure/9594