All posts tagged cyber

■■■■□ RCE on a backend IIS server via file upload with an atypical file extension. More community curated payloads can be found at https://t.co/OyVhkHC5Iy https://twitter.com/ptswarm/status/1435618157956370432 https://t.me/cKure/9243

■■■□□ Interesting thread! https://twitter.com/blackorbird/status/1435614886785024001 https://t.me/cKure/9242

■■□□□ Data-Leak from UAE as actor shares PII / text records of residents of the nation state. https://t.me/cKure/9241

■■■■■ Interesting thread! How to use Hackvertor tags: Set a variable my value By default they are local. You can get the value like this: The real power is being able to nest tags like this: Twitter | Gareth Hayes https://t.me/cKure/9240

■■■□□ Microsoft on Tuesday warned of an actively exploited zero-day flaw impacting Internet Explorer that’s being used to hijack vulnerable Windows systems by leveraging weaponized Office documents. Tracked as CVE-2021-40444 (CVSS score: 8.8), the remote code execution flaw is rooted in MSHTML (aka Trident), a proprietary browser engine for the now-discontinued Internet Explorer and which…

■□□□□ Pro-Russian Disinformation Systematically Spread Using Western Media Channels. https://www.infosecurity-magazine.com/news/russian-disinformation-western/ https://t.me/cKure/9238

■■■■■ Khepri is a Cross-platform agent, the architecture and usage like Cobalt Strike but free and open-source. https://github.com/geemion/Khepri https://t.me/cKure/9237

■□□□□ BladeHawk group: Android espionage against Kurdish ethnic group. https://www.welivesecurity.com/2021/09/07/bladehawk-android-espionage-kurdish/ https://t.me/cKure/9236

■■□□□ Interesting thread! If you name a folder “anything.{D2035EDF-75CB-4EF1-95A7-410D9EE17170}”, Explorer will crash when you try to enter that folder. https://mobile.twitter.com/BillDemirkapi/status/1435310253118304267 https://t.me/cKure/9235

■□□□□ Data-Leak: Guntrader breach perp: I don’t think it’s a crime to dump 111k people’s details online in Google Earth format. https://www.theregister.com/2021/09/07/guntrader_hack_perp_interview/ https://t.me/cKure/9234