All posts tagged cyber

■■□□□ Juumla, a python tool designed to identify Joomla version, scan for vulnerabilities and search for config files. https://github.com/knightm4re/juumla https://t.me/cKure/9185

■■■□□ Microsoft Says Chinese Hackers Were Behind SolarWinds Serv-U SSH Zero-Day Attack. https://thehackernews.com/2021/09/microsoft-says-chinese-hackers-were.html https://t.me/cKure/9184

■■■□□ Norwegian student tracks Bluetooth headset wearers by wardriving around Oslo on a bicycle. https://go.theregister.com/feed/www.theregister.com/2021/09/04/bluetooth_headphones_tracking_oslo/ https://t.me/cKure/9183

■■■■■ Zuthaka – An Open Source Application Designed To Assist Red-Teaming Efforts, By Simplifying The Task Of Managing Different APTs And Other Post-Exploitation Tools https://github.com/pucarasec/zuthaka https://t.me/cKure/9182

■■■□□ FIN7 cybercrime gang used weaponized Windows 11 Alpha-themed Word documents to drop malicious payloads, including a JavaScript backdoor. https://securityaffairs.co/wordpress/121839/cyber-crime/fin7-cybercrime-gang.html https://t.me/cKure/9181

■■□□□ Root AVD and Install Magisk. https://avicoder.me/2021/09/02/Root-AVD-and-install-Magisk/ https://t.me/cKure/9180

■■■□□ JAILBREAK DETECTION BYPASS TOOL. https://www.trustedsec.com/blog/introducing-ihide-a-new-jailbreak-detection-bypass-tool/ https://t.me/cKure/9179

■■■■■ Capture Credentials with our new SMB Server. Metasploit now captures NTLM hashes from any recent Windows release using SMBv2 and SMBv3, even with encrypted SMB traffic. Plus, twitter.com/chompie1337’s eBPF exploit lands, along with modules for Git LFS and Geutebruck IP cameras. CVE-2021-21300 https://www.rapid7.com/blog/post/2021/09/03/metasploit-wrap-up-128/ https://t.me/cKure/9177

■■■■■ Data-Leak: Babuk ransomware’s full source code leaked on hacker forum. https://www.bleepingcomputer.com/news/security/babuk-ransomwares-full-source-code-leaked-on-hacker-forum/ https://t.me/cKure/9175

■□□□□ As per United States CyberCom statement: Mass exploitation of Atlassian Confluence CVE-2021-26084 is ongoing and expected to accelerate. Please patch immediately if you haven’t already— this cannot wait until after the weekend. https://twitter.com/CNMF_CyberAlert/status/1433787671785185283 https://t.me/cKure/9173