All posts tagged cyber

■■□□□ McAfee Enterprise ATR Uncovers Vulnerabilities in Globally Used B. Braun Infusion Pump. https://www.mcafee.com/blogs/enterprise/mcafee-enterprise-atr/mcafee-enterprise-atr-uncovers-vulnerabilities-in-globally-used-b-braun-infusion-pump/ https://t.me/cKure/9102

■■■□□ Beaconator: generate staged or stageless shellcode and packing the generated shellcode https://securityonline.info/beaconator-generate-staged-or-stageless-shellcode/ https://t.me/cKure/9101

■■■□□ Data-Leak / China as Chinese website leaked user database, including password, email and mobile phone address. Fields contain: username  password  email    city  qq  address  realname  mobile  reg_ip  reg_time  money  alipay  name  The data is being shared publicly. https://t.me/cKure/9100

■■■■□ Data-Leak / UAE as actor shares 200K records of United Arab Emirates’ residents that were leaked via government related entity. The data is till 2020. The leaked records are in the following format: CONTRACT_NO,REN_NO,MEMBER_NO,MEMBER_TYPE,MEMBER_NAME,BIRTH_DT,EFF_DT,TERM_DT,PASSPORT_NO,UID_NO,EMIRATES_ID,EMAIL,MOBILE,NATIONALITY_CODE,CITY_CODE,CLIENT_NAME,CSO_NAME https://t.me/cKure/9099

■■■□□ Generic impersonation and privilege escalation with Golang. Like GenericPotato both named pipes and HTTP are supported. https://github.com/CMatri/Gotato https://t.me/cKure/9098

■□□□□ 32-bit Stack-based Buffer Overflow. https://www.ired.team/offensive-security/code-injection-process-injection/binary-exploitation/stack-based-buffer-overflow https://t.me/cKure/9097

■■■■■ “XSS in Apple ID Server idmsa. apple .com” Tl;Dr: XSS on Apple ID server allowing an attacker to pop out an Apple login page that autofills apple credentials and 2FA. $10,000 Reward. https://zemnmez.medium.com/how-to-hack-apple-id-f3cc9b483a41 https://t.me/cKure/9096

■■■■□ SSD Advisory – Samsung S10+/S9 kernel 4.14 (Android 10) Kernel Function Address (.text) and Heap Address Information Leak. https://ssd-disclosure.com/ssd-advisory-samsung-s10-s9-kernel-4-14-android-10-kernel-function-address-text-and-heap-address-information-leak/ https://t.me/cKure/9095

■■■■■ A list of CTFs and websites to test your skills. https://twitter.com/d4rckh/status/1431519762794827777 https://t.me/cKure/9094

■■■■■ Pantagrule – Large Hashcat Rulesets Generated From Real-World Compromised Passwords. https://github.com/rarecoil/pantagrule https://t.me/cKure/9092