All posts tagged hack

■■■■□ CVE-2023-46747 RCE: F5 BIG-IP unauthenticated remote code execution (RCE) and authentication bypass vulnerability. https://github.com/W01fh4cker/CVE-2023-46747-RCE https://t.me/cKure/13170

■■■■□ Bluetooth LE Spam: This project focuses on utilizing the built-in Bluetooth Low Energy (BLE) functionality of Android smartphones to create Phantom Bluetooth Device Advertisements, similar to what is known, for instance, in the case of the Flipper Zero. While there are other apps available that provide similar functionality, the objective of this app is…

■□□□□ Tenet plugin for IDA Pro tool: A Trace Explorer for Reverse Engineers. https://github.com/gaasedelen/tenet https://t.me/cKure/13168

■■□□□ Another victim of Israel-Palestine Cyber-War. The Central Bank of Azerbaijan was targeted by Team ‘Insane pk‘ for supporting Israel by allegedly supplying oil 🛢️. ● The group is an islamist Hacktivist group based in Pakistan. They had in the past attacked Indian entities. https://t.me/cKure/13166

■■□□□ Massive ransomware attack hinders services in 70 German municipalities . https://therecord.media/massive-cyberattack-hinders-services-in-germany https://www.wp.de/region/sauer-und-siegerland/cyberattacke-auf-suedwestfalen-was-bislang-bekannt-ist-id239913093.html https://t.me/cKure/13165

■■■■■ OSCP Cheat Sheet. https://github.com/xsudoxx/OSCP https://t.me/cKure/13164

■■□□□ Exploiting CVE-2023-5044. https://raesene.github.io/blog/2023/10/29/exploiting-CVE-2023-5044/ https://t.me/cKure/13163

■■■■□ Lazarus infect blockchain engineers with novel macOS malware. Elastic Security Labs exposes an attempt by the DPRK to infect blockchain engineers with novel macOS malware. https://www.elastic.co/security-labs/elastic-catches-dprk-passing-out-kandykorn https://t.me/cKure/13162

■■□□□ memdlopen: dlopen() filelessly a shared object or even a program (and run it). This is an implementation of the technique developed in the paper Remote Library Injection published at Nologin. There’s another implementation which has a severe problem: code signatures, which is precisely what I have fixed. https://github.com/arget13/memdlopen https://t.me/cKure/13161

■■■■□ Data-Breach from United States: Boeing claimed by LockBit ransom gang. https://cybernews.com/news/boeing-lockbit-ransomware-attack/ https://t.me/cKure/13160