All posts tagged hack

■■■■■ Detect and block Credential Dumps with Defender for Endpoint & Attack Surface Reduction. Attacks & Defenses: Dumping LSASS With No Mimikatz Ref: OS Credential Dumping. Detect and block Credential Dumps with Defender for Endpoint & Attack Surface Reduction Attacks & Defenses: Dumping LSASS With No Mimikatz. https://attack.mitre.org/techniques/T1003/ https://t.me/cKure/11536

■■■■■ Netsec Goggle: Goggles are a way to alter the ranking in a search engine. Brave is behind this technology and you should read more about it. https://github.com/forcesunseen/netsec-goggle https://www.securityweek.com/netsec-goggle-customizes-brave-search-results-show-only-cybersecurity-websites https://t.me/cKure/11535

■■■■■ Magisk is a suite of open source software for customizing Android, supporting devices higher than Android 5.0. Some highlight features. MagiskSU: Provide root access for applications Magisk Modules: Modify read-only partitions by installing modules MagiskBoot: The most complete tool for unpacking and repacking Android boot images Zygisk: Run code in every Android applications’ processes.…

■■■■■ Akamai security researchers discovered Panchan, a new peer-to-peer botnet and SSH worm that emerged in March 2022 and has been actively breaching Linux servers since with its links to Japan. Panchan’s Mining Rig: New Golang Peer-to-Peer Botnet Says “Hi!”. https://www.akamai.com/blog/security/new-p2p-botnet-panchan https://t.me/cKure/11533

■□□□□ Ransomware Attack: Hackers Encrypt Data Of ISGEC Heavy Engineering Limited, Demands Bitcoin To Unlock Data. https://www.the420.in/ransomware-attack-hackers-encrypt-data-of-isgec-heavy-engineering-limited-demands-bitcoin-to-unlock-data/ https://t.me/cKure/11532

■■■□□ A GUI tool to query the API of abuse.ch. https://github.com/huebicode/abuselookup-gui https://twitter.com/huebicode/status/1540970860013559808 https://t.me/cKure/11531

■■□□□ CVE-2022-34305: Apache Tomcat Cross-Site Scripting Vulnerability. https://securityonline.info/cve-2022-34305-apache-tomcat-cross-site-scripting-vulnerability/ https://t.me/cKure/11530

■■■□□ Anatomy Of An Advanced Persistent Threat Group. https://www.socinvestigation.com/anatomy-of-an-advanced-persistent-threat-group/ https://t.me/cKure/11529

‘Syslogk’; a Linux kernel rootkit found under development in the wild. Linux Threat Hunting: ‘Syslogk’ a kernel rootkit found under development in the wild (Based on –> adore-ng): Linux rootkit adapted for 2.6 and 3.x: https://github.com/yaoyumeng/adore-ng https://t.me/cKure/11528

■■□□□ RISC-V Instruction-Set Cheatsheet (Overview of the RV32I base instruction-set of RISC-V processors including an comparison with the AVR instruction-set). https://itnext.io/risc-v-instruction-set-cheatsheet-70961b4bbe8 RISC-V Instruction-Set: https://blog.translusion.com/images/posts/RISC-V-cheatsheet-RV32I-4-3.pdf (pdf) https://t.me/cKure/11527