All posts tagged hacker

■■■□□ Exploit: Elasticsearch ECE 7.13.3 – Anonymous Database Dump / Web App. https://www.exploit-db.com/exploits/50152 https://t.me/cKure/8698

■■□□□ Microsoft publishes mitigations for the PetitPotam attack. https://securityaffairs.co/wordpress/120550/security/petitpotam-attack-mitigations.html https://t.me/cKure/8696

■■■■□ Beaconator is an aggressor script for Cobalt Strike used to generate a raw stageless shellcode and packing the generated shellcode using PEzor. https://github.com/capt-meelo/Beaconator https://t.me/cKure/8695

■■□□□ Threat actor offers Clubhouse secret database containing 3.8B phone numbers. https://securityaffairs.co/wordpress/120553/hacking/threat-actor-offers-clubhouse-secret-database-containing-3-8b-phone-numbers.html https://t.me/cKure/8694

■■□□□ LightMe: HTTP Server serving obfuscated Powershell Scripts/Payloads. https://github.com/WazeHell/LightMe https://t.me/cKure/8693

■□□□□ DEF CON offers beginner-level Spot the Fed this year: He’ll be on stage giving a keynote. https://go.theregister.com/feed/www.theregister.com/2021/07/26/in_brief_security/ https://t.me/cKure/8692

■■□□□ As per the researchers, the number of reported Discord malware detections has increased significantly since last year. Even users who have never interacted with Discord are at risk, even though the network is mostly utilized by gamers as Discord has a malware problem. https://t.me/cKure/8691

■■■■□ WhatsApp CEO Says Pegasus Spyware Targeted US Allies. https://uk.pcmag.com/security/134686/whatsapp-ceo-says-pegasus-spyware-targeted-us-allies https://t.me/cKure/8690

■□□□□ Wireless Penetration Testing: SSID Discovery. http://rajhackingarticles.blogspot.com/2021/07/wireless-penetration-testing-ssid.html https://t.me/cKure/8689

■□□□□ Threat actors target Kubernetes installs via Argo Workflows to cryptocurrency miners, security researchers from Intezer warn. https://t.me/cKure/8688