EarSpy – A New Attack on Android Devices Use Motion Sensors to Steal Sensitive Data
https://gbhackers.com/earspy-android/
https://gbhackers.com/earspy-android/
GBHackers Security | #1 Globally Trusted Cyber Security News Platform
EarSpy - A New Attack on Android Devices Use Motion Sensors to Steal Sensitive Data
There has been a new eavesdropping attack developed by a team of security experts for Android devices which has been dubbed "EarSpy." With the help of this attack, attackers can detect the following things:-
Welcoming Our Forum »» https://system32.ink
ASK: Anything Related To Tech With Create your Own forum
Learn: About Programming,cybersecurity,bugHunting And Many More
Post: Share your Knowledge,Rats,Databases And Videos related to Tech
So SignUp Now And Grow Our Community
Thank You;
ASK: Anything Related To Tech With Create your Own forum
Learn: About Programming,cybersecurity,bugHunting And Many More
Post: Share your Knowledge,Rats,Databases And Videos related to Tech
So SignUp Now And Grow Our Community
Thank You;
🔥2
#tools
#Blue_Team_Techniques
1. HTML Smuggling Detection - HTML Smuggling Detection
https://micahbabinski.medium.com/html-smuggling-detection-5adefebb6841
2. Log4Shell-Scanner-Exploit - Bash script to identify the Log4j CVE-2021-44228 vulnerability remotely
https://github.com/julian911015/Log4j-Scanner-Exploit
#Blue_Team_Techniques
1. HTML Smuggling Detection - HTML Smuggling Detection
https://micahbabinski.medium.com/html-smuggling-detection-5adefebb6841
2. Log4Shell-Scanner-Exploit - Bash script to identify the Log4j CVE-2021-44228 vulnerability remotely
https://github.com/julian911015/Log4j-Scanner-Exploit
Medium
HTML Smuggling Detection
Introduction
#Threat_Research
CVE-2022-27510, CVE-2022-27518 - Measuring Citrix ADC & Gateway version adoption on the Internet
https://blog.fox-it.com/2022/12/28/cve-2022-27510-cve-2022-27518-measuring-citrix-adc-gateway-version-adoption-on-the-internet
CVE-2022-27510, CVE-2022-27518 - Measuring Citrix ADC & Gateway version adoption on the Internet
https://blog.fox-it.com/2022/12/28/cve-2022-27510-cve-2022-27518-measuring-citrix-adc-gateway-version-adoption-on-the-internet
Fox-IT International blog
CVE-2022-27510, CVE-2022-27518 – Measuring Citrix ADC & Gateway version adoption on the Internet
Authored by Yun Zheng Hu Recently, two critical vulnerabilities were reported in Citrix ADC and Citrix Gateway; where one of them was being exploited in the wild by a threat actor. Due to these vul…
#Analytics
#Sec_code_review
Top 10 bugs found in C++ projects in 2022
https://pvs-studio.com/en/blog/posts/cpp/1021
#Sec_code_review
Top 10 bugs found in C++ projects in 2022
https://pvs-studio.com/en/blog/posts/cpp/1021
PVS-Studio
Top 10 bugs found in C++ projects in 2022
New Year is coming! It means, according to tradition, it′s time to recall 10 of the most interesting warnings that PVS-Studio found during 2022.
#exploit
1. CVE-2022-4178:
Chrome - Design flaw in Synchronous Mojo message handling introduces unexpected reentrancy and allows for multiple UAFs
https://bugs.chromium.org/p/project-zero/issues/detail?id=2372
2. WebKit + Kernel exploit chain for all PS Vita firmwares
https://github.com/TheOfficialFloW/HENlo
3. CVE-2022-41912:
Signature bypass via multiple Assertion elements
https://bugs.chromium.org/p/project-zero/issues/detail?id=2368
1. CVE-2022-4178:
Chrome - Design flaw in Synchronous Mojo message handling introduces unexpected reentrancy and allows for multiple UAFs
https://bugs.chromium.org/p/project-zero/issues/detail?id=2372
2. WebKit + Kernel exploit chain for all PS Vita firmwares
https://github.com/TheOfficialFloW/HENlo
3. CVE-2022-41912:
Signature bypass via multiple Assertion elements
https://bugs.chromium.org/p/project-zero/issues/detail?id=2368
GitHub
GitHub - TheOfficialFloW/HENlo: WebKit+Kernel exploit chain for all PS Vita firmwares
WebKit+Kernel exploit chain for all PS Vita firmwares - TheOfficialFloW/HENlo
#Infographics
#Malware_analysis
Ransomware & Data Extortion Landscape in 2022
https://app.tidalcyber.com
#Malware_analysis
Ransomware & Data Extortion Landscape in 2022
https://app.tidalcyber.com
Tidalcyber
Tidal Cyber
Threat-Led Defense
#Red_Team_Tactics
1. Writing Windows Kernel Drivers for Advanced Persistence
https://v3ded.github.io/redteam/red-team-tactics-writing-windows-kernel-drivers-for-advanced-persistence-part-1
2. 0 click Facebook Account Takeover and Two-Factor Authentication Bypass
https://medium.com/@yaala/account-takeover-and-two-factor-authentication-bypass-de56ed41d7f9
1. Writing Windows Kernel Drivers for Advanced Persistence
https://v3ded.github.io/redteam/red-team-tactics-writing-windows-kernel-drivers-for-advanced-persistence-part-1
2. 0 click Facebook Account Takeover and Two-Factor Authentication Bypass
https://medium.com/@yaala/account-takeover-and-two-factor-authentication-bypass-de56ed41d7f9
v3ded.github.io
Red Team Tactics: Writing Windows Kernel Drivers for Advanced Persistence (Part 1)
Introduction This post, as indicated by the title, will cover the topic of writing Windows kernel drivers for advanced persistence. Because the subject matte...
Thank you very much for reading me ❤️
Here is an article about reverse firmware in English:
https://telegra.ph/Introduction-to-Firmware-Reversal-12-30
Here is an article about reverse firmware in English:
https://telegra.ph/Introduction-to-Firmware-Reversal-12-30
Telegraph
Introduction to Firmware Reversal
Good afternoon my white rabbits, Merry Christmas to all of yo !🐰🎄 I wanted to do a small series of posts about reverse firmware .
🔥🔥🔥Survey of security mitigations and architectures, December 2022
"This blogpost summarizes and compares some of the exciting approaches in our journey to memory safety. I hope this could become a reference to interested readers and colleagues.
Along this blogpost I’ll consider five security properties: spatial safety, temporal safety, type safety, definite initialization and concurrency safety."
"This blogpost summarizes and compares some of the exciting approaches in our journey to memory safety. I hope this could become a reference to interested readers and colleagues.
Along this blogpost I’ll consider five security properties: spatial safety, temporal safety, type safety, definite initialization and concurrency safety."
Hacking tools pack & backdoors generator
https://github.com/AdrMXR/KitHack
Crack Interface lockscreen, Metasploit and More Android/IOS Hacking
https://github.com/tegal1337/CiLocks
Using Socks4/5 or http proxies to make a multithreading Http-flood/Https-flood (cc) attack
https://github.com/Leeon123/CC-attack
https://github.com/AdrMXR/KitHack
Crack Interface lockscreen, Metasploit and More Android/IOS Hacking
https://github.com/tegal1337/CiLocks
Using Socks4/5 or http proxies to make a multithreading Http-flood/Https-flood (cc) attack
https://github.com/Leeon123/CC-attack
GitHub
GitHub - AdrMXR/KitHack: Hacking tools pack & backdoors generator.
Hacking tools pack & backdoors generator. Contribute to AdrMXR/KitHack development by creating an account on GitHub.
Welcoming Our Forum »» https://system32.ink
ASK: Anything Related To Tech With Create your Own forum
Learn: About Programming,cybersecurity,bugHunting And Many More
Post: Share your Knowledge,Rats,Databases And Videos related to Tech
So SignUp Now And Grow Our Community
Thank You;
ASK: Anything Related To Tech With Create your Own forum
Learn: About Programming,cybersecurity,bugHunting And Many More
Post: Share your Knowledge,Rats,Databases And Videos related to Tech
So SignUp Now And Grow Our Community
Thank You;