Extractracted -13 files

The following are leaked babook ransomware source code. Have fun annalysing it. Might be a good introduction to malware annalysis and development..............>

#complete-source-code imagine, the same source code that lead to blue leaks and to millions of loses(companies) and millions of profits(threat actors)

https://www.trustedsec.com/blog/introducing-ihide-a-new-jailbreak-detection-bypass-tool/ it's your time to shine, ios security researchers

Escape From Chrome Sandbox to Root (CVE-2020-0423) http://translate.google.com/translate?hl=en&sl=auto&tl=en&u=https%3A%2F%2Fmp.weixin.qq.com%2Fs%2FGdDZolmDC-NAHHSuxV5Seg&sandbox=1

Pegasus android samples decompiled [source] by

https://github.com/jonathandata1/pegasus_spyware

If you have come across IOS samples decompiled do comment the link + all c2 servers listed. You can also comment what you find intresting in the code.

Kernel privilege escalation bug in Android affecting fully patched Pixel 2 & others
The bug was allegedly being used or sold by the NSO Group.
Local PoC exploit included. CVE-2019-2215
https://bugs.chromium.org/p/project-zero/issues/detail?id=1942

Analysis of WhatsApp bug CVE-2019-3568
https://github.com/maddiestone/ConPresentations/blob/master/Jailbreak2019.WhatsUpWithWhatsApp.pdf

Qu1ckR00t - Exploit CVE-2019-2215 to Achieve Root
Blog: https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/
PoC exploit: https://github.com/grant-h/qu1ckr00t

Vulnerabilities found in Android baseband firmware could be exploited via AT commands for vulnerable devices to: get unique identifiers, such as their IMEI and IMSI numbers, downgrade a target’s connection in order to intercept phone calls, forward calls to another phone or block all phone calls and internet access altogether.
https://techcrunch.com/2019/11/08/android-baseband-flaws/
Research: https://www.documentcloud.org/documents/6543391-ATFuzzer.html

RCE Vulnerability found in Android
CVE-2019-2205 - memory corruption due to a use after free could lead to RCE
It was fixed in the latest Android Security Bulletin—November 2019. Update!
https://www.nowsecure.com/blog/2019/11/13/nowsecure-discovers-critical-android-vuln-that-may-lead-to-remote-code-execution/

Compromise of Xiaomi Mi6 over WiFi to achieve RCE

Bug chaining:
MITM -> JavaScript Bridge (downloadAndInstallApk()) -> Contact Provider vulnerability (auto-start APK) -> RCE
https://labs.f-secure.com/advisories/xiaomi-wifi/

Malware found preinstalled in classic push-button phones sold in Russia
https://therecord.media/malware-found-preinstalled-in-classic-push-button-phones-sold-in-russia/

Rudroid - Writing the World's worst Android Emulator in Rust
https://fuzzing.science/page/rudroid-worlds-worst-android-emulator/

FORCEDENTRY - NSO Group iMessage Zero-Click Exploit Captured in the Wild (CVE-2021-30860 - processing a maliciously crafted PDF may lead to arbitrary code execution)
https://citizenlab.ca/2021/09/forcedentry-nso-group-imessage-zero-click-exploit-captured-in-the-wild/

😂😂 facebook , whatsapp and instagram are down

Are you a starting out web dev with no money? Have no skills in setting up multiple websites in a cheap server....?

Sign up to Digital Ocean https://m.do.co/c/3adf8647a767 get 100 free credits and ping me for container e.g Docker, lxd and ansible scripts that will make you learn without straining the process.