Hacker Investigation
263 subscribers
24 photos
4 files
7 links
Download Telegram
Channel created
Channel photo updated
A group called MoroccanConquest By hacking and publishing data related to the CIA and NATO intelligence services, as well as documents about dishes seen in Spain
The team published files attached to two documents, and the other file contains information such as email and names,..... etc.
After checking the first file, we found that the document is normally available to the public.
This is the link to the first document: https://en.m.wikisource.org/wiki/Page:Flying_Saucers_in_Spain_and_North_Africa,_CIA_report.pdf/1
The second document has nothing to do with the first one and is also available to the public You can verify this via Google.
For files containing information such as emails and names that were leaked in 2018
Which indicates that this group has published leaked data before and did not commit any hacking.


#Investigation_of_hacking
#Cyber_Security_News
πŸ”₯9🀣7❀2πŸ‘1πŸ“1πŸ€ͺ1
🚨🚨

A new report reveals that the U.S. government (and its services) intends to gradually phase out C and C++ developers and their software as well. In short, this is due to the poor security practices associated with these languages.

The CISA (Cybersecurity and Infrastructure Security Agency) advises developers to transition to more secure languages when it comes to security practices. It recommends Rust, Java, C#, Go, Python, and Swift, considering them to produce fewer errors and weaker security vulnerabilities.

However, this is not that easy. There are significant challenges to this transition:

πŸ”Ή Cost vs. Performance: Transitioning from C/C++ will require substantial financial resources, leading to a dilemma of sacrificing performance for cost, or cost for performance.

πŸ”Ή Human Resources: The transition also requires experts in languages other than C/C++, which means renewing the workforce from the smallest elements to the largest.

πŸ”Ή Reliability of New Products: Transitioning to Rust, for example, may not provide long-term support. Developers may abandon it, for instance.

There was also a previous report (about two years ago) indicating that there are not many C/C++ developers in the world, not just in the U.S. The new report may echo the old one. The shortage of C/C++ developers means we either need to build frameworks in this technology or transition to other technologies.



#Investigation_of_hacking
#Cyber_Security_News
πŸ”₯3❀2πŸ‘2πŸ‘1πŸ₯°1πŸ’”1
#Exploit 🚨 CVE-2024-32640: Automated SQL Injection Exploitation PoC

βš™οΈA new exploit called "Muraider" has been developed to automate the detection and exploitation of CVE-2024-32640, a SQL injection vulnerability in Mura/Masa CMS. The tool uses Python and integrates with Ghauri…

https://github.com/Stuub/CVE-2024-32640-SQLI-MuraCMS



#Investigation_of_hacking
#Cyber_Security_News
πŸ‘2πŸ–•2❀1πŸ‘1πŸ”₯1πŸ₯°1πŸ’―1πŸ“1
xWP-NewV.zip
797.7 KB
🚨🚨

The newest WordPress 2024 Exploits

βš™οΈThe best newest 2024 method to get webshells
You don't need to buy tools and exploits to get shells, here are the best ones for free.


#Investigation_of_hacking
#Cyber_Security_News
#codeb0ss
❀‍πŸ”₯3❀1πŸ‘1πŸ₯°1πŸ‘1πŸ“1
🚨_CvEploiterv2 x xWPv3 Ultimate/Beast Software

🎯The most advanced software for CV 2024 expl0its and WordPress vulnerabilities
     with the latest version/method.]

βš™οΈCVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.

βš™οΈCVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.

βš™οΈCVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.

βš™οΈCVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.

βš™οΈCVE-2024-40348 -
[Bazarr] < Unauthenticated Arbitrary File Read.

βš™οΈ#CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.

βš™οΈCVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.

βš™οΈCVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.

βš™οΈCVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.

#Investigation_of_hacking
#Cyber_Security_News
#codeb0ss
πŸ‘4❀2πŸ‘1πŸ₯°1πŸ“1
🚨🚨The group announced MoroccanConquest that it launched denial of service attacks on the Italian National Gendarmerie website.
And posted the verification link to disable the site.
βš™οΈAfter checking, we found that the site is working normally and there is nothing wrong with it And it was not affected by any cyber attack.

βœ…make sure: https://www.carabinieri.it/


#Investigation_of_hacking
#Cyber_Security_News
πŸ‘5πŸ”₯2πŸ₯°2πŸ€”2🫑2❀1πŸ‘1🌭1
An unknown group Team 1956 has carried out a massive cyber attack on the CreditGuard payment gateway operated by the Israeli company Hyp targeting the connection between card devices and payment systems This resulted in a complete disruption of credit card payment services in supermarkets stores gas stations and others within the entity
The Jerusalem Post reported that thousands of credit card reading devices at gas stations and major retail chains in the entity stopped working on Sunday morning following a DDoS attack that hit the company responsible for operating the devices
The Hyp Credit Guard company stated to Israeli media that a suspected denial of service attack on communication suppliers is the likely cause of the malfunction across Israeli stores The attack affected many companies across the entity including the Maccabi Health Fund the Gett taxi service the Wolt food delivery app and payment systems for public transport such as Rav Kav Online and HopOn


#Investigation_of_hacking
#CyberSecurityNews
πŸ”₯5πŸ‘3πŸ₯°2❀1πŸ‘1πŸ’Š1