■■□□□ (Tool) HARpwn: A #PowerShell module designed to streamline the extraction and sanitization of HARTokens from HTTP Archive (HAR) files.

https://github.com/HCRitter/HARpwn

■■■■□ CVE-2023-34050 Spring AMQP Deserialization Remote Code Execution.

https://blog.pyn3rd.com/2023/11/03/CVE-2023-34050-Spring-AMQP-Deserialization-Remote-Code-Execution/

■■■□□ Okta Hack Blamed on Employee Using Personal Google Account on Company Laptop.

https://www.securityweek.com/okta-hack-blamed-on-employee-using-personal-google-account-on-company-laptop/

■■■■□ StripedFly Malware Operated Unnoticed for 5 Years, Infecting 1 Million Devices.

https://thehackernews.com/2023/11/stripedfly-malware-operated-unnoticed.html

■■□□□ Tool: Certificate Ripper 🔐
A CLI tool to extract server certificates.

https://github.com/Hakky54/certificate-ripper

■■■■□ Citizen-Lab report.

Finding You
The Network Effect of
Telecommunications Vulnerabilities
for Location Disclosure
By Gary Miller and Christopher Parsons.

■■□□□ Israel-Palestine Cyber-War update: Disinformation campaign by Israeli netizens.

Telegram group created to delete any fact started against Israel by reputed individuals and those who share is being reported to social media accounts as hate and thereby deleted.

●This complacency by social media organisations is apparently due to Israeli who are at higher levels in the organisation.

Screenshot shared as success rate of deletion by the admins if this group through the employees at higher positions.

Twitter and YouTube seem to be immune to these disinformation tactics.

"5.11 report, weekend at the policy teams.

We have compiled the user rating in the group, we will soon issue beautiful update reports including individual performance reports.

Thanks everyone for a great job! 🇮🇱"

■■□□□ As previously shared here: https://t.me/cKure/13014

The disinformation campaign results are corroborated by Aljazeera: https://www.aljazeera.com/features/2023/10/24/shadowbanning-are-social-media-giants-censoring-pro-palestine-voices

The social media agencies are not only infiltrated by the pro Israel lobby who delete posts just because they are critical of Israel (or critique them) and not necessary against the community guidelines but by the state entities forcing them as well. The repercussions and statements from the social media giants are posted here: https://www.isoc.org.il/regulating-digital-services/israel/platform-policies-iron-swords

■■■■□ TEx - Telegram Monitor.

https://github.com/guibacellar/TEx

https://www.kitploit.com/2023/11/tex-telegram-monitor.html

■■■■■ iObfuscate: Unraveling iOS Obfuscation Techniques

During this talk, I examine multiple examples of #Reverse Engineering #iOS obfuscation techniques. Obfuscation strives to hide the underlying functionality of applications. This is particularly important in iOS applications that include a plethora of additional symbol data susceptible to reversing. I also release my new repository iOS Reverse Engineering repository.

https://github.com/LaurieWired/ObjectiveByTheSea2023

■■■■□ webcopilot: enumerate subdomains of the target and detect vulnerabilities.

https://github.com/h4r5h1t/webcopilot

https://securityonline.info/webcopilot-enumerate-subdomains-of-the-target-and-detect-vulnerabilities/#google_vignette

■■■■■ DFIR Toolkit v0.9 releases: CLI tools for forensic investigation of Windows artifacts.

https://securityonline.info/dfir-toolkit-cli-tools-for-forensic-investigation-of-windows-artifacts/

■■■■■ Octopii: A Personally Identifiable Information (PII) scanner that uses Optical Character Recognition (OCR), regular expression lists and Natural Language Processing (NLP) to search public-facing locations for Government ID, addresses, emails etc in images, PDFs and documents.

https://github.com/redhuntlabs/Octopii

■■□□□ PrivFu: Kernel mode WinDbg extension and PoCs for token privilege investigation.

https://github.com/daem0nc0re/PrivFu

■■■□□ CVE-2022-0847 eBPF: An eBPF program to detect and defense attacks on CVE-2022-0847 (DirtyPipe).

https://github.com/h4ckm310n/CVE-2022-0847-eBPF

■■□□□ LdrLibraryEx: A small x64 library to load dll's into memory.

https://github.com/Cracked5pider/LdrLibraryEx