■■□□□ Tool: Certificate Ripper 🔐
A CLI tool to extract server certificates.

https://github.com/Hakky54/certificate-ripper

■■■■□ Citizen-Lab report.

Finding You
The Network Effect of
Telecommunications Vulnerabilities
for Location Disclosure
By Gary Miller and Christopher Parsons.

■■□□□ Israel-Palestine Cyber-War update: Disinformation campaign by Israeli netizens.

Telegram group created to delete any fact started against Israel by reputed individuals and those who share is being reported to social media accounts as hate and thereby deleted.

●This complacency by social media organisations is apparently due to Israeli who are at higher levels in the organisation.

Screenshot shared as success rate of deletion by the admins if this group through the employees at higher positions.

Twitter and YouTube seem to be immune to these disinformation tactics.

"5.11 report, weekend at the policy teams.

We have compiled the user rating in the group, we will soon issue beautiful update reports including individual performance reports.

Thanks everyone for a great job! 🇮🇱"

■■□□□ As previously shared here: https://t.me/cKure/13014

The disinformation campaign results are corroborated by Aljazeera: https://www.aljazeera.com/features/2023/10/24/shadowbanning-are-social-media-giants-censoring-pro-palestine-voices

The social media agencies are not only infiltrated by the pro Israel lobby who delete posts just because they are critical of Israel (or critique them) and not necessary against the community guidelines but by the state entities forcing them as well. The repercussions and statements from the social media giants are posted here: https://www.isoc.org.il/regulating-digital-services/israel/platform-policies-iron-swords

■■■■□ TEx - Telegram Monitor.

https://github.com/guibacellar/TEx

https://www.kitploit.com/2023/11/tex-telegram-monitor.html

■■■■■ iObfuscate: Unraveling iOS Obfuscation Techniques

During this talk, I examine multiple examples of #Reverse Engineering #iOS obfuscation techniques. Obfuscation strives to hide the underlying functionality of applications. This is particularly important in iOS applications that include a plethora of additional symbol data susceptible to reversing. I also release my new repository iOS Reverse Engineering repository.

https://github.com/LaurieWired/ObjectiveByTheSea2023

■■■■□ webcopilot: enumerate subdomains of the target and detect vulnerabilities.

https://github.com/h4r5h1t/webcopilot

https://securityonline.info/webcopilot-enumerate-subdomains-of-the-target-and-detect-vulnerabilities/#google_vignette

■■■■■ DFIR Toolkit v0.9 releases: CLI tools for forensic investigation of Windows artifacts.

https://securityonline.info/dfir-toolkit-cli-tools-for-forensic-investigation-of-windows-artifacts/

■■■■■ Octopii: A Personally Identifiable Information (PII) scanner that uses Optical Character Recognition (OCR), regular expression lists and Natural Language Processing (NLP) to search public-facing locations for Government ID, addresses, emails etc in images, PDFs and documents.

https://github.com/redhuntlabs/Octopii

■■□□□ PrivFu: Kernel mode WinDbg extension and PoCs for token privilege investigation.

https://github.com/daem0nc0re/PrivFu

■■■□□ CVE-2022-0847 eBPF: An eBPF program to detect and defense attacks on CVE-2022-0847 (DirtyPipe).

https://github.com/h4ckm310n/CVE-2022-0847-eBPF

■■□□□ LdrLibraryEx: A small x64 library to load dll's into memory.

https://github.com/Cracked5pider/LdrLibraryEx

■■■□□ Google Warns How Hackers Could Abuse Calendar Service as a Covert C2 Channel.

https://thehackernews.com/2023/11/google-warns-of-hackers-absing-calendar.html

■□□□□ Cyber-Attack on Qatari Ecommerce Government by a group calling themselves 'Indian Cyber Force'. It was a DoS attack.

Target - https://ecommerce.gov.qa/

Check Host - https://check-host.net/check-report/130d6715kb0d

Duration: 2 hours (as per the group).

■■■■□ CVE-2023-22518: Improper Authorization Vulnerability in Confluence Data Center and Server.

A critical vulnerability in Atlassian Confluence Data Center and Server. The vulnerability could potentially allow unauthenticated attackers with network access to the Confluence Instance to restore the database of the Confluence instance and eventually execute arbitrary system commands.

https://github.com/ForceFledgling/CVE-2023-22518

■■■■□ Remote Code Execution in Tutanota Desktop due to Code Flaw.

https://www.sonarsource.com/blog/remote-code-execution-in-tutanota-desktop-due-to-code-flaw/

■■■■■ DuckDuckC2: A proof-of-concept C2 channel through DuckDuckGo's image proxy service. The provided example can be extended multiple ways to achieve different deployments.

https://github.com/nopcorn/DuckDuckC2

https://nopcorn.github.io/2023/09/25/duckduckgo-as-c2