cKure – Telegram

cKure

6.6K subscribers

1.35K photos

320 videos

270 files

12K links

﷽
This channel was created in 2018 and contains content from the information security domain.

This channel is primarily run by AI bots (n8n).

Archive: ckure.esy.es
Criticals: @ckuRED
linkedin.com/company/ckure

Support 📨 i@ckure.org

Download Telegram

About

Blog

Apps

Platform

6.6K subscribers

153 views08:52

☆☆☆☆☆
ICYMI
Re-Branded Shodan
https://2000.shodan.io/#/

165 views05:02

https://n0where.net/automated-pentest-recon-scanner-sn1per

154 views05:35

https://www.exploit-db.com/exploits/45100/

143 views05:40

https://www.exploit-db.com/exploits/45124/

138 views05:40

https://jmw.fyi/post/disclose-fb-intern-server-info-with-a-strange-poll

145 views05:56

https://www.bleepingcomputer.com/news/security/microsoft-edge-flaw-lets-hackers-steal-local-files/

BleepingComputer

Microsoft Edge Flaw Lets Hackers Steal Local Files

Microsoft has fixed a vulnerability in the Edge browser that could be abused against older versions to steal local files from a user's computer.

138 views11:05

https://www.mdsec.co.uk/2018/08/escaping-the-sandbox-microsoft-office-on-macos/

Escaping the Sandbox - Microsoft Office on MacOS - MDSec

You’ve completed your recon, and found that your target is using MacOS… what next? With the increased popularity of MacOS in the enterprise, we are often finding that having phishing...

139 views12:28

https://github.com/hasherezade/pe-sieve/blob/master/README.md

pe-sieve/README.md at master · hasherezade/pe-sieve

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches). - hasherezade/pe-sieve

145 views08:22

Mimikatz: A utility known for dumping plain text credentials.

Very few people know that it can be used for dumping non-exportable certificates as .pfx and perform PTH attacks.

You can even use Mimikatz to set Windows password of a single character even if the GP set by admin is otherwise.

148 views08:25

This github repository hosts a pdf book

https://github.com/ewhitehats/InvisiblePersistence/

GitHub - ewhitehats/InvisiblePersistence: Persisting in the Windows registry "invisibly"

Persisting in the Windows registry "invisibly". Contribute to ewhitehats/InvisiblePersistence development by creating an account on GitHub.

136 views14:26

https://medium.com/@hakluke/haklukes-guide-to-hacking-without-metasploit-1bbbe3d14f90

A Guide to Hacking Without Metasploit

Ah the old “try harder” wisdom nugget. If taken in the right context, it is a slogan to live by. Unfortunately, most people don’t take it…

134 views14:31

http://amp.timeinc.net/thedrive/tech/22546/darpas-latest-software-lets-drone-navigate-small-urban-environments-infiltrate-buildings

117 views14:34

https://amp.thehackernews.com/thn/2018/08/mikrotik-router-hacking.html

131 views14:40

XSS in PHP

https://www.exploit-db.com/exploits/45143

126 views14:45

Linux Kernel - UDP Fragmentation Offset 'UFO' Privilege Escalation (Metasploit)

https://www.exploit-db.com/exploits/45147

133 views16:24

https://medium.com/@logicbomb_1/bugbounty-paytm-customer-information-is-at-risk-indias-largest-digital-wallet-company-6f7116d4b2d5

#BugBounty — @Paytm Customer Information is at risk — India’s largest digital wallet company

146 viewsedited 16:35

https://blogs.msdn.microsoft.com/powershell/2018/08/03/powershell-injection-hunter-security-auditing-for-powershell-scripts/

PowerShell Injection Hunter: Security Auditing for PowerShell Scripts

At the DEFCON security conference last year, we presented the session: "Get $pwnd: Attacking Battle Hardened Windows Server". In this talk, we went through some of the incredibly powerful ways that administrators can secure their high-value systems (for example…

131 views16:38

Google project zero blog:

https://googleprojectzero.blogspot.com/

projectzero.google

Google Project Zero

Make zeroday hard

113 views08:35

https://www.kitploit.com/2018/08/fluxion-wpawpa2-security-hacked-without.html

KitPloit - PenTest & Hacking Tools

Fluxion - Set Up Fake AP, Fake DNS, And Create Captive Portal To Trick Users Into Giving You Their Password

116 views10:42

https://www.kitploit.com/2018/06/the-rogue-toolkit-extensible-toolkit.html

KitPloit - PenTest & Hacking Tools

The Rogue Toolkit - An Extensible Toolkit Aimed At Providing Penetration Testers An Easy-To-Use Platform To Deploy Access Points

116 views10:43