■■□□□ VMware SSRF CVE-2021-21975 PoC

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials.

https://youtu.be/faeTl8ZPs2s

■■■□□ Google Chrome, Microsoft Edge zero-day vulnerability shared on Twitter.

https://www.bleepingcomputer.com/news/security/google-chrome-microsoft-edge-zero-day-vulnerability-shared-on-twitter/

■■□□□ BRATA Malware Poses as Android Security Scanners on Google Play Store.

https://thehackernews.com/2021/04/brata-malware-poses-as-android-security.html

■■□□□ Britain 🇬🇧: Average British computer criminal is young, male and not highly skilled, researcher finds.

https://go.theregister.com/feed/www.theregister.com/2021/04/13/computer_misuse_act_convictions_analysis/

■■□□□ ldsview: Search utility for LDAP directory dumps.

https://securityonline.info/ldsview-search-tool-for-ldap-directory-dumps/

■□□□□ #DataLeak: ParkMobile Breach Exposes License Plate Data, Mobile Numbers of 21M Users.

https://krebsonsecurity.com/2021/04/parkmobile-breach-exposes-license-plate-data-mobile-numbers-of-21m-users/

■■■□□ PIN bruteforcing if lockout is not enabled | The software rubber duck.

https://www.instagram.com/reel/CNaBvcFgX1b/?igshid=u5csu09obux

■■□□□ Back in a Bit: Attacker Use of the Windows Background Intelligent Transfer Service.

https://www.fireeye.com/blog/threat-research/2021/03/attacker-use-of-windows-background-intelligent-transfer-service.html

■■■■□ Over 100,000 web pages hosted by Google for business form searches overrun with backdoor RATs.

eSentire warns of remote-access trojans masquerading as PDFs

https://go.theregister.com/feed/www.theregister.com/2021/04/14/google_sites_malware/

■■■■□ United States 🇺🇸: A court-approved FBI operation was conducted to remove web shells from compromised US-based Microsoft Exchange servers without first notifying the servers' owners.

https://www.bleepingcomputer.com/news/security/fbi-nuked-web-shells-from-hacked-exchange-servers-without-telling-owners/

■■■■■ Microsoft today issued fixes for 114 vulnerabilities as part of its monthly security update release, which this month addressed 19 critical flaws, four critical Microsoft Exchange Server bugs found by the National Security Agency (NSA), and one zero-day bug in Desktop Window Manager.
 
CVE-2021-28310, a Win32k elevation of privilege vulnerability, is the only CVE under active attack patched this month.

Yesterday's patches also addressed four critical remote code execution vulnerabilities in Microsoft Exchange Server: CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, and CVE-2021-28483. All of these were discovered by the NSA and affect Exchange Server versions 2013 through 2019.
CVE-2021-28480 and CVE-2021-28481 have a CVSS score of 9.8 and require no authorization or user interaction to exploit.

■■■■□ Traitor - Automatic Linux Privesc Via Exploitation Of Low-Hanging Fruit E.G. GTFOBin

https://github.com/liamg/traitor

■□□□□ HackBar v2.0 release: HackBar plugin for Burpsuite.

https://github.com/d3vilbug/HackBar/releases

https://securityonline.info/hackbar-v2-0-releases-hackbar-plugin-for-burpsuite/

■□□□□ Majority of Mobile App vulnerabilities are from Open Source code.

■■■■□ 13TB Data-Leak appears online pertaining to Dominos India 🇮🇳.

The data includes 250 internal employee files, 180 million customer order details and 1 million credit card details 💳

Data timeliness are from 2015 to 2021.

@ckure is in the process of assessing validity.

■■■■□ Adfsbrute - A Script To Test Credentials Against Active Directory Federation Services (ADFS), Allowing Password Spraying Or Bruteforce Attacks.

https://github.com/ricardojoserf/adfsbrute

■■■■□ PoC / exploit utilities.

CVE-2020-6516 - Chrome
CVE-2021-24027 - WhatsApp

https://github.com/CENSUS/whatsapp-mitd-mitm

■■■■□ New JavaScript Exploit Can Now Carry Out DDR4 Rowhammer Attacks.

https://thehackernews.com/2021/04/new-javascript-exploit-can-now-carry.html

■□□□□ Data-Leak / Iraq 🇮🇶

● Microsoft Mesh

https://m.youtube.com/watch?v=Xa0H-oO1uCc

● 📢 Hacking forum rf.ws is down. Last HeartBeat by the bot I created shows 11 hours.