cKure Red

1.61K views04:37

● A series of critical zero-day vulnerabilities (approximately 3 issues) have been detected by a security researcher in D-Link devices / CPEs.

As per reports; most or all devices are vulnerable and system access can be achieved.

@ckuRED

could not confirm independently.

1.51K views13:26

cKure Red

cKure Red pinned «● A series of critical zero-day vulnerabilities (approximately 3 issues) have been detected by a security researcher in D-Link devices / CPEs. As per reports; most or all devices are vulnerable and system access can be achieved. @ckuRED

could not confirm…

13:26

cKure Red

Bypassing Wi-Fi Encryption by Manipulating Transmit Queues.

https://www.usenix.org/system/files/usenixsecurity23-schepers.pdf

1.62K views13:50

cKure Red

China has said in a technological breakthrough; entire electromagnetic spectrum can be analyzed and disabled by the jamming technology.

China Claims Starlink Satellites Now Easy Prey Thanks To ‘Tech Breakthrough’ In Electronic Warfare.

https://www.eurasiantimes.com/china-claims-breakthrough-in-electronic-warfare/amp/

EURASIAN TIMES

China Claims Starlink Satellites Now Easy Prey Thanks To 'Tech Breakthrough' In Electronic Warfare

In yet another instance of extraordinary claims emerging from Beijing regarding electronic warfare capabilities, Chinese researchers, for the first time, purportedly have developed seamless, wide-bandwidth, real-time monitoring and analysis of the electromagnetic…

1.59K views05:23

cKure Red

Zero-Day (via CVE-2023-45866): Exploiting Zero-click Android Bluetooth vulnerability to inject keystrokes without pairing.

https://www.mobile-hacker.com/2024/01/23/exploiting-0-click-android-bluetooth-vulnerability-to-inject-keystrokes-without-pairing/

Mobile Hacker

Exploiting 0-click Android Bluetooth vulnerability to inject keystrokes without pairing Mobile Hacker

[update 2024-02-19] This vulnerability can be even used to remotely wipe data of targeted Android smartphone. Using this vulnerability it is possible to guess user lock screen PIN. After five incorrect PINs device is locked out for 30 seconds. This operation…

2K views14:27

cKure Red

cKure Red pinned «Zero-Day (via CVE-2023-45866): Exploiting Zero-click Android Bluetooth vulnerability to inject keystrokes without pairing. https://www.mobile-hacker.com/2024/01/23/exploiting-0-click-android-bluetooth-vulnerability-to-inject-keystrokes-without-pairing/»

14:28

cKure Red

Reverse engineering FOSCAM encryption keys from extracted firmware using Ghidra.

https://hacked.codes/2023/extracting-firmware-reverse-engineering-encryption-keys-foscam/

hacked.codes

Reverse engineering FOSCAM encryption keys from extracted firmware using Ghidra | hacked.codes

FOSCAM firmware is encrypted with openssl using a salted key. This post will demonstrate how to extract the firmware using an $14 SPI flash programmer, and reverse engineer the decryption keys for the firmware, and RSA keys that ship with the firmware using…

1.65K views22:12

cKure Red

A tool that allegedly bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell.

https://github.com/Sh3lldon/FullBypass

GitHub

GitHub - Sh3lldon/FullBypass: A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language…

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell. - Sh3lldon/FullBypass

1.77K views10:58

cKure Red

BurpSuite's chromium browser adds a header as it sends the request across to the server.

Sec-Ua*

● I found it when one website blocked my requests for a normal login (with a 302 redirect to WAF's soft error). This is over a half year old story. Thought of sharing.

2.08K views06:12

cKure Red

HTTP Downgrade attacks with SmuggleFuzz.

https://moopinger.github.io/blog/smugglefuzz/fuzzing/smuggling/2024/01/31/SmuggleFuzz.html

MOOPINGER

HTTP Downgrade attacks with SmuggleFuzz

Place to store my thoughts on all things information-security related. Hopefully you find something of interest. Ramblings are my own. Charlton Smith

1.8K views05:58

cKure Red

com_google_android_apps_bard_1_0_607712083_62_minAPI31nodpi_.apk

2.5 MB

Google's Gemini AI application file (not available globally).

Official source: https://play.google.com/store/apps/details?id=com.google.android.apps.bard

2.02K viewsedited 14:56

cKure Red

Channel photo updated

22:51

cKure Red

Interesting thread on Azure vulnerability to take over Bing search results.

https://twitter.com/hillai/status/1641146508639600646

1.67K viewsedited 18:11

cKure Red

Major cyber-attack on Israel 🇮🇱 by pro-Pslestine hacker groups amid ongoing extermination cum genocide of Muslims ☪️ and Christians ✝️ in Gaza and West-Bank Palestine 🇵🇸 by Israel.

The Eilat power station is pwned and apparently electricity in some areas has been affected by this ICS-SCADA hack.

1.94K viewsedited 19:56

cKure Red

Google Chrome V8 CVE-2024-0517 Out-of-Bounds Write Code Execution.

https://blog.exodusintel.com/2024/01/19/google-chrome-v8-cve-2024-0517-out-of-bounds-write-code-execution

Exodus Intelligence

Google Chrome V8 CVE-2024-0517 Out-of-Bounds Write Code Execution - Exodus Intelligence

By Javier Jimenez and Vignesh Rao Overview In this blog post we take a look at a vulnerability that we found in Google Chrome’s V8 JavaScript engine a few months ago. This vulnerability was patched in a Chrome update on 16 January 2024 and assigned CVE-2024…

1.58K views17:45

cKure Red

Malware reverse engineering for beginners.

Part 1: https://intezer.com/blog/malware-analysis/malware-reverse-engineering-beginners/

Part 2: https://intezer.com/blog/incident-response/malware-reverse-engineering-for-beginners-part-2/

Intezer

Malware Reverse Engineering for Beginners - Part 1: From 0x0

Reverse engineering is an integral part of malware analysis and research - get started learning this advanced skill to investigate malware.