Daily Security
@ethers_security
4.18K subscribers
71 photos
264 links
Admin: @minefolelser
Download Telegram
About
Blog
Apps
Platform
Join
Daily Security
4.18K subscribers
Daily Security
Forwarded from infinityhedge
MongoDB is hacked 🚨⚠️

https://www.mongodb.com/alerts
1.15K views
Daily Security
Hi, friends. Long time no see🧡
Don't miss out the tool below🆗

From SunSec guys:

"🔥DarkCat progress updates:
Automatic PoC generator:
1. Rewritten the server with nodejs (it was python before).
2. Using interfaces instead of low level calls.
3. Support run forge test directly on web.

Keep improving!"

https://fxtwitter.com/1nf0s3cpt/status/1744310042424398088
Please open Telegram to view this post
VIEW IN TELEGRAM
FxTwitter / FixupX
SunSec (@1nf0s3cpt)
🔥DarkCat progress updates:

Automatic PoC generator:
1. Rewritten the server with nodejs (it was python before).
2.Using interfaces instead of low level calls.
3. Support run forge test directly on web.

Keep improving!
👍3
1.06K viewsedited  
Daily Security
https://composable-security.com/blog/protect-your-account-sim-swap-hack/

Follow for more @ethers_security 🧡
Smart Contract Audits - Composable Security
Protect your account: SIM swap hack - Smart Contract Audits - Composable Security
Learn more about the SIM card swap scam which is one of the most popular attack vectors for X account hijacking.
❤1
1.01K viewsedited  
Daily Security
https://blog.chain.link/five-levels-cross-chain-security/
Chainlink Blog
The Five Levels of Cross-Chain Security | Chainlink Blog
Explore the five levels of cross-chain security and discover why Chainlink CCIP is the only interoperability protocol with level 5 security.
1.04K views
Daily Security
https://www.csoonline.com/article/1290876/the-owasp-ai-exchange-an-open-source-cybersecurity-guide-to-ai-components.html
CSO Online
The OWASP AI Exchange: an open-source cybersecurity guide to AI components
This open-source collaborative effort to share global AI security standards, regulations, and knowledge aims to mitigate risk and boost AI cybersecurity for all.
1.24K views
Daily Security
Thanks to great minds from Oxorio for such a cool list🙏
❤2
1.1K views
Daily Security
Forwarded from Investigations by ZachXBT
It appears Ripple was hacked for ~213M XRP ($112.5M)

Source address
rJNLz3A1qPKfWCtJLPhmMZAfBkutC2Qojm

So far the stolen funds have been laundered through MEXC, Gate, Binance, Kraken, OKX, HTX, HitBTC, etc

Theft addresses
rGhR13XyM43WdDaSMznHd5rZ4cJatybvEg
rHQVKntyfkDCPhEBL2ctryuEAkDZgckmmV
rLsUemhuBZtF44rqqzneb2F9JgyrRYYd4t
rKPERax7t9iFvT3RHXn5nifyNpzp9a4hBa
rpjs4HLX1gJoEenH69PsQmXaXY22QhCYAT
rLRhugR4ysNa2xkt4E6fKN8krs9jatCp6w
rnCyeUNvfDbtTagGEPjBfTCBz6EqJjf2Uj
rHVjfYzTaB8MzSoQGqpzH9barZr85QsZW7
😱3❤1👍1
1.07K views
Daily Security
Forwarded from Hacker News
macOS Sonoma 14.4 removes critical functions from the fileproviderctl command
Article, Comments
MacRumors Forums
fileproviderctl on Sonoma 14.4 - here we f#@%ng go again
14.4 (23E5180j) seems to have gimped the fileproviderctl command again. This happened before where they completely broke the command on 13.6. Feels like there's ONE guy whose job it is to compile...
1.17K views
Daily Security
https://medium.com/dedaub/phantom-functions-and-the-billion-dollar-no-op-c56f062ae49f

PoC: https://github.com/SunWeb3Sec/DeFiVulnLabs/blob/main/src/test/phantom-permit.sol
Medium
Phantom Functions and the Billion-Dollar No-op
By the Dedaub team
🔥3
1.02K viewsedited  
Daily Security
https://www.trust-security.xyz/post/permission-denied
Trust Security
Permission denied - The story of an EIP that sinned
On 24/08 Trust Security disclosed a variety of DOS issues to 30+ projects through Immunefi and private bug bounty programs. In total $50k from 15 projects were paid out. We'll start with a technical description of the issue for those of you who like to get…
2.2K views
Daily Security
Understanding Security Vulnerabilities in SNARKs
https://arxiv.org/pdf/2402.15293v1.pdf
1.08K views
Daily Security
Forwarded from Anon
Hi, guys. Would be grateful for your support❤️

BUSD BEP20
0x06009Fd4D3a8a8D00b4b402EE133369651eDf516

USDT BEP20
0x06009Fd4D3a8a8D00b4b402EE133369651eDf516

USDC ERC20
0x06009Fd4D3a8a8D00b4b402EE133369651eDf516

USDT ERC20
0x06009Fd4D3a8a8D00b4b402EE133369651eDf516

Matic
0x06009Fd4D3a8a8D00b4b402EE133369651eDf516

TRX
TPyHztRbhq4SgRogmHHhUeAJpYjfrpmvab
1.06K views
Daily Security
https://t.co/WVFRnCtvWd
Medium
Web2.5 Security
This is an article about pentesting blockchain infrastructure, wallets, and custodial apps. We did numerous security reviews of such…
1.15K views
Daily Security
https://mixbytes.io/blog/audit-zk-application-example-tornado-cash
mixbytes.io
Audit of a ZK application on example: Tornado Cash
Explore the security analysis of ZK applications, focusing on Circom and featuring Tornado Cash. Uncover critical code sections, delve into ZK algorithm security, and gain insights into real-world analysis methods.
❤4🔥1
1.24K views
Daily Security
https://blog.openzeppelin.com/top-10-blockchain-hacking-techniques-of-2023
Openzeppelin
Top 10 Blockchain Hacking Techniques 2023
Top 10 Blockchain Hacking Techniques. The smart contract exploits of 2023 often use creative and composability to exploit rounding errors.
🔥4❤1
1.26K views
Daily Security
https://cointelegraph.com/news/polygon-zkevm-mainnet-beta-sequencer-issues
Cointelegraph
Polygon zkEVM down due to issues with blockchain sequencer
Polygon emphasized its efforts to quickly address the issue while also highlighting that the release of the second-generation zkEVM is only weeks away.
❤1
1.28K views
Daily Security
Take a look, guys 😉
https://medium.com/@eceorsel/bypassing-jailbreak-detection-with-ghidra-a-deep-dive-af74ebd40613
Medium
Bypassing Jailbreak Detection with Ghidra: A Deep Dive
In this post, we’ll explore how to bypass jailbreak detection by breaking down and analyzing assembly code.
❤6
1.4K views
Daily Security
Sharing is caring
👎2
1.43K viewsedited  
Daily Security
https://github.com/slowmist/solana-smart-contract-security-best-practices
GitHub
GitHub - slowmist/solana-smart-contract-security-best-practices
Contribute to slowmist/solana-smart-contract-security-best-practices development by creating an account on GitHub.
👍6
1.22K views
Daily Security
https://open.substack.com/pub/defihacklabs/p/unveiling-a-new-scam-malicious-modification?r=35gba4&utm_medium=ios
DeFiHackLabs’s Substack
Unveiling a New Scam: Malicious Modification of RPC Node Links to Steal Assets
Author: SlowMist Background According to feedback from our partner imToken, a new type of cryptocurrency scam has recently emerged. This scam typically occurs in the context of physical transactions offline and uses USDT as the method of payment. The fraud…
1.23K views
Daily Security
Don’t abuse please😅

- A selection of the best Telegram OSINT bots (Phones, punched numbers)
https://hackyourmom.com/en/servisy/dobirka-krashhyh-osint-botiv-telegram-telefony-probyv-nomera/

- (Search for information on Telegram)
https://hackyourmom.com/en/servisy/dobirka-krashhyh-osint-botiv-telegram-poshuk-informacziyi-u-telegram/

- Transportation tracking tools
https://hackyourmom.com/en/kibervijna/instrumenty-dlya-vidstezhennya-transportu-avia/

- Deciphering terrain, deep geoanalysis of video in the context of OSINT
https://hackyourmom.com/en/kibervijna/rozshyfrovuyemo-misczevist-glybokyj-geoanaliz-video-u-konteksti-osint/

- Computer forensics
https://hackyourmom.com/en/kibervijna/kompyuterna-kryminalistyka-forenzyka-dobirka-korysnyh-posylan/

- Offensive Osint Tools
https://github.com/wddadk/Offensive-OSINT-Tools

- OSINT CTF
https://hackyourmom.com/en/kibervijna/osint-ctf-challenges/
https://gralhix.com/list-of-osint-exercises/

- Location tracking
https://github.com/IvanGlinkin/CCTV

-Cool database
https://osintkit.net/login
bot (https://t.me/osintkit_bot)
https://ohshint.gitbook.io/oh-shint-its-a-blog/osint/osint-wtf

- Roadmap
https://osintph.medium.com/osint-learning-path-20817eb5232e

- Blue team training

https://hackyourmom.com/en/osvita/dobirka-majdanchykiv-dlya-trenuvannya-blue-team/

- Dorks Builder
https://analystresearchtools.com

- Osint toolbox
https://github.com/The-Osint-Toolbox

- Best attack surface visualization tools
https://netlas.io/blog/best_attack_surface_visualization_tools/
bigdomaindata.com/reverse-whois/


- Github
https://sourcegraph.com
https://grep.app

- Games
https://www.geohub.gg/
https://t.me/molfar_global/3235
https://t.me/molfar_global/3181
Nite team 4
-Dorks advanced
https://github.com/cipher387/Dorks-collections-list


Tools:
- Malfar bot
@osintkit_bot
- phind.com

-Faceagle for images
https://faceagle.com/


- Bellingcat tools
https://www.bellingcat.com/resources/2024/09/24/bellingcat-online-investigations-toolkit/

- Molfar tools
https://molfar.com/en/useful-apps
❤4
1.38K viewsedited