Apache OFBiz RCE Scanner & Exploit (CVE-2024-38856) - securelayer7/CVE-2024-38856_Scanner

TL;DR — Tens of millions of credentials obtained from info stealer logs populated by malware were posted to Telegram channels last month and used to shake down companies for bug bounties under the misrepresentation the data originated from their service.

A command and control framework written in rust. Contribute to Teach2Breach/Tempest development by creating an account on GitHub.

Contribute to Gl3bGl4z/All_NTLM_leak development by creating an account on GitHub.

Conference presentation slides. Contribute to onhexgroup/Conferences development by creating an account on GitHub.

SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement. - synacktiv/SCCMSecrets

Using CSS and social engineering to identify juicy targets when performing watering hole attacks

Looking into the abuse of ITarian RMM and introducing Dolphin Loader

The following is a writeup for some Android specific chromium behaviors.

A resource containing all the tools each ransomware gangs uses - BushidoUK/Ransomware-Tool-Matrix

Note: I am not responsible for any bad act. This is written by Chirag Artani to demonstrate the vulnerability. - Sachinart/CVE-2024-38063-poc

TL;DR Introduction For mobile testing, be it for apps or hardware, having complete control over the device is essential for analysis and vulnerability assessment. Rooting an Android device allows us to gain root privileges, giving us full access to the OS…

Posted by Royal Hansen, VP, Privacy, Safety and Security Engineering, Google, and Phil Venables, VP, TI Security & CISO, Google Cloud The...

Passive sniffing tool for capturing and visualising WiFi location data disclosed by iOS devices - hubert3/iSniff-GPS

Surprisingly often, implementations include functionality where user input is passed to dangerous functions like PHP’s eval() - despite clear warnings. Often, devs are somewhat aware of this danger and attempt to sanitize the input, but this approach …

Performing a root cause analysis & building proof-of-concept for CVE-2024-38063, a CVSS 9.8 Vulnerability In the Windows Kernel IPv6 Parser