Exploit Airlines that use T-Mobile for Free WiFi https://cylect.io/blog/cybr-2/exploit-airlines-to-get-free-wifi-airline-vulnerability-8
Havoc Across the Cyberspace https://www.zscaler.com/blogs/security-research/havoc-across-cyberspace
Zscaler
Havoc Across the Cyberspace | Blog | Zscaler
ThreatLabz observed a new campaign targeting a Government organization in which the threat actors utilized a new Command & Control (C2) framework named Havoc
The code that wasn’t there: Reading memory on an Android device by accident https://github.blog/2023-02-23-the-code-that-wasnt-there-reading-memory-on-an-android-device-by-accident/
The GitHub Blog
The code that wasn't there: Reading memory on an Android device by accident
CVE-2022-25664, a vulnerability in the Qualcomm Adreno GPU, can be used to leak large amounts of information to a malicious Android application. Learn more about how the vulnerability can be used to leak information in both the user space and kernel space…
OpenEMR - Remote Code Execution in your Healthcare System https://www.sonarsource.com/blog/openemr-remote-code-execution-in-your-healthcare-system/
Hackers Using Trojanized macOS Apps to Deploy Evasive Cryptocurrency Mining Malware https://thehackernews.com/2023/02/hackers-using-trojanized-macos-apps-to.html
Phylum Discovers Aggressive Attack on PyPI Attempting to Deliver Rust Executable https://blog.phylum.io/phylum-discovers-another-attack-on-pypi
When an N-Day turns into a 0day. (Part 1 of 2) https://github.com/b1ack0wl/vulnerability-write-ups/blob/master/TP-Link/WR940N/112022/Part1.md
GitHub
vulnerability-write-ups/TP-Link/WR940N/112022/Part1.md at master · b1ack0wl/vulnerability-write-ups
This repo contains write ups of vulnerabilities I've found and exploits I've publicly developed. - b1ack0wl/vulnerability-write-ups
Direct Kernel Object Manipulation (DKOM) Attacks on ETW Providers https://securityintelligence.com/posts/direct-kernel-object-manipulation-attacks-etw-providers/
Security Intelligence
Direct Kernel Object Manipulation (DKOM) Attacks on ETW Providers
IBM Security X-Force Red offensive hackers analyze how attackers, with elevated privileges, can use their access to stage Windows Kernel post-exploitation capabilities.
Forwarding Traffic Through SSH https://www.blackhillsinfosec.com/forwarding-traffic-through-ssh/
Black Hills Information Security, Inc.
Forwarding Traffic Through SSH - Black Hills Information Security, Inc.
Fernando Panizza // This was meant to be an OpenSSH how-to blog, but since I had time, I decided to read the man pages (manual pages that you can access […]
👍2
IpGeo - Tool To Extract IP Addresses From Captured Network Traffic File https://www.kitploit.com/2023/02/ipgeo-tool-to-extract-ip-addresses-from.html
Kitploit
Kitploit – Maintenance in Progress
Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.
Enigma info-stealing malware targets the cryptocurrency industry https://securityaffairs.com/142187/cyber-crime/enigma-info-stealer-cryptocurrency-industry.html
Security Affairs
Enigma info-stealing malware targets the cryptocurrency industry
Alleged Russian threat actors have been targeting cryptocurrency users in Eastern Europe with info-stealing malware.
Chaos Malware Quietly Evolves Persistence and Evasion Techniques https://sysdig.com/blog/chaos-malware-persistence-evasion-techniques/
Sysdig
Chaos Malware Quietly Evolves Persistence and Evasion Techniques | Sysdig
We will go through the analysis of chaos malware based on our captured attacks with an emphasis on persistence techniques.
Linux Rootkits Part 1: Introduction and Workflow https://xcellerator.github.io/posts/linux_rootkits_01/
Linux Rootkits Part 1: Introduction and Workflow
Linux Rootkits Part 1: Introduction and Workflow :: TheXcellerator
Learning about Linux rootkits is a great way to learn more about how the kernel works. What’s great about it is that, unless you really understand what the kernel is doing, your rootkit is unlikely to work, so it serves as a fantasic verifier.
In the FreeBSD…
In the FreeBSD…
👍1🔥1
Our second post on the history of malware is now available. We continue the timeline by reviewing the 1980s, where the first malware proofs of concept began to emerge. You can read more at https://reversea.me/index.php/a-brief-history-of-malware-part-2/, enjoy!
❤2🔥1
CVE-Vulnerability-Information-Downloader - Downloads Information From NIST (CVSS), First.Org (EPSS), And CISA (Exploited Vulnerabilities) And Combines Them Into One List https://www.kitploit.com/2023/02/cve-vulnerability-information.html
KitPloit - PenTest & Hacking Tools
CVE-Vulnerability-Information-Downloader - Downloads Information From NIST (CVSS), First.Org (EPSS), And CISA (Exploited Vulnerabilities)…
Linux Rootkits Part 2: Ftrace and Function Hooking https://xcellerator.github.io/posts/linux_rootkits_02/
Linux Rootkits Part 2: Ftrace and Function Hooking
Linux Rootkits Part 2: Ftrace and Function Hooking :: TheXcellerator
Okay, so you’ve built your first kernel module, but now you want to make it do something cool - something like altering the behaviour of the running kernel. The way we do this is by function hooking, but the question is - how do we know which functions to…
👍1
Gitpod remote code execution 0-day vulnerability via WebSockets https://snyk.io/blog/gitpod-remote-code-execution-vulnerability-websockets/
Snyk Labs
Gitpod remote code execution 0-day vulnerability via WebSockets | Snyk Labs
Using compilation units for binary diffing https://github.com/joxeankoret/diaphora/blob/master/doc/articles/compilation_units.md
GitHub
diaphora/doc/articles/compilation_units.md at master · joxeankoret/diaphora
Diaphora, the most advanced Free and Open Source program diffing tool. - joxeankoret/diaphora
Persistence Techniques That Persist https://www.cyberark.com/resources/threat-research-blog/persistence-techniques-that-persist
Cyberark
Persistence Techniques That Persist
Abstract Once threat actors gain a foothold on a system, they must implement techniques to maintain that access, even in the event of restarts, updates in credentials or any other type of change...
Linux Rootkits Part 3: A Backdoor to Root https://xcellerator.github.io/posts/linux_rootkits_03/
Linux Rootkits Part 3: A Backdoor to Root
Linux Rootkits Part 3: A Backdoor to Root :: TheXcellerator
Now that you know how to make a Linux kernel module that can hook any exposed function in kernel memory (Part 1 and Part 2), let’s get down to writing a hook that does something interesting!
In this first example, we’re going to make a rootkit that intercepts…
In this first example, we’re going to make a rootkit that intercepts…