Ciphey is an automated decryption tool. Input encrypted text, get the decrypted text back https://github.com/Ciphey/Ciphey
GitHub
GitHub - bee-san/Ciphey: ⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes…
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡ - bee-san/Ciphey
Malwoverview is a first response tool to perform an initial and quick triage in a directory containing malware samples, specific malware sample, suspect URL and domains https://github.com/alexandreborges/malwoverview
GitHub
GitHub - alexandreborges/malwoverview: Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis…
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, ...
App Attest: (Properly!) Protecting iOS apps from Jailbreak Tweaks in iOS 14 https://swiftrocks.com/app-attest-apple-protect-ios-jailbreak
Swiftrocks
App Attest: How to prevent an iOS app's APIs from being abused
As (possibly) a response to jailbreaking become popular again in recent times, Apple has released their own solution to hackers creating compromised versions of your app.
Defense Evasion: Hide Artifacts https://www.hackingarticles.in/defense-evasion-hide-artifacts/
Hacking Articles
Defense Evasion: Hide Artifacts - Hacking Articles
Today, in this article, we will focus on various methods that are implemented by an attacker to evade their detection by hiding artifacts in the
Step-by-step macOS Setup for iOS Research (via @bizzybarney) https://www.mac4n6.com/blog/2020/8/13/step-by-step-macos-setup-for-ios-research-via-bizzybarney
mac4n6.com
Part 1: Step-by-step macOS Setup for iOS Research (via @bizzybarney) — mac4n6.com
CLI…WTF Command line interface (CLI) isn’t for everyone. Trust me; I get it. @iamevltwin forced me out of my comfort zone a few years ago and opened my eyes to the power of Terminal (command prompt on Mac). Now it is pinned to the Dock on every Mac…
Variantes del ataque KrØØk sobre redes WPA2 https://unaaldia.hispasec.com/2020/08/variantes-del-ataque-krook-sobre-redes-wpa2.html
Una al Día
Variantes del ataque KrØØk sobre redes WPA2
Hace unos meses investigadores de ESET descubrieron una vulnerabilidad en chips WI-FI Broadcom y Cypress, ésta fue catalogada como CVE-2019-15126. Lipovský y Svorenčík llamaron a esta vulnerabilidad KrØØk y permite a los atacantes descifrar algunos de los…
CnC communication of a fake Aarogya Setu COVID-19 app https://medium.com/@cryptax/cnc-communication-of-a-fake-aarogya-setu-covid-19-app-810817a36257
Medium
CnC communication of a fake Aarogya Setu COVID-19 app
Aarogya Setu is the Indian open source COVID-19 contact tracing app. Like many other COVID-19 tracing apps, it has many malicious…
Debugging DLL’s – 3 techniques to help you get started https://blog.nviso.eu/2020/08/04/debugging-dlls-3-techniques-to-help-you-get-started/#comments
NVISO Labs
Debugging DLL’s – 3 techniques to help you get started
During some redteam engagements, we find ourselves in the need of writing DLL’s. However, debugging DLL’s is not as easy as it seems, as a DLL isn’t built to run on its own.In thi…
EmoCrash: Exploiting a Vulnerability in Emotet Malware for Defense https://www.binarydefense.com/emocrash-exploiting-a-vulnerability-in-emotet-malware-for-defense/
Bypassing Antivirus with Golang – Gopher it! https://labs.jumpsec.com/2019/06/20/bypassing-antivirus-with-golang-gopher-it/
ReVoLTE attack can decrypt 4G (LTE) calls to eavesdrop on conversations https://www.zdnet.com/article/re-vol-te-attack-can-decrypt-4g-lte-calls-to-eavesdrop-on-conversations/
ZDNET
ReVoLTE attack can decrypt 4G (LTE) calls to eavesdrop on conversations
Academics detail a new attack on 4G encrypted calls. Attack works only when the attacker is on the same base station (mobile tower) as the victim.
Attack of the week: Voice calls in LTE https://blog.cryptographyengineering.com/2020/08/12/attack-of-the-week-voice-calls-in-lte/
A Few Thoughts on Cryptographic Engineering
Attack of the week: Voice calls in LTE
I haven’t written an “attack of the week” post in a while, and it’s been bumming me out. This is not because there’s been a lack of attacks, but mostly because there h…
CVE-2020-1571 Windows Setup Elevation of Privileges Bypass 0day https://github.com/klinix5/Windows-Setup-EoP
iOS security exploiting toolkit https://github.com/Soulghost/iblessing
GitHub
GitHub - Soulghost/iblessing: iblessing is an iOS security exploiting toolkit, it mainly includes application information gathering…
iblessing is an iOS security exploiting toolkit, it mainly includes application information gathering, static analysis and dynamic analysis. It can be used for reverse engineering, binary analysis ...
Raccoon attack allows hackers to break TLS encryption 'under certain conditions' https://www.zdnet.com/article/raccoon-attack-allows-hackers-to-break-tls-encryption-under-certain-conditions/
ZDNet
Raccoon attack allows hackers to break TLS encryption 'under certain conditions'
The Raccoon attack is described as "really hard to exploit" and its conditions as "rare."