tpx Security ⠠⠵
2.41K subscribers
2.32K photos
103 videos
24 files
3.97K links
Hacking, ciberseguridad e Inteligencia.
Download Telegram
Exploiting CVE-2017-0199 HTA & Scriptlet File Handler Vulnerability using @vFeed_IO with metasploit exploitdb SAINTscan. All in 1 !! B|
31 yrs ago, while there was no #internet, #ARPANet Addresses was published by 2600 MagazineV0103 #networking #DoD #defence There was no DNS too ;)
Microsoft actualiza Windows resolviendo las vulnerabilidades de la NSA


Varias versiones de Windows se han actualizado a través de Windows Update con la intención de evitar que vuelva a producirse algo como lo de WannaCry. Aquella infección venía de unas vulnerabilidades encontradas por la Agencia de Seguridad Nacional de los Estados Unidos, la NSA, que se filtraron y aprovecharon con un ransomware masivo. Ahora se han filtrado más vulnerabilidades siguiendo la misma línea, y Microsoft se ha dado prisa en lanzar los correspondientes parches de seguridad.

https://www.adslzone.net/2017/06/14/microsoft-actualiza-windows-resolviendo-las-vulnerabilidades-de-la-nsa/
Top university under 'ransomware' cyber-attack

University College London, one of the world's leading universities, has been hit by a major cyber-attack.
The university describes it as a "ransomware" attack, such as last month's cyber-attack which threatened NHS computer systems.
The attack was continuing on Thursday, with access to online networks being restricted.

http://www.bbc.com/news/education-40288548
WIN32/INDUSTROYER
A new threat for
industrial control systems

https://www.welivesecurity.com/wp-content/uploads/2017/06/Win32_Industroyer.pdf
Todo tiene sentido.
Reckless Exploit: Mexican Journalists, Lawyers, and a Child Targeted with NSO Spyware

https://citizenlab.org/2017/06/reckless-exploit-mexico-nso/
Hackearon la página web del ejército argentino y subieron imágenes de ISIS
Pegasus, el programa que espía a los periodistas y activistas mexicanos


El software consiste en un virus que infecta sus teléfonos móviles y accede a toda la información por control remoto

http://internacional.elpais.com/internacional/2017/06/20/mexico/1497920669_881339.html.
CloudFail is a tactical reconnaissance tool which aims to gather enough information about a target protected by CloudFlare in the hopes of discovering the location of the server. Using Tor to mask all requests, the tool as of right now has 3 different attack phases.

Misconfigured DNS scan using DNSDumpster.com.
Scan the Crimeflare.com database.
Bruteforce scan over 2500 subdomains.

https://github.com/m0rtem/CloudFail