Web Privacy Measurement Framework: OpenWPM
November 30th, 2017 📅
Web Privacy Measurement is the observation of websites and serves to detect, characterize and quantify privacy-impacting behaviors. Applications of Web
Monthly Archives: November 2017
Transparent Man-in-the-Middle TLS Proxy: ratched
November 30th, 2017 📅
ratched is a Man-in-the-Middle (MitM) proxy that specifically intercepts TLS connections. It is intended to be used in conjunction with
Machine Learning Image Steganalysis: Aletheia
November 30th, 2017 📅
Aletheia is a steganalysis tool for the detection of hidden messages in images. The goal of steganalysis is to identify
Linux Memory Cryptographic Keys Extractor: CryKeX
November 30th, 2017 📅
Some work has been already published regarding the subject of cryptograhic keys security within DRAM. Basically, we need to find something that
Amber – POC Reflective PE Packer
November 30th, 2017 📅
Amber is a proof of concept packer, it can pack regularly compiled PE files into reflective PE files that can
Google detects Android Tizi Spyware that spies on popular apps like WhatsApp and Telegram
November 30th, 2017 📅
Google identified a new family of Android malware dubbed Tizi spyware by using Google Play Protect, it spies on popular apps
RIP Internet Privacy: How To Protect Yourself 🌐🔓 — Product Hunt Daily Digest
November 29th, 2017 📅
Thursday wasn't a good day for internet privacy regulation. The Senate voted to make it easier for ISPs like Verizon,
5 information security threats that will dominate 2018
November 29th, 2017 📅
If you thought 2017 was a dire year for data breaches, wait until 2018. The Information Security Forum (ISF), a
Attackers Used Fake Symantec Blog To Distribute Proton MacOS Malware
November 29th, 2017 📅
Security researchers from Malwarebytes Labs found that cyber criminals using fake Symantec blog website to spread Proton malware against macOS users. On
Pipe Finder – Automated script to search in SMB protocol for availables pipe names
November 29th, 2017 📅
Automated script to search in SMB protocol for availables pipe names. Requirements metasploit-framework wget pipe_audit_v2.rb module (https://github.com/peterpt/pipe_auditor_fb) – It will be installed
From CIA to APT: An Introduction to Cyber Security
November 28th, 2017 📅
Most introductory books on cyber security are either too technical for popular readers, or too casual for professional ones. This
The Cobalt group is exploiting the CVE-2017-11882 Microsoft Office flaw in targeted attacks
November 28th, 2017 📅
A few days after details about the CVE-2017-11882 Microsoft Office flaw were publicly disclosed, the firm Reversing Lab observed Cobalt group using
Zeus-Scanner – Advanced Reconnaissance Utility
November 28th, 2017 📅
Zeus is an advanced reconnaissance utility designed to make web application reconnaissance simple. Zeus comes complete with a powerful built-in URL parsing engine, multiple
net-Shield – An Easy and Simple Anti-DDoS solution for VPS, Dedicated Servers and IoT devices
November 28th, 2017 📅
An Easy and Simple Anti-DDoS solution for VPS,Dedicated Servers and IoT devices based on iptables. Requirements Linux System with python,
FREE wildcard HTTPS certs from Let’s Encrypt for every Reg reader*
November 27th, 2017 📅
Let's Encrypt plans to begin offering free wildcard certificates in January 2018, a move likely to make web security easier
GOLDEN SAML attack technique forges authentication to cloud apps
November 27th, 2017 📅
Golden SAML could be exploited by an attacker to create fake enterprise identities and access to valuable cloud resources. Security
ysoserial.net – Deserialization payload generator for a variety of .NET formatters
November 27th, 2017 📅
A proof-of-concept tool for generating payloads that exploit unsafe .NET object deserialization. Description ysoserial.net is a collection of utilities and
TeleShadow v2 – Advanced Telegram Desktop Session Hijacker!
November 27th, 2017 📅
Advanced Telegram Desktop Session Hijacker! Stealing desktop telegrams has never been so easy ! Set the email and sender details of the
The Endorser – An OSINT tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills
November 26th, 2017 📅
An OSINT tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills. Check out the example (digraph), which
Self-Replicating Malware exploits MS Office Built-In feature
November 26th, 2017 📅
An Italian researcher from the security firm InTheCyber devised an attack technique to create self-replicating malware hidden in MS Word documents.
Crooks set up a fake Symantec Blog to spread the macOS Proton malware
November 25th, 2017 📅
A new strain of the notorious macOS Proton malware is spreading through a blog spoofing the legitimate blog of the security firm Symantec.
DBC2 (DropboxC2) – A Modular Post-Exploitation Tool, Composed Of An Agent Running On The Victim’S Machine
November 25th, 2017 📅
DBC2 (DropboxC2) is a modular post-exploitation tool, composed of an agent running on the victim’s machine, a controler, running on
-
-
Popular
Manticore – Symbolic Execution Tool For… November 16, 2018 Manticore is a symbolic execution tool for analysis of binaries…
Understanding Evil Twin AP Attacks and How to Prevent Them November 23, 2018 The attack surface remains largely unprotected from Wi-Fi threats that…
Widespread Malvertising Campaign Hijacks 300 Million… November 28, 2018 Researchers say the bad actor behind the malvertising campaign is…
Kamerka – Build Interactive Map Of Cameras From Shodan December 1, 2018 Build an interactive map of cameras from Shodan. The script…
Kbd-Audio – Tools For Capturing And Analysing… December 1, 2018 This is a collection of command-line and GUI tools for…
AccuDoc Data Breach impacted 2.6 Million Atrium… December 1, 2018 Hospital network Atrium Health suffered a data breach, hacked accessed…
FBI along with security firms dismantled 3ve Ad… December 1, 2018 FBI along with cybersecurity firms dismantled a sophisticated ad fraud scheme…
Experts demonstrate how to exfiltrate data using smart bulbs November 29, 2018 Security researchers with Checkmarx developed two mobile applications that abuse…
Latest
-
Group-IB identifies leaked credentials of 40,000 users of government websites in 30 countries
December 13th | by
-
Knock v.4.1.1 – Subdomain Scan
December 13th | by
-
Security Culture
December 13th | by
-
Jackhammer – One Security Vulnerability Assessment/Management Tool To Solve All The Security Team Problems
December 13th | by
-
Experts at Yoroi – Cybaze Z-Lab analyzed MuddyWater Infection Chain
December 9th | by
-
Osweep – Don’t Just Search OSINT, Sweep It
December 9th | by
-
Fileless malware surge, warns Malwarebytes report
December 9th | by
-
Hayat – Auditing & Hardening Script For Google Cloud Platform
December 6th | by
-
Kubernetes security flaw allows hackers to infiltrate backend servers
December 6th | by
Now Trending Topics
-
How to crack "unprotected" wifi that takes you to a username/password screen
by
shiftguy
-
Assistance using Tor's Hammer
by
kaka79
-
A spammer is using my email address
by
tomalot
-
AOL security breach affects a significant number of users
by
elbala32
-
Finding password hashes in OSx
by
consarock
-
Port Forwarding
by
nairhost
-
Security Certifications
by
bland
-
How to crack "unprotected" wifi that takes you to a username/password screen
by
Comments