November 2017 - DigitalMunition

Web Privacy Measurement Framework: OpenWPM

November 30th, 2017 📅

Web Privacy Measurement is the observation of websites and serves to detect, characterize and quantify privacy-impacting behaviors. Applications of Web

Transparent Man-in-the-Middle TLS Proxy: ratched

November 30th, 2017 📅

ratched is a Man-in-the-Middle (MitM) proxy that specifically intercepts TLS connections. It is intended to be used in conjunction with

Machine Learning Image Steganalysis: Aletheia

November 30th, 2017 📅

Aletheia is a steganalysis tool for the detection of hidden messages in images. The goal of steganalysis is to identify

Linux Memory Cryptographic Keys Extractor: CryKeX

November 30th, 2017 📅

Some work has been already published regarding the subject of cryptograhic keys security within DRAM. Basically, we need to find something that

Amber – POC Reflective PE Packer

November 30th, 2017 📅

Amber is a proof of concept packer, it can pack regularly compiled PE files into reflective PE files that can

Google detects Android Tizi Spyware that spies on popular apps like WhatsApp and Telegram

November 30th, 2017 📅

Google identified a new family of Android malware dubbed Tizi spyware by using Google Play Protect, it spies on popular apps

RIP Internet Privacy: How To Protect Yourself 🌐🔓 — Product Hunt Daily Digest

November 29th, 2017 📅

Thursday wasn't a good day for internet privacy regulation. The Senate voted to make it easier for ISPs like Verizon,

5 information security threats that will dominate 2018

November 29th, 2017 📅

If you thought 2017 was a dire year for data breaches, wait until 2018. The Information Security Forum (ISF), a

Attackers Used Fake Symantec Blog To Distribute Proton MacOS Malware

November 29th, 2017 📅

Security researchers from Malwarebytes Labs found that cyber criminals using fake Symantec blog website to spread Proton malware against macOS users. On

Pipe Finder – Automated script to search in SMB protocol for availables pipe names

November 29th, 2017 📅

Automated script to search in SMB protocol for availables pipe names. Requirements metasploit-framework wget pipe_audit_v2.rb module (https://github.com/peterpt/pipe_auditor_fb) – It will be installed

Papers

From CIA to APT: An Introduction to Cyber Security

November 28th, 2017 📅

Most introductory books on cyber security are either too technical for popular readers, or too casual for professional ones. This

Hacking News

The Cobalt group is exploiting the CVE-2017-11882 Microsoft Office flaw in targeted attacks

November 28th, 2017 📅

A few days after details about the CVE-2017-11882 Microsoft Office flaw were publicly disclosed, the firm Reversing Lab observed Cobalt group using

Pentest Tools

Zeus-Scanner – Advanced Reconnaissance Utility

November 28th, 2017 📅

Zeus is an advanced reconnaissance utility designed to make web application reconnaissance simple. Zeus comes complete with a powerful built-in URL parsing engine, multiple

Pentest Tools

net-Shield – An Easy and Simple Anti-DDoS solution for VPS, Dedicated Servers and IoT devices

November 28th, 2017 📅

An Easy and Simple Anti-DDoS solution for VPS,Dedicated Servers and IoT devices based on iptables. Requirements Linux System with python,

Cryptography

FREE wildcard HTTPS certs from Let’s Encrypt for every Reg reader*

November 27th, 2017 📅

Let's Encrypt plans to begin offering free wildcard certificates in January 2018, a move likely to make web security easier

security

GOLDEN SAML attack technique forges authentication to cloud apps

November 27th, 2017 📅

Golden SAML could be exploited by an attacker to create fake enterprise identities and access to valuable cloud resources. Security

Pentest Tools

ysoserial.net – Deserialization payload generator for a variety of .NET formatters

November 27th, 2017 📅

A proof-of-concept tool for generating payloads that exploit unsafe .NET object deserialization. Description ysoserial.net is a collection of utilities and