yodo: Local Privilege Escalation
December 31st, 2017 📆 | 2782 Views ⚑
yodo proves how easy it is to become root via limited sudo permissions, via dirty COW or using Pa(th)zuzu. dirty COW: exploits
Monthly Archives: December 2017
TeamViewer Permissions Hook: injectable C++ dll to change TeamViewer permissions
December 31st, 2017 📆 | 1840 Views ⚑
A proof of concept injectable C++ DLL, that uses naked inline hooking and direct memory modification to change TeamViewer permissions. Features As
Malicious Apps Could Guess Your Phone’s PIN Using Sensors Data
December 31st, 2017 📆 | 3280 Views ⚑
Malicious applications can freely access sensor data on modern smartphones and use this highly sensitive data stream to collect vasts
Crips – IP Tools To quickly get information about IP Address’s, Web Pages and DNS records
December 31st, 2017 📆 | 4978 Views ⚑
This Tools is a collection of online IP Tools that can be used to quickly get information about IP Address’s,
Merlin – A cross-platform post-exploitation HTTP/2 Command & Control server and agent
December 30th, 2017 📆 | 2548 Views ⚑
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang. An introductory blog post can
Huawei router exploit (CVE-2017-17215) involved in Satori and Brickerbot was leaked online
December 30th, 2017 📆 | 1764 Views ⚑
Before Christmas, the Mirai botnet made the headlines once again, a new variant dubbed Satori was responsible for hundreds of thousands of attempts to
Fsociety Hacking Tools Pack – A Penetration Testing Framework
December 30th, 2017 📆 | 1601 Views ⚑
A Penetration Testing Framework , you will have evry script that a hacker needs Menu Information Gathering Password Attacks Wireless Testing Exploitation
PiKarma – Detects Wireless Network Attacks
December 29th, 2017 📆 | 2715 Views ⚑
Detects wireless network attacks performed by KARMA module (fake AP). Starts deauthentication attack (for fake access points) Working Principle for
A Kernel Exploit for Sony PS4 Firmware 4.05 is available online
December 29th, 2017 📆 | 7760 Views ⚑
The developer SpecterDev finally released a fully-functional kernel exploit for PlayStation 4 (firmware 4.05) dubbed ‘namedobj’. Good news for PlayStation
Why Every Hacker Must Know and Use Linux
December 28th, 2017 📆 | 8360 Views ⚑
In many of my tutorials, I have emphasized that a real hacker must know and use Linux, but I thought
Qubes OS – A Security-Oriented Operating System
December 28th, 2017 📆 | 3073 Views ⚑
Qubes OS is a security-oriented operating system (OS). The OS is the software that runs all the other programs on
Lack of cyber security professionals behind recent hacker attacks
December 28th, 2017 📆 | 6890 Views ⚑
Cybersecurity made headlines numerous times this past year, particularly the breach of it. From new streams of ransomware, like Wannacry, which
Relayer – SMB Relay Attack Script
December 28th, 2017 📆 | 2900 Views ⚑
Relayer is an SMB relay Attack Script that automates all the necessary steps to scan for systems with SMB signing disabled and
BruteSpray v1.6.0 – Brute-Forcing from Nmap output (Automatically attempts default creds on found services)
December 27th, 2017 📆 | 5678 Views ⚑
BruteSpray takes nmap GNMAP/XML output and automatically brute-forces services with default credentials using Medusa. BruteSpray can even find non-standard ports by using
How to add a layer of privacy to your conversations using Tor Messenger
December 27th, 2017 📆 | 5461 Views ⚑
Tor Messenger is an anonymous cross-platform messaging app based on the open source Instantbird that allows you to chat via the anonymous Tor
Username Anarchy – Username Tools For Penetration Testing
December 27th, 2017 📆 | 6514 Views ⚑
Tools for generating usernames when penetration testing. Usernames are half the password brute force problem. This is useful for user account/password
Network Printer & Scanner Spoofing Campaign Targets Millions
December 27th, 2017 📆 | 7408 Views ⚑
Spoofed emails purportedly coming from HP, Canon, and Epson network printer-scanner devices are attempting to infect millions of users with
dedsploit – Framework For Attacking Network Protocols
December 26th, 2017 📆 | 4867 Views ⚑
Framework for attacking network protocols and network exploitation. I. Introduction I don’t look back anymore. I don’t regret. I look
Digmine Cryptocurrency Miner spreads via Facebook messenger
December 26th, 2017 📆 | 4106 Views ⚑
Researchers from security firm Trend Micro observed crooks spreading a new cryptocurrency mining bot dubbed Digmine via Facebook Messenger. Watch out for video
TeleShadow v2 – Advanced Telegram Desktop Session Hijacker!
December 26th, 2017 📆 | 4291 Views ⚑
Advanced Telegram Desktop Session Hijacker! Stealing desktop telegrams has never been so easy ! Set the email and sender details of the
Experts from Bleeping Computer spotted a new Cryptomix Ransomware variant
December 26th, 2017 📆 | 7699 Views ⚑
Security experts spotted a new variant of the CryptoMix ransomware that uses a different extension (.FILE) and a new set of contact emails.
Snowden Team Launches App That Turns Your Phone into Mini Surveillance Station
December 25th, 2017 📆 | 8472 Views ⚑
Today, the Freedom of the Press Foundation and the Guardian Project have launched a new Android application named Haven that
Invoke-PSImage – Embeds a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
December 25th, 2017 📆 | 4972 Views ⚑
Embeds a PowerShell script in the pixels of a PNG file and generates a oneliner to execute Invoke-PSImage takes a PowerShell script
Intercepting HTTPS Traffic from Apps on Android 7+ using Magisk & Burp
December 25th, 2017 📆 | 7109 Views ⚑
Intercepting HTTPS traffic is a necessity with any mobile security assessment. By adding a custom CA to Android, this can
-
-
Popular
NoRelationship phishing attack bypasses Microsoft’s… February 23, 2019 Researchers detected a new phishing attack that bypasses Microsoft’s Exchange…
Microsoft Teams CVE-2019-5922 DLL Loading Remote… March 1, 2019 Microsoft Teams is prone to a remote code-execution vulnerability. An…
Fake Royal Bank of Canada Payment Receipt… March 2, 2019 This example is today’s latest spoof or imitation of a…
Crooks offer millions to skilled black hats to help… February 25, 2019 Cybercriminals are offering over a million dollars per year to…
Once hailed as unhackable, blockchains are now… February 22, 2019 Early last month, the security team at Coinbase noticed something…
Google Chrome Zero-Day Vulnerability CVE-2019-5786… March 8, 2019 A new zero-day vulnerability in Google Chrome is actively exploited…
CMSeeK v1.1.1 – CMS Detection And Exploitation… March 4, 2019 What is a CMS? A content management system (CMS) manages…
Experts found an unprotected server exposing online… March 11, 2019 A new mega data leak made the headlines, an unprotected…
Latest
-
mXtract – Memory Extractor & Analyzer
March 22nd | by
-
Pwn2Own 2019 hacking competition is started and participants hacked Apple Safari browser, Oracle VirtualBox and VMware Workstation on the first day
March 22nd | by
-
RapidRepoPull – Tool To Quickly Pull And Install Repos From A List
March 22nd | by
-
News problems for Facebook that admitted to have stored the passwords of hundreds of millions of users in plain text
March 22nd | by
-
Java Card VM Memory Safety
March 22nd | by
-
Remot3d v2.0 – Tool Created For Large Pentesters As Well As Just For The Pleasure Of Defacers To Control Server By Backdoors
March 21st | by
-
Threat actors targeted Office 365 and G Suite cloud accounts using the IMAP protocol to bypass multi-factor authentication (MFA)
March 21st | by
-
Freevulnsearch – Free And Open NMAP NSE Script To Query Vulnerabilities Via The cve-search.org API
March 20th | by
-
Europol announced the EU Law Enforcement Emergency Response Protocol new protocol for law enforcement agencies in the European Union and abroad to handle major cross-border cyberattacks
March 20th | by
Now Trending Topics
-
How to crack "unprotected" wifi that takes you to a username/password screen
by
shiftguy
-
Assistance using Tor's Hammer
by
kaka79
-
A spammer is using my email address
by
tomalot
-
AOL security breach affects a significant number of users
by
elbala32
-
Finding password hashes in OSx
by
consarock
-
Port Forwarding
by
nairhost
-
Security Certifications
by
bland
-
Help me with the MSF Payload
by
fawkes
-
5 alarming things that can be undeleted from your phone using police software
by
maher
-
How do proxys work and which is best?
by
pinka
-
French hacker arrested after bragging on TV
by
frankstein
-
How to crack "unprotected" wifi that takes you to a username/password screen
by
Comments