January 2018 - DigitalMunition

Cyber Attack | Data Breach

Attacker use DDoS attack to hit three major Dutch banks

January 31st, 2018 📅

According to securityweek media reports, the three largest banks in the Netherlands (ABN Amro, Rabobank and ING Bank) said on January 29

Security-Distro

DietPi v6.0 releases, Lightweight justice for your single-board computer

January 31st, 2018 📅

Lightweight justice for your single-board computer: Optimized Simplified For everyone Optional “ready to run” optimized software choices with dietpi-software. Feature-rich

Cyber Attack | Data Breach

Hackers use phishing attack to steal $4 million IOTA Cryptocurrency

January 31st, 2018 📅

Encrypted currency wallets IOTA recently due to user funds were stolen by a large number of complaints. According to researchers, hackers use phishing

Pentest Tools

lanGhost – A LAN dropbox chatbot controllable via Telegram

January 31st, 2018 📅

A LAN dropbox chatbot controllable via Telegram Installation: You will need a Raspberry Pi with fresh Raspbian/Kali on the SD card, because you don’t

Cyber Attack | Data Breach

Crooks target ATMs with Ploutus-D malware, these are the first confirmed cases of Jackpotting in US

January 31st, 2018 📅

Cybercriminals are targeting ATM machines in the US forcing them to spit out hundreds of dollars with ‘jackpotting‘ attacks. According

Pentest Tools

Injectify – Perform Advanced MiTM Attacks On Websites With Ease

January 30th, 2018 📅

A modern BeEF inspired framework for the 21st century. Cross-platform clients => Web in-browser] and Desktop Electron]. Created from-scratch using pure NodeJS

Hacking News

Thousands Of WordPress Websites Have Been Infected With A Key-logger & In-Browser Cryptocurrency Miner

January 30th, 2018 📅

Security researchers from Sucuri have found that about 2,000 WordPress CMS websites are infected with a malicious script (keylogger) that’s running on

Pentest Tools

Nmap-Vulners – NSE Script Using Some Well-Known Service To Provide Info On Vulnerabilities

January 30th, 2018 📅

NSE script based on Vulners.com API. NSE script using some well-known service to provide info on vulnerabilities. Dependencies: nmap libraries:

Pentest Tools

DEScrypt-CPU-Collision-Cracker – DEScrypt CPU Collision Cracker

January 29th, 2018 📅

A linux based high performance DEScrypt CPU cracker written in c++, it deduces the salt and uses a password list to crack hashes. Why

Papers

How much costs a DDoS attack service? Kaspersky Lab published an analysis on the cost of a DDoS attack and services available in the black markets.

January 29th, 2018 📅

The DDoS attacks continue to be a profitable business in the cyber criminal underground. Powering a DDoS attack against an

Pentest Tools

Infoga – Email Information Gathering

January 29th, 2018 📅

Infoga is a tool for gathering e-mail accounts information (ip,hostname,country,…) from different public sources (search engines, pgp key servers). Is a really

Cyber Attack | Data Breach

ATM vendors warn: ‘Jackpotting’ Attacks Hit U.S. ATMs

January 29th, 2018 📅

The world’s two largest ATM maker Diebold Nixdorf and NCR warned that cybercriminals are targeting the ATM machine in the United States,

Pentest Tools

Twebit – Bitcoin Analysis in Twitter With Machine Learning

January 28th, 2018 📅

Bitcoin analysis with machine learning. How it works? 1- Get tweets from twitter. 2- Filter tweets. 3- Tweet classification with

Malware

Stealth CrossRAT malware targets Windows, MacOS, and Linux systems

January 28th, 2018 📅

Last week a joint report published by security firm Lookout and digital civil rights group the Electronic Frontier Foundation detailed the activity

Pentest Tools

SQLmap Tamper-API – SQLMap Tamper API To Accept Tamper Scripts From All Languages

January 28th, 2018 📅

It’s an API for SQLmap tamper scripts allows you to use your favorite programming language to write your tamper scripts.

Hacking News

Bypassing XSS filters

January 27th, 2018 📅

In the XSS world, there are many tags, events, attributes can be used to execute js. Tag can execute js

Pentest Tools

Blazy – Modern Login Bruteforcer Which Also Tests For CSRF, Clickjacking, Cloudflare and WAF

January 27th, 2018 📅

Blazy is a modern login page bruteforcer. Features Easy target selections Smart form and error detection CSRF and Clickjacking Scanner Cloudflare

Hacking News

Security experts at Trend Micro have analyzed malware and a tool used by the Lazarus APT group in the recent attacks against financial institutions

January 27th, 2018 📅

Security experts at Trend Micro have analyzed the attacks conducted by the notorious Lazarus APT group against financial institutions. The activity of the