April 2018 - DigitalMunition

Pentest Tools

Infection Monkey – An Automated Pentest Tool

April 30th, 2018 📅

The Infection Monkey is an open source security tool for testing a data center’s resiliency to perimeter breaches and internal server

security

GCC 9 will remove support for Intel MPX

April 30th, 2018 📅

Last year, GCC showed signs of discarding the Intel Memory Protection Extensions (MPX). It seems that GCC 9 may completely

Hacking News

Wireless Security Tools SySS Radio Hack Box – Find vulnerabilities in wireless input devices

April 30th, 2018 📅

SySS Radio Hack Box is a wireless keyboard for PoC tool that can help researchers use a wireless keyboard (using

Papers

Cross Site Request Forgery [CSRF-XSRF] Vulnerability

April 30th, 2018 📅

Cross-site request forgery CSRF], also known as one-click attack or session riding or Sea-Surf and abbreviated as CSRF or XSRF, is a type of malicious attack exploit of a website

Vulnerabilties

CheckPoint: PDF files can be used to steal Windows credentials

April 29th, 2018 📅

CheckPoint researchers recently reported that PDF files can be exploited by malicious attackers to steal Windows credentials (NTLM hashes) simply by opening

Pentest Tools

RTA – Framework Designed To Test The Detection Capabilities Against Malicious Tradecraft

April 29th, 2018 📅

RTA provides a framework of scripts designed to allow blue teams to test their detection capabilities against malicious tradecraft, modeled

Hacking News

Black Hat Arsenal Europe 2017 Tool List

April 29th, 2018 📅

On September 30th, 2017 @toolswatch announced the tools selected for Black Hat Arsenal Europe 2017. Most of the selected tools are already present on GitHub

Pentest Tools

Metta – An Information Security Preparedness Tool To Do Adversarial Simulation

April 29th, 2018 📅

Metta is an information security preparedness tool. This project uses Redis/Celery, python, and vagrant with virtualbox to do adversarial simulation.

Pentest Tools

Grok-backdoor – Backdoor With Ngrok Tunnel Support

April 28th, 2018 📅

Grok-backdoor is a simple python based backdoor, it uses Ngrok tunnel for the communication. Ngrok-backdoor can generate windows, linux and mac binaries using Pyinstaller.

Pentest Tools

AutoNSE – Massive NSE (Nmap Scripting Engine) AutoSploit And AutoScanner

April 28th, 2018 📅

Massive NSE (Nmap Scripting Engine) AutoSploit and AutoScanner. The Nmap Scripting Engine (NSE) is one of Nmap’s most powerful and flexible features. It allows

Hacking News

Hackers Crack Nintendo Switch to run Ubuntu 18.04 LTS

April 28th, 2018 📅

Someone just installed the newly released Ubuntu 18.04 LTS (Bionic Beaver) operating system on the Nintendo Switch. A user in the GBAtemp gaming

security

Former NSA expert released a “Do Not Disturb” app to detect Evil Maid Attacks for Mac users

April 28th, 2018 📅

Former US National Security Agency (NSA) hacker recently launched a security application called “Do Not Disturb (DND)” for Apple’s macOS system, claiming

security

Google Gmail adds new security feature to prevent phishing attacks

April 27th, 2018 📅

In an updated blog post on G-Suite blog, Google announced that it will bring a new security feature for Google account holders.

Pentest Tools

Nemesis – A Command-Line Network Packet Crafting And Injection Utility

April 27th, 2018 📅

The Nemesis Project is designed to be a command line based, portable human IP stack for UNIX-like and Windows systems. The suite is broken

Malware

New PyRoMine malware exploits NSA vulnerabilities to mine Monero

April 27th, 2018 📅

The security company Fortinet posted in its blog post on Tuesday that their FortiGuard laboratory research team recently discovered a very destructive

Hacking News

HT-WPS-Breaker: extract the wps pin of vulnerable routers

April 27th, 2018 📅

1720High Touch WPS Breaker HT-WB] is a small tool based on the bash script language, it can help you to

Hacking News

Introduction to Idle/Zombie Scanning

April 26th, 2018 📅

In the penetration testing, information collection is the most important stage, accounting for about 60% of the penetration test. Based

Pentest Tools

34332292-fd28d8c4-e969-11e7-8f7b-39df47652438

luna: open-source web security scanner

April 26th, 2018 📅

Luna is an open-source web security scanner which is based on reduced-code passive scanning framework. You can write a simple python plugin

Cyber Attack | Data Breach

canadian-hacker-behind-massive-yahoo-hack-reveals-russian-connection

Yahoo was fined $35 million by the SEC for data breach in 2014

April 26th, 2018 📅

The U.S. Securities and Exchange Commission (SEC) announced on Tuesday that it imposed a fine of $35 million on Altaba for an allegation of

Pentest Tools

Goddi (Go Dump Domain Info) – Dumps Active Directory Domain Information

April 26th, 2018 📅

Based on work from Scott Sutherland (@_nullbind), Antti Rantasaari, Eric Gruber (@egru), Will Schroeder (@harmj0y), and the PowerView authors. Install Use

Pentest Tools

snallygaster – Scan For Secret Files On HTTP Servers

April 25th, 2018 📅

snallygaster is a Python-based tool that can help you to scan for secret files on HTTP servers, files that are

Hacking News

Oath launches new bug bounty rewards plan

April 25th, 2018 📅

Last week, Chris Nims, chief information security officer of Internet company Oath, officially announced the launch of a unified bug bonus program:

Pentest Tools

StaCoAn – Mobile App Static Analysis Tool

April 25th, 2018 📅

StaCoAn is a cross-platform tool which aids developers, bug bounty hunters and ethical hackers performing mobile app static analysis on

Vulnerabilties

SAML Authentication System Vulnerability Affects Cisco Firepower, AnyConnect, and ASA Products

April 25th, 2018 📅

Recently, Cisco released a set of security patches to resolve the CVE-2018-0229 vulnerability in Security Assertion Markup Language (SAML). The vulnerability could allow an unauthenticated