Leafminer cyber espionage group targets Middle East
July 30th, 2018 đ
Hackers belonging an Iran-linked APT group tracked as âLeafminerâ have targeted government and various organizations in the Middle East. An Iran-linked APT
Monthly Archives: July 2018
sRDI – Shellcode Implementation Of Reflective DLL Injection
July 30th, 2018 đ
sRDI allows for the conversion of DLL files to position independent shellcode. Functionality is accomplished via two components: C project
US-CERT warns of ongoing cyber attacks aimed at ERP applications
July 30th, 2018 đ
US-CERT warns of cyber attacks on ERP applications, including Oracle and SAP, and refers an interesting report published by Digital Shadows
WTF – A Personal Information Dashboard For Your Terminal
July 30th, 2018 đ
A personal terminal-based dashboard utility, designed for displaying infrequently-needed, but very important, daily data. Quick Start Download and run the
EvilOSX – An Evil RAT (Remote Administration Tool) For macOS/OS X
July 27th, 2018 đ
An evil RAT (Remote Administration Tool) for macOS / OS X. Features Emulate a terminal instance Simple extendable module system No bot
Hackers Hiding Web Shell Logins in Fake HTTP Error Pages
July 27th, 2018 đ
Malware distributors, hackers, and phishing scammers are continuing to use the practice of hiding login forms for their web shells in
Photon – Incredibly Fast Crawler Which Extracts Urls, Emails, Files, Website Accounts And Much More
July 27th, 2018 đ
Photon is a lightning fast web crawler which extracts URLs, files, intel & endpoints from a target. Yep, you can use 100
The source code of the Exobot Android banking trojan has been leaked online
July 25th, 2018 đ
The source code of the Exobot Android banking trojan has been leaked online, researchers already verified its authenticity. The source code
Git-Secrets – Prevents You From Committing Secrets And Credentials Into Git Repositories
July 25th, 2018 đ
Prevents you from committing passwords and other sensitive information to a git repository. Synopsis git secrets --scan -r|--recursive] --cached] --no-index] --untracked] <files>...] git secrets
CVE-2018-5383 Bluetooth flaw allows attackers to monitor and manipulate traffic
July 25th, 2018 đ
Security researchers have found a high severity flaw (CVE-2018-5383) affecting some Bluetooth implementations that allow attackers to manipulate traffic. Security researchers at the
Cred Scanner – A Simple File-Based Scanner To Look For Potential AWS Access And Secret Keys In Files
July 25th, 2018 đ
A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other,
Repokid – AWS Least Privilege For Distributed, High-Velocity Deployment
July 24th, 2018 đ
Repokid uses Access Advisor provided by Aardvark to remove permissions granting access to unused services from the inline policies of IAM roles
TA505 gang abusing PDF files embedding SettingContent-ms to distribute FlawedAmmyy RAT
July 24th, 2018 đ
Proofpoint uncovered a massive malspam campaign leveraging emails delivering weaponized PDF documents containing malicious SettingContent-ms files. Security experts from Proofpoint
NETworkManager – A Powerful Tool For Managing Networks And Troubleshoot Network Problems
July 24th, 2018 đ
A powerful tool for managing networks and troubleshoot network problems! Features Network Interface – Information, Configure IP-Scanner Port-Scanner Ping Traceroute
Scout2 – Security Auditing Tool For AWS Environments
July 23rd, 2018 đ
Scout2 is a security tool that lets AWS administrators assess their environment’s security posture. Using the AWS API, Scout2 gathers
Experts discovered Calisto macOS Trojan, the first member of Proton RAT family
July 23rd, 2018 đ
Security experts from Kaspersky Lab have discovered a precursor of the infamous Proton macOS malware that was named Calisto. Malware researchers from
Hindsight – Internet History Forensics For Google Chrome/Chromium
July 23rd, 2018 đ
Hindsight is a free tool for analyzing web artifacts. It started with the browsing history of the Google Chrome web browser and
Camelishing – Social Engineering Tool
July 21st, 2018 đ
Camelishing Social Engineering Tool Features Bulk email sending Basic Python Agent Creator Office Excel Macro Creator DDE Excel Creator(or
Expert discovered RoboCent AWS S3 bucket containing US votersâ records exposed online
July 21st, 2018 đ
A security researcher has discovered that the US political robocall firm RoboCent exposed personal details of hundreds of thousands of US voters.
Seeker – Find GeoLocation With High Accuracy
July 20th, 2018 đ
Seeker utilizes HTML5, Javascript, JQuery and PHP to grab Device Information and GeoLocation with High Accuracy. Other tools and services offer IP Geolocation which is not very accurate
QUASAR, SOBAKEN AND VERMIN RATs involved in espionage campaign on Ukraine
July 20th, 2018 đ
Security experts from ESET uncovered an ongoing cyber espionage campaign aimed at Ukrainian government institutions and involving three different RATs, including
Scan your exposure to domain and subdomain hijacking over 10’s of cloud providers
July 20th, 2018 đ
Domain Hijacking is a well-known security issue that can be carried in many different ways. In addition to social engineering
memrepl: Memory inspection REPL interface
July 18th, 2018 đ
The idea is that the researcher can perform database like queries to get information about the contents and layout of the memory
DanaBot Bank Trojan Targets Bank Customers through Phishing Scam
July 18th, 2018 đ
A phishing campaign by the DanaBot Bank Trojan has recently occurred, and criminal elements send emails to potential victims claiming that
-
-
Popular
Expert shares PoC exploit code for remote iOS 12… January 26, 2019 Researcher published a PoC exploit code for critical vulnerabilities that could…
Experts found popular beauty apps in the Play Store… February 6, 2019 Researchers at Trend Micro discovered at least 29 malicious photo…
Zero-Day Virus Forces EHR Downtime at 21 Health… February 2, 2019 On Thursday morning, staff at Canada-based HSN at Sudbury discovered…
LeakLooker – Find Open Databases With Shodan January 26, 2019 Find open databases with Shodan Background: https://medium.com/@woj_ciech/leaklooker-find-open-databases-in-a-second-9da4249c8472 Requirements: Python 3…
WiGLE – Wifi Wardriving (Nethugging Client For… January 26, 2019 Open source network observation, positioning, and display client from the…
Fierce – Semi-Lightweight Scanner That Helps… February 1, 2019 Fierce is a semi-lightweight scanner that helps locate non-contiguous IP space and…
Pown Recon – A Powerful Target Reconnaissance… January 31, 2019 Pown Recon is a target reconnaissance framework powered by graph theory. The…
FTW – Framework For Testing WAFs January 28, 2019 This project was created by researchers from ModSecurity and Fastly to help…
Latest
-
NoRelationship phishing attack bypasses Microsoftâs Exchange Online Protection URL filters
February 23rd | by
-
Cheat Engine – A Development Environment Focused On Modding
February 23rd | by
-
TOR Virtual Network Tunneling Tool 0.3.5.8
February 23rd | by
-
Shodan : security comes up short ! #privacy
February 22nd | by
-
Once hailed as unhackable, blockchains are now getting hacked
February 22nd | by
-
SecLists – A Collection Of Multiple Types Of Lists Used During Security Assessments, Collected In One Place (Usernames, Passwords, URLs, Sensitive Data Patterns, Fuzzing Payloads, Web Shells, And Many More)
February 22nd | by
-
Ways Hackers Can Hack Your Accounts and Passwords
February 22nd | by
-
GameGuardian – Android Game Hack/Alteration Tool
February 21st | by
-
New GandCrab Decryptor Unlocks Files of Updated Ransomware
February 21st | by
Now Trending Topics
-
How to crack "unprotected" wifi that takes you to a username/password screen
by
shiftguy
-
Assistance using Tor's Hammer
by
kaka79
-
A spammer is using my email address
by
tomalot
-
AOL security breach affects a significant number of users
by
elbala32
-
Finding password hashes in OSx
by
consarock
-
Port Forwarding
by
nairhost
-
Security Certifications
by
bland
-
Help me with the MSF Payload
by
fawkes
-
5 alarming things that can be undeleted from your phone using police software
by
maher
-
How do proxys work and which is best?
by
pinka
-
French hacker arrested after bragging on TV
by
frankstein
-
drive.bat virus removal
by
Padavan
-
looking for a command line to auto start my usb in someone elses PC.
by
aradorn
-
How to crack "unprotected" wifi that takes you to a username/password screen
by
Comments