November 2018 - DigitalMunition

Experts demonstrate how to exfiltrate data using smart bulbs

November 29th, 2018 📅

Security researchers with Checkmarx developed two mobile applications that abuse the functionality of smart bulbs for data exfiltration. Security researchers

Miasm – Reverse Engineering Framework In Python

November 29th, 2018 📅

Miasm is a free and open source (GPLv2) reverse engineering framework. Miasm aims to analyze / modify / generate binary programs. Here

Widespread Malvertising Campaign Hijacks 300 Million Sessions

November 28th, 2018 📅

Researchers say the bad actor behind the malvertising campaign is still active. A massive malvertising campaign targeting iOS devices hijacked

TIDoS-Framework v1.7 – The Offensive Manual Web Application Penetration Testing Framework

November 28th, 2018 📅

TIDoS Framework is a comprehensive web-app audit framework. let's keep this simple Highlights :- The main highlights of this framework is:

Spotify Phishers Hijack Music Fans’ Accounts

November 28th, 2018 📅

The credentials could be used to glean a variety of intel on the victims. A phishing campaign with a clever

Skiptracer – OSINT Webscaping Framework

November 28th, 2018 📅

Initial attack vectors for recon usually involve utilizing pay-for-data/API (Recon-NG), or paying to utilize transforms (Maltego) to get data mining results. Skiptracer

North Korea-linked group Lazarus targets Latin American banks

November 26th, 2018 📅

According to security reearchers at Trend Micro, the North Korea-linked APT group Lazarus recently targeted banks in Latin America. The North

Skiptracer – OSINT Webscaping Framework

November 26th, 2018 📅

Initial attack vectors for recon usually involve utilizing pay-for-data/API (Recon-NG), or paying to utilize transforms (Maltego) to get data mining results. Skiptracer

Sheepl – Creating Realistic User Behaviour For Supporting Tradecraft Development Within Lab Environments

November 26th, 2018 📅

Sheepl : Creating realistic user behaviour for supporting tradecraft development within lab environments Introduction There are lots of resources available

13 fraudulent apps into Google Play have been downloaded 560,000+ times

November 26th, 2018 📅

The malicious apps could allow attackers to install another app and trick the user into giving the permissions necessary for

Shellver – Reverse Shell Cheat Sheet Tool

November 23rd, 2018 📅

Reverse Shell Cheat Sheet Tool Install Note Clone the repository: git clone https://github.com/0xR0/shellver.git Then go inside: cd shellver/ Then install it:

Understanding Evil Twin AP Attacks and How to Prevent Them

November 23rd, 2018 📅

The attack surface remains largely unprotected from Wi-Fi threats that can result in stolen credentials and sensitive information as well

ACHE – A Web Crawler For Domain-Specific Search

November 21st, 2018 📅

ACHE is a focused web crawler. It collects web pages that satisfy some specific criteria, e.g., pages that belong to

Active XSS Attacks Targeting Amp for WP WordPress Plugin

November 21st, 2018 📅

Vulnerabilities were recently discovered in the popular AMP for WP plugin that allows any registered user to perform administrative actions on

CAINE 10.0 – GNU/Linux Live Distribution For Digital Forensics Project, Windows Side Forensics And Incident Response

November 20th, 2018 📅

CAINE (Computer Aided INvestigative Environment) is an Italian GNU/Linux live distribution created as a Digital Forensics project. Currently, the project manager is Nanni

Why the EU Is More Likely to Drive IT and Security Trends Than the US

November 20th, 2018 📅

The General Data Protection Regulation (GDPR) has been a game changer for data privacy, and U.S. companies are beginning to

Manticore – Symbolic Execution Tool For Analysis Of Binaries And Smart Contracts

November 16th, 2018 📅

Manticore is a symbolic execution tool for analysis of binaries and smart contracts. Note: Beginning with version 0.2.0, Python 3.6+

New Ransomware Strain Evades Detection by All but One Antivirus Engine

November 16th, 2018 📅

Researchers discovered a new strain of Dharma ransomware that is able to evade detection by nearly all of the antivirus

Dirhunt v0.6.0 – Find Web Directories Without Bruteforce

November 12th, 2018 📅

DEVELOPMENT BRANCH: The current branch is a development version. Go to the stable release by clicking on the master branch. Dirhunt

Symantec shared details of North Korean Lazarus’s FastCash Trojan used to hack banks

November 12th, 2018 📅

North Korea-linked Lazarus Group has been using FastCash Trojan to compromise AIX servers to empty tens of millions of dollars

Hackertarget – Tools And Network Intelligence To Help Organizations With Attack Surface Discovery

November 12th, 2018 📅

Use open source tools and network intelligence to help organizations with attack surface discovery and identification of security vulnerabilities. Identification of an organizations vulnerabilities is an

Privacy

VPN vs. proxy: which is better to stay anonymous online?

November 12th, 2018 📅

Most people prefer using proxies over VPN services because they are easy to use and mostly available for free, but

Pentest Tools

3d illustration of a laser scanner on a fingerprint embossed.

Scannerl – The Modular Distributed Fingerprinting Engine

November 10th, 2018 📅

Scannerl is a modular distributed fingerprinting engine implemented by Kudelski Security. Scannerl can fingerprint thousands of targets on a single host, but can just as easily be