January 2019 - DigitalMunition

Uncle Spufus – A Tool That Automates Mac Address Spoofing

January 31st, 2019 📅

A tool that automates Mac address spoofing What is Uncle Spufus Uncle Spufus is a tool that automates MAC address

Facebook paid teens $20 to install a Research App that spies on them

January 31st, 2019 📅

Facebook is paying teens $20 a month to use its VPN app, called Facebook Research, that monitors their activity via

Pown Recon – A Powerful Target Reconnaissance Framework Powered By Graph Theory

January 31st, 2019 📅

Pown Recon is a target reconnaissance framework powered by graph theory. The benefit of using graph theory instead of flat table representation

CIRTKit – Tools For The Computer Incident Response Team

January 30th, 2019 📅

One DFIR console to rule them all. Built on top of the Viper Framework Documentation Please see the wiki for more information about

DNS DDoS Attack Protections to be Forcefully Enabled for Non-Compliant Sites

January 30th, 2019 📅

Multiple DNS software and service providers will update their DNS software to speed up DNS traffic and fight against DDoS attacks by stopping

New Mac Malware Uses Steganography to Sneak Into Computers

January 28th, 2019 📅

Most malware that pops up online targets Windows, but Apple’s platform is not immune. There’s a particularly sneaky new piece of malicious

FTW – Framework For Testing WAFs

January 28th, 2019 📅

This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASPCore Ruleset

identYwaf – Blind WAF Identification Tool

January 28th, 2019 📅

identYwaf is an identification tool that can recognize web protection type (i.e. WAF) based on blind inference. Blind inference is being done by

LeakLooker – Find Open Databases With Shodan

January 26th, 2019 📅

Find open databases with Shodan Background: https://medium.com/@woj_ciech/leaklooker-find-open-databases-in-a-second-9da4249c8472 Requirements: Python 3 Shodan paid plan, except Kibana search Put your Shodan API key in line 65

Hacking News

Expert shares PoC exploit code for remote iOS 12 jailbreak On iPhone X

January 26th, 2019 📅

Researcher published a PoC exploit code for critical vulnerabilities that could be chained to implement an iOS jailbreak On iPhone X

Pentest Tools

WiGLE – Wifi Wardriving (Nethugging Client For Android)

January 26th, 2019 📅

Open source network observation, positioning, and display client from the world’s largest queryable database of wireless networks. Can be used

Vulnerabilties

Cisco addresses flaws in its products, including Small Business routers and Webex

January 26th, 2019 📅

Cisco released security updates for several products, including SD-WAN, Webex, Firepower, IoT Field Network Director, Identity Services Engine, and Small

Security-Distro

ProcDump – A Linux Version Of The ProcDump Sysinternals Tool

January 25th, 2019 📅

ProcDump is a Linux reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for

Malware

URLhaus identified and shut down 100,000 malware sites in 10 Months

January 25th, 2019 📅

Security experts participating in the abuse.ch project called URLhaus have identified and shut down roughly 100,000 malware distribution sites The

Pentest Tools

Jok3R – Network And Web Pentest Framework

January 24th, 2019 📅

Jok3r is a Python3 CLI application which is aimed at helping penetration testers for network infrastructure and web black-box security tests. Its

Vulnerabilties

A flaw in MySQL could allow rogue servers to steal files from clients

January 24th, 2019 📅

A rogue MySQL server could be used to steal files from clients due to a design flaw in the popular

Pentest Tools

Beebug – A Tool For Checking Exploitability

January 23rd, 2019 📅

beebug is a tool that can be used to verify if a program crash could be exploitable. This tool was presented

Hacking News

DNC: Russian Hackers Targeted Staffers After Midterms

January 23rd, 2019 📅

The Democratic National Committee (DNC) has claimed that one of the same Russian hacking groups blamed for leaking sensitive information

Pentest Tools

Conpot – An Open Industrial Control Honeypot

January 23rd, 2019 📅

Conpot is an ICS honeypot with the goal to collect intelligence about the motives and methods of adversaries targeting industrial control systems Documentation The

Pentest Tools

WPintel – Chrome Extension Designed For WordPress Vulnerability Scanning And Information Gathering

January 22nd, 2019 📅

WordPress Vulnerability Scanner – Scan for vulnerabilities, version, themes, plugins and much more! WPintel allows you to scan self hosted

Cyber Attack | Data Breach

Fallout Exploit Kit: A deep dive into the exploit kit’s campaigns distributing various malware strains

January 22nd, 2019 📅

Fallout exploit kit was first spotted in a malvertising campaign affecting users in Japan, Korea, the Middle East, Southern Europe,

Pentest Tools

Malice – VirusTotal Wanna Be (Now With 100% More Hipster)

January 22nd, 2019 📅

Malice’s mission is to be a free open source version of VirusTotal that anyone can use at any scale from an independent

Pentest Tools

Remot3d – An Simple Exploit for PHP Language

January 21st, 2019 📅

It’s easy to create a backdoor in an instant, the backdoor can be used in a remote process via a Linux terminal

security

Health-care sector is far too vulnerable to cybersecurity threats

January 21st, 2019 📅

The digitization of health care promises to be transformative for patients and medical practitioners alike. New technologies and techniques — including