February 2019 - DigitalMunition

Cyber Attack | Data Breach

Once hailed as unhackable, blockchains are now getting hacked

February 22nd, 2019 📅

Early last month, the security team at Coinbase noticed something strange going on in Ethereum Classic, one of the cryptocurrencies

Forensics

SecLists – A Collection Of Multiple Types Of Lists Used During Security Assessments, Collected In One Place (Usernames, Passwords, URLs, Sensitive Data Patterns, Fuzzing Payloads, Web Shells, And Many More)

February 22nd, 2019 📅

SecLists is the security tester’s companion. It’s a collection of multiple types of lists used during security assessments, collected in

Papers

Ways Hackers Can Hack Your Accounts and Passwords

February 22nd, 2019 📅

Hacking is growing and is dangerous with advanced technologies. Account and passwords are account to theft by phishing and other

Pentest Tools

GameGuardian – Android Game Hack/Alteration Tool

February 21st, 2019 📅

GameGuardian is a game hack/alteration tool. With it, you can modify money, HP, SP, and much more. You can enjoy

Cryptography

New GandCrab Decryptor Unlocks Files of Updated Ransomware

February 21st, 2019 📅

This is the third update to the prolific GandCrab malware within the past year. Yet another free decryptor is available

Exploit

Apple macOS 10.13.5 Local Privilege Escalation

February 21st, 2019 📅

Apple macOS version 10.13.5 local privilege escalation exploit. MD5 | 4fb63a016edb0c0b8a0cfef904b84b6e Download Source: packetstormsecurity.com

OSINT

OSINT-SPY – Search using OSINT (Open Source Intelligence)

February 21st, 2019 📅

Performs OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers and cyber

Hacking News

Phishers’ new trick for bypassing email URL filters

February 21st, 2019 📅

Phishers have come up with another trick to make Office documents carrying malicious links undetectable by many e-mail security services:

OSINT

BoNeSi – The DDoS Botnet Simulator

February 20th, 2019 📅

BoNeSi, the DDoS Botnet Simulator is a Tool to simulate Botnet Traffic in a testbed environment on the wire. It

Cyber Attack | Data Breach

Australia’s major political parties hacked in ‘sophisticated’ attack ahead of election

February 20th, 2019 📅

Prime Minister Scott Morrison has revealed Australia's political parties suffered cyber attacks alongside the Parliament House computer network several weeks

OSINT

Maltego CE – An Interactive Data Mining Tool That Renders Directed Graphs For Link Analysis

February 20th, 2019 📅

Maltego CE is the community version of Maltego that is available for free after a quick online registration. Maltego CE includes

Exploit

FaceTime Texture Processing Memory Corruption

February 20th, 2019 📅

FaceTime suffers from a memory corruption vulnerability in texture processing. MD5 | b453c6f5d49e62c37885c285bc9f79cd Download Source: packetstormsecurity.com

Forensics

Toyota plans to release the PASTA (Portable Automotive Security Testbed) Car-Hacking Tool on GitHub next month.

February 20th, 2019 📅

Takuya Yoshida from Toyota’s InfoTechnology Center and his colleague Tsuyoshi Toyama are members of a Toyota team that developed the

Exploit

Multiple Dasan GPON Routers Command Injection and Authentication Bypass Vulnerabilities

February 19th, 2019 📅

Multiple Dasan GPON Routers is prone to an authentication-bypass vulnerability and a command-injection vulnerability. An attacker can exploit these issues

Cyber Attack | Data Breach

PoC Exploit Code for recent container escape flaw in runc published online

February 19th, 2019 📅

The Proof-of-concept (PoC) exploit code for a recently discovered vulnerability in runc tracked as CVE-2019-5736 is now publicly available. Last week, Aleksa Sarai, a senior

OSINT

Social Recon – Investigate The Online Presence And Footprint Of Someone

February 19th, 2019 📅

This application locates and compiles information about online personalities, given a username and/or email address. Use this to investigate your

Videos

Facebook login phishing campaign can deceive tech-savvy users

February 19th, 2019 📅

Security experts at Myki have recently discovered a new phishing campaign that could deceive even most tech-savvy users. The technique relies upon

Pentest Tools

HoneyPy – A Low To Medium Interaction Honeypot

February 19th, 2019 📅

A low interaction honeypot with the capability to be more of a medium interaction honeypot. HoneyPy is written in Python2 and is

Exploit

Oracle Java Runtime Environment TTF Font Heap Out-Of-Bounds Read

February 19th, 2019 📅

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 while fuzz-testing the processing of TrueType

Forensics

Egress-Assess – Tool Used To Test Egress Data Detection Capabilities

February 19th, 2019 📅

Egress-Assess is a tool used to test egress data detection capabilities. Setup To setup, run the included setup script, or

Exploit

Multiple Dasan GPON Routers Command Injection and Authentication Bypass Vulnerabilities

February 19th, 2019 📅

Multiple Dasan GPON Routers is prone to an authentication-bypass vulnerability and a command-injection vulnerability. An attacker can exploit these issues

Cyber Attack | Data Breach

Google Translate: A New Tool For hackers to Steal Your Data

February 18th, 2019 📅

With the advancement in technology where digital privacy is turning out to be a false notion, hackers are ranging over

Cryptography

Fibratus – Tool For Exploration And Tracing Of The Windows Kernel

February 18th, 2019 📅

Fibratus is a tool which is able to capture the most of the Windows kernel activity - process/thread creation and termination, context switches, file system I/O,

Exploit

KVM kvm_inject_page_fault Uninitialized Memory Leak

February 18th, 2019 📅

KVM suffers from an uninitialized memory leak vulnerability in kvm_inject_page_fault. MD5 | d143badc5670e32e28cf7e6fb40d4424 Download Source: packetstormsecurity.com