Channel Public Channel

cKure Red

@ckured

The director's cut on critical feeds from InfoSec world 🌎

Main Channel: @cKure

☕️ or queries email us
📨 i@ckure.org

Open in Telegram

Subscribers: 2.79K
Photos: 73
Videos: 71
Links: 482

Showing posts older than #203 · Back to latest

Older Posts 18 shown

Post #202 1.24K Oct 12, 2022, 04:13 UTC

A tool 🔧 to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain.

https://github.com/Dec0ne/ShadowSpray/

GitHub GitHub - Dec0ne/ShadowSpray: A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten Gen… A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain. - Dec0ne/ShadowSpray

Post #201 1.38K Oct 7, 2022, 20:33 UTC

● Yet another website: sqlflow.gudusoft.com (Visualizing SQL queries)

Post #200 1.21K Oct 6, 2022, 16:12 UTC

Tool 🔧 VirusTotalC2: Abusing VirusTotal API to host our C2 traffic, usefull for bypassing blocking firewall rules if VirusTotal is in the target white list.

https://github.com/D1rkMtr/VirusTotalC2

Post #199 1.28K Sep 28, 2022, 19:10 UTC

Interesting thread on malware.

https://twitter.com/k3dg3/status/1575173131198558208

Post #198 1.3K Sep 21, 2022, 17:58 UTC

SSRF in Functional Administrative Support Tool pdf generator.

Vulnerable Software: Functional Administrative Support Tool (FAST) v1.0.

https://hackerone.com/reports/1628209

HackerOne U.S. Dept Of Defense disclosed on HackerOne: SSRF in Functional... ## Summary: I found that it is possible to inject a javascript payload during the PDF form creation process, which is then executed by the checklist application server. ## Vulnerable Software:...

Post #197 1.14K Sep 21, 2022, 15:11 UTC

Zero-Day: Thread on CVE-2022-36804 Atlassian Bitbucket Command Injection Vulnerability.

https://twitter.com/_0xf4n9x_/status/1572052954538192901

X (formerly Twitter) _0xf4n9x_ (@_0xf4n9x_) on X #CVE-2022-36804 Atlassian Bitbucket Command Injection Vulnerability

Post #196 1.07K Sep 20, 2022, 06:24 UTC

Default Credentials Cheat Sheet.

https://github.com/ihebski/DefaultCreds-cheat-sheet

GitHub GitHub - ihebski/DefaultCreds-cheat-sheet: One place for all the default credentials to assist the Blue/Red teamers identifying… One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️ - ihebski/DefaultCreds-cheat-sheet

Post #195 1.57K Sep 12, 2022, 17:14 UTC

IoT: Firmware extraction tactics.

https://youtu.be/nruUuDalNR0

Post #194 1.45K Sep 3, 2022, 14:45 UTC

Malware developer backdoors own malware to steal data from other hackers.

https://www.bleepingcomputer.com/news/security/dev-backdoors-own-malware-to-steal-data-from-other-hackers/amp/

BleepingComputer Dev backdoors own malware to steal data from other hackers Cybercriminals using Prynt Stealer to collect data from victims are being swindled by the malware developer, who also receives a copy of the info over Telegram messaging service.

Post #193 1.03K Sep 1, 2022, 19:43 UTC

Zero-Day: Microsoft found and shared a critical one-click exploit in the Android TikTok app.

https://www.microsoft.com/security/blog/2022/08/31/vulnerability-in-tiktok-android-app-could-lead-to-one-click-account-hijacking/

https://alternativeto.net/news/2022/9/microsoft-found-and-shared-a-critical-one-click-exploit-in-the-android-tiktok-app/

Microsoft News Vulnerability in TikTok Android app could lead to one-click account hijacking Microsoft discovered a high-severity vulnerability in the TikTok Android application, now identified as CVE-2022-28799 and fixed by TikTok, which could have allowed attackers to compromise users' accounts with a single click.

Post #192 960 Sep 1, 2022, 04:08 UTC

Excellent piece of work by investigative journalist Raphael from Rueters on India 🇮🇳 based mercenary hackers used to target lawyers, firms to gain competitive advantage.

https://www.reuters.com/investigates/special-report/usa-hackers-litigation/

Post #191 Aug 31, 2022, 05:22 UTC

cKure Red pinned «State sponsored and supported Cyber-Crime: Documents appear to show that Israeli 🇮🇱 spyware company Intellexa sold a full suite of services around a zero-day affecting both Android and iOS ecosystems. https://twitter.com/vxunderground/status/1562550443712352256…»

Post #190 996 Aug 31, 2022, 05:22 UTC

State sponsored and supported Cyber-Crime: Documents appear to show that Israeli 🇮🇱 spyware company Intellexa sold a full suite of services around a zero-day affecting both Android and iOS ecosystems.

https://twitter.com/vxunderground/status/1562550443712352256

https://www.darkreading.com/vulnerabilities-threats/receipt-8m-ios-zero-day-sale-dark-web

X (formerly Twitter) vx-underground (@vxunderground) on X Leaked documents online show the purchase (and documentation of) an $8,000,000 iOS Remote Code Execution 0day exploit

Post #189 983 Aug 29, 2022, 04:53 UTC

Learning eBPF exploitation.

https://stdnoerr.github.io/writeup/2022/08/21/eBPF-exploitation-(ft.-D-3CTF-d3bpf).html

stdnoerr.github.io Learning eBPF exploitation

Post #186 978 Aug 29, 2022, 04:51 UTC

Zero-Day: Zero-click LPE exploit (CVE-2022-32893) for iOS 16 Beta 7 currently on sale. Selling price - €2,500,000.

Source: Yalu Jailbreak

Post #185 1.09K Aug 27, 2022, 05:38 UTC

Browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling.

https://portswigger.net/research/browser-powered-desync-attacks

PortSwigger Research Browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling The recent rise of HTTP Request Smuggling has seen a flood of critical findings enabling near-complete compromise of numerous major websites. However, the threat has been confined to attacker-accessib

Post #184 1.12K Aug 23, 2022, 19:25 UTC

FBI claims responsibility for taking down rf.ws (RaidForums darknet marketplace).

On 31st Jan, the owner of RF, a citizen of Portugal 🇵🇹 was detained in United Kingdom 🇬🇧

https://youtu.be/Sl9S0XZJgw0

YouTube #1 Hacker Forum: Pwned By FBI Altium 👉 https://www.altium.com/yt/seytonic Follow me on INSTA: https://www.instagram.com/jhonti/ 0:00 Intro 0:48 The Rise Of RaidForums 3:00 'Humble' Beginnings 4:08 Omni Is Not Very Clever 5:06 Scamming The FBI 6:31 The RaidForums Honeypot 7:44 Omni…

Post #183 1.13K Aug 20, 2022, 19:33 UTC

DPRK state-sponsored actors are using cryptographically signed MacOS (Apple 🍎) executables to impersonate coinbase and lure potential jobseekers in installing their spyware.

Older posts →