TGViewer
Channel Public Channel
cKure Red

cKure Red

@ckured

The director's cut on critical feeds from InfoSec world 🌎

Main Channel: @cKure

☕️ or queries email us
📨 i@ckure.org
Open in Telegram
Subscribers
2.79K
Photos
73
Videos
71
Links
482

Showing posts older than #313 · Back to latest

Older Posts 20 shown
Post #312 957
Sites scramble to block ChatGPT web crawler after instructions emerge.

User agent token: GPTBot
Full user-agent string: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.0; +https://openai.com/gptbot)

https://arstechnica.com/information-technology/2023/08/openai-details-how-to-keep-chatgpt-from-gobbling-up-website-data/
Ars Technica Sites scramble to block ChatGPT web crawler after instructions emerge Restrictions don't apply to current OpenAI models, but will affect future versions.
Post #311 1.09K
This function combines all the above functions and takes necessary information from the user to change the IP and MAC address, start the responder and tcpdump tools, and run the nbtscan tool.

https://github.com/alperenugurlu/Nac_Bypass_Agent
GitHub GitHub - alperenugurlu/Nac_Bypass_Agent: This function combines all the above functions and takes necessary information from the… This function combines all the above functions and takes necessary information from the user to change the IP and MAC address, start the responder and tcpdump tools, and run the nbtscan tool. - alp...
Post #310 1.2K
STUXNET - TACTICS & TECHNIQUES.pdf3.1 MB
A brief peak onto one of the world's most high profile cases involving nation state actors, millions of dollars and thousands of hours of work involving 5 countries across 3 continents over at least half a decade.
Post #309 1.1K
Exploiting A Flaw In Bitmap Handling In Windows User-mode Printer Drivers.

https://www.zerodayinitiative.com/blog/2023/8/1/exploiting-a-flaw-in-bitmap-handling-in-windows-user-mode-printer-drivers
Zero Day Initiative Zero Day Initiative — Exploiting a Flaw in Bitmap Handling in Windows User-Mode Printer Drivers In this guest blog from researcher Marcin Wiązowski, he details CVE-2023-21822 – a Use-After-Free (UAF) in win32kfull that could lead to a privilege escalation. The bug was reported through the ZDI program and later patched by Microsoft. Marcin has…
Post #307 1.07K
Another approach of Threadless injection discovered by x.com/_EthicalChaos_ in c that loads a module into the target process and stomps it, and reverting back memory protections and original memory state.

● This is untested code and could have unintended consequences.

https://github.com/TheD1rkMtr/D1rkInject
X (formerly Twitter) CCob🏴󠁧󠁢󠁷󠁬󠁳󠁿 (@_EthicalChaos_) on X Ceri Coburn: Hacker | R̷u̷n̷n̷e̷r̷ DIYer| Vizsla Fanboy and a Little Welsh Bull apparently 🏴󠁧󠁢󠁷󠁬󠁳󠁿 Author of poorly coded tools: https://t.co/P6tT2qQksC
Post #304 1.54K
Google Dork - Valuable Extensions.

site:"target[.]com" ext:log | ext:txt | ext:conf | ext:cnf | ext:ini | ext:env | ext:sh | ext:bak | ext:backup | ext:swp | ext:old | ext:~ | ext:git | ext:svn | ext:htpasswd | ext:htaccess
Post #302 1.3K
CVSS 4.0 released
Post #301
cKure Red pinned «DNS Analyzer - Finding DNS vulnerabilities with Burp Suite. https://sec-consult.com/blog/detail/dns-analyzer-finding-dns-vulnerabilities-with-burp-suite»
Post #296 1.18K
cKure Red CVE-2023-29336 (Win32k Elevation of Privilege Vulnerability). PoC released for the bug exploited in attacks. https://blog.avast.com/avast-patches-microsoft-vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29336 https://www.b…
CVE-2023-29336 exploit demo video.

https://youtu.be/fDgq8FyXVvU
YouTube CVE-2023-29336 Exploit Demo on Windows Server 2016 CVE-2023-29336 - Win32k Elevation of Privilege Vulnerability. Our researcher just developed the exploit and passed testing on Windows Server 2016
Post #295 1.8K
CVE-2023-29336 (Win32k Elevation of Privilege Vulnerability). PoC released for the bug exploited in attacks.

https://blog.avast.com/avast-patches-microsoft-vulnerability

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29336

https://www.bleepingcomputer.com/news/security/poc-released-for-windows-win32k-bug-exploited-in-attacks/
Avast Avast discovers and helps patch a major vulnerability Avast researchers discovered a dangerous vulnerability in Microsoft software, then worked with Microsoft to rapidly patch it.
Post #294
cKure Red pinned «Money message ransomware group hacks MSI and steals BIOS / Intel keys which will enable bad actors to code sign the firmware and send as an update to MSI systems. MSI Signing Keys for Intel Boot Guard we're released by the group. Now anyone can sign device…»
Post #293 1.47K
Money message ransomware group hacks MSI and steals BIOS / Intel keys which will enable bad actors to code sign the firmware and send as an update to MSI systems.

MSI Signing Keys for Intel Boot Guard we're released by the group.

Now anyone can sign device firmware with MSI private keys. This represents a long-term persistent risk to be considered by all users.

The data is leaked after MSI ignored to pay the group.

https://vt.tiktok.com/ZSLNqWmTx/

https://www.bleepingcomputer.com/news/security/money-message-ransomware-gang-claims-msi-breach-demands-4-million/

https://www.kaspersky.com/blog/msi-firmware-keys-leak/48300/

https://socradar.io/money-message-ransomware-leaks-msi-signing-keys-for-intel-boot-guard/
Post #292
cKure Red pinned «⚠️ ‘Despicable’ iPhone Hacks In Armenia Find NSO Spyware ‘In Active Warzone’. For the first time, the Israeli company’s spyware has been used in a conflict zone, according to researchers. In mid-2021, Apple sent a warning to Anna Naghdalyan, then a spokesperson…»
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →