Channel Public Channel

cKure Red

@ckured

The director's cut on critical feeds from InfoSec world 🌎

Main Channel: @cKure

☕️ or queries email us
📨 i@ckure.org

Open in Telegram

Subscribers: 2.79K
Photos: 73
Videos: 71
Links: 483

Showing posts older than #38 · Back to latest

Older Posts 20 shown

Post #37 737 Oct 21, 2021, 20:47 UTC

CVE-2021-35052: WinRar remote code execution.

WinRAR’s vulnerable trialware: when free software isn’t free.

https://swarm.ptsecurity.com/winrars-vulnerable-trialware-when-free-software-isnt-free/

https://thehackernews.com/2021/10/bug-in-free-winrar-software-could-let.html

Post #36 786 Oct 14, 2021, 09:17 UTC

Old but Gold: Bypassing the Air-Gap system for sensitive info.

Your body reveals your password by interfering with Wi-Fi

https://dl.acm.org/doi/10.1145/2976749.2978397

http://www.theregister.co.uk/2016/11/13/researchers_point_finger_at_handy_smartphone_exploit/

The Register Your body reveals your password by interfering with Wi-Fi Wave goodbye to security if crims can pop a MIMO router

Post #35 806 Oct 14, 2021, 06:17 UTC

Deepfence ThreatMapper helps you to monitor and secure your running applications, in Cloud, Kubernetes, Docker, and Fargate Serverless.

https://github.com/deepfence/ThreatMapper

GitHub GitHub - deepfence/ThreatMapper: Open Source Cloud Native Application Protection Platform (CNAPP) Open Source Cloud Native Application Protection Platform (CNAPP) - deepfence/ThreatMapper

Post #34 325 Oct 8, 2021, 07:17 UTC

Breaking: India 🇮🇳: Activists in Togo 🇹🇬 attacked by Indian made spyware.

OSINT report by Amnesty International of a Cyber-Crime apparently by an Indian company that has been linked to the infrastructure used by Donot Group and an Indian cybersecurity company Innefu Labs.

Report: https://github.com/blackorbird/APT_REPORT/blob/master/Donot/Donot%20Group%20%26%20Innefu%20Labs.pdf

GitHub APT_REPORT/Donot/Donot Group & Innefu Labs.pdf at master · blackorbird/APT_REPORT Interesting APT Report Collection And Some Special IOCs - blackorbird/APT_REPORT

Post #33 678 Oct 7, 2021, 05:33 UTC

Zero-Day Exploit code: Cisco RV110W UPnP 0day 分析.

https://github.com/badmonkey7/CVE-2021-34730

GitHub GitHub - badmonkey7/CVE-2021-34730: Cisco RV110w UPnP stack overflow Cisco RV110w UPnP stack overflow . Contribute to badmonkey7/CVE-2021-34730 development by creating an account on GitHub.

Post #32 721 Oct 6, 2021, 22:00 UTC

Twitch Data-Leak original post copy and link.

Archived at https://sizeof.cat/

Post #30 Oct 5, 2021, 16:54 UTC

cKure Red pinned «☆ Breaking: Phrack 72 has been released. http://phrack.org/issues/70/1.html»

Post #29 781 Oct 5, 2021, 16:54 UTC

☆ Breaking: Phrack 72 has been released.

http://phrack.org/issues/70/1.html

Phrack Introduction Phrack! We're back! It was only five years ago that issue 0x45 was released. It may sound bad, but it is also, indeed, quite bad. Issue 0x45 was released four years after issue 0x44. And we are now five years after that. Just trying to set the context here.…

Post #28 808 Oct 5, 2021, 10:35 UTC

● Yet another website: aaqeel01.wordpress.com (Malware Research Website)

Post #27 761 Oct 4, 2021, 21:12 UTC

Updated list of Hacking channels on telegram: https://t.me/cKure/7364

Telegram cKure ● Sharing is Caring. Thenceforth, sharing some of the prominent hacking channels and groups on telegram. The list is ordered as per content quality. However, there could be inconsistency in a few places. Please note that some of the channels are owned…

Post #26 582 Oct 3, 2021, 16:44 UTC

PANDORA PAPERS

The largest investigation in journalism history exposes a shadow financial system that benefits the world’s most rich and powerful.

https://www.icij.org/investigations/pandora-papers/

Post #25 614 Oct 3, 2021, 16:44 UTC

🔧 Tool: TrevorC2 - Command and Control via Legitimate Behavior over HTTP

https://github.com/trustedsec/trevorc2

GitHub GitHub - trustedsec/trevorc2: TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert… TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution. - trustedsec/trevorc2

Post #24 248 Sep 29, 2021, 22:10 UTC

● One of the android devices used to administer this channel was accessed remotely, a few hours ago by an unknown entity.

No modifications to data were noticed on the device.

Post #23 596 Sep 28, 2021, 18:58 UTC

Latest FinFisher spyware upgrades 'particularly worrying,' says Kaspersky.

Eight-month analysis finds four-layer obfuscation, two-stage loader, and a new UEFI attack

https://go.theregister.com/feed/www.theregister.com/2021/09/28/kasperky_finfisher_spyware_report/

The Register Latest FinFisher spyware upgrades 'particularly worrying,' says Kaspersky Eight-month analysis finds four-layer obfuscation, two-stage loader, and a new UEFI attack

Post #22 721 Sep 23, 2021, 16:42 UTC

PandoraFMS 755 - Chained XSS + .htaccess RCE.

https://k4m1ll0.com/chained_exploit_htaccess.html

K4M1Ll0 CVE Chained Exploit htaccess PandoraFMS cve-chained-exploit-htaccess

Post #20 654 Sep 21, 2021, 13:56 UTC

iOS 15 iCloud Private Relay Vulnerability Identified.

https://fingerprintjs.com/blog/ios15-icloud-private-relay-vulnerability/

Fingerprint iOS 15 iCloud Private Relay Vulnerability Identified Learn more about this vulnerability in Apple’s new iCloud Private Relay service and how you can prevent your data from being leaked.

Post #19 217 Sep 20, 2021, 20:34 UTC

Cyber-Attack by India 🇮🇳 on Pakistan 🇵🇰 and China 🇨🇳 as Windows Zero-Day(s) made by United States 🇺🇸 company used in spy campaign.

India apparently leaked the Zeroday details and were used by rogue hacking units of South Korea 🇰🇷 (non-state sponsored).

https://www.forbes.com/sites/thomasbrewster/2021/09/17/exodus-american-tech-helped-india-spy-on-china/

Forbes Exclusive: An American Company Fears Its Windows Hacks Helped India Spy On China And Pakistan Texas-based Exodus Intelligence says it had to cut ties with India after its research into Windows security was weaponized to attack China and Pakistan. It’s now looking into whether or not its valuable code leaked to other nations.

Post #18 772 Sep 17, 2021, 19:43 UTC

cKure Red BDREvilDecryptor.exe

REvil_documentation.pdf720.2 KB

Post #17 785 Sep 17, 2021, 19:43 UTC

BDREvilDecryptor.exe9.3 MB

Bitdefender Offers Free Universal Decryptor for REvil/Sodinokibi Ransomware

https://www.bitdefender.com/blog/labs/bitdefender-offers-free-universal-decryptor-for-revil-sodinokibi-ransomware

Post #16 890 Sep 16, 2021, 10:41 UTC

cKure Red CVE-2021-40444 PoC https://github.com/lockedbyte/CVE-2021-40444

Fully Weaponized CVE-2021-40444

Malicious docx generator to exploit CVE-2021-40444 (Microsoft Office Word Remote Code Execution), works with arbitrary DLL files.

https://github.com/klezVirus/CVE-2021-40444

GitHub GitHub - klezVirus/CVE-2021-40444: CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit - klezVirus/CVE-2021-40444

Older posts →