TGViewer
Channel Public Channel
cKure Red

cKure Red

@ckured

The director's cut on critical feeds from InfoSec world 🌎

Main Channel: @cKure

☕️ or queries email us
📨 i@ckure.org
Open in Telegram
Subscribers
2.79K
Photos
73
Videos
71
Links
482

Showing posts older than #422 · Back to latest

Older Posts 20 shown
Post #421 1.64K
Secator: The swiss army knife 🔪

It is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and is designed to improve productivity for pentesters and security researchers.


https://docs.freelabz.com/
Post #417
cKure Red pinned «Inside the failed attempt to backdoor SSH globally — that got caught by chance. https://doublepulsar.com/inside-the-failed-attempt-to-backdoor-ssh-globally-that-got-caught-by-chance-bbfe628fafdd»
Post #415 1.5K
cKure Red BGGP4: A 420 Byte Self-Replicating UEFI App For x64. https://github.com/netspooky/golfclub/tree/master/uefi/bggp4
Post #413 1.55K
The new cs.github.com search allows for regex, new GitHub Dorks are possible!

Example: For getting SSH and FTP passwords via connection strings with:

/ssh:\/\/.*:.*@.*target\.com/

/ftp:\/\/.*:.*@.*target\.com/
Post #411 1.39K
Security researchers have released a proof-of-concept (PoC) exploit for a critical vulnerability in Fortinet's FortiClient Enterprise Management Server (EMS) software, which is now actively exploited in attacks.

Tracked as CVE-2023-48788, this security flaw is an SQL injection in the DB2 Administration Server (DAS) component discovered and reported by the UK's National Cyber Security Centre (NCSC).

https://www.bleepingcomputer.com/news/security/exploit-released-for-fortinet-rce-bug-used-in-attacks-patch-now/
BleepingComputer Exploit released for Fortinet RCE bug used in attacks, patch now Security researchers have released a proof-of-concept (PoC) exploit for a critical vulnerability in Fortinet's FortiClient Enterprise Management Server (EMS) software, which is now actively exploited in attacks.
Post #410 1.25K
cKure Red Major cyber-security incident may have occurred in Israel as anonymous hacks amid Jewish ✡️ genocide and extermination of Muslims ☪️ in Gaza and West Bank. The information was shared by Israeli media. 》Hackers infiltrating Dimona nuclear reactor, stealing…
Video 📹 shared earlier by the group where they warn the local civilians at Dimona to take precautions.
Post #409 1.3K
Major cyber-security incident may have occurred in Israel as anonymous hacks amid Jewish ✡️ genocide and extermination of Muslims ☪️ in Gaza and West Bank.

The information was shared by Israeli media.

》Hackers infiltrating Dimona nuclear reactor, stealing data.

We have targeted some servers of the baby killer regime's nuclear organisations. In this operation, while wiping and destroying the data, we saved a part of it which includes 7GB data that we will disclose them to the people of the world.


https://twitter.com/anonymous_opil/status/1769756815560990746

https://www.i24news.tv/en/news/israel/defense/artc-hackers-claim-infiltrating-dimona-nuclear-reactor
i24NEWS Hackers claim infiltrating Dimona nuclear reactor, stealing data - i24NEWS The 'Anonymous' group said the attack is its response to the war in Gaza - Click the link for more.
Post #408
cKure Red pinned «llamafile lets you distribute and run LLMs with a single file. https://github.com/Mozilla-Ocho/llamafile https://hacks.mozilla.org/2023/11/introducing-llamafile/ Usage: https://vt.tiktok.com/ZSFaBjUrK/»
Post #404 1.65K
¤ ARM Exploitation - Defeating DEP - executing mprotect()

https://blog.3or.de/arm-exploitation-defeating-dep-executing-mprotect

¤ ARM Exploitation - Defeating DEP - execute system()

https://blog.3or.de/arm-exploitation-defeating-dep-execute-system

¤ ARM Exploitation - Setup and Tools

https://blog.3or.de/arm-exploitation-setup-and-tools

¤ ARM Exploitation: Return oriented Programming (Building ROP Chains)

https://blog.3or.de/arm-exploitation-return-oriented-programming
Post #403 2.34K
Malware reverse engineering for beginners.

Part 1: https://intezer.com/blog/malware-analysis/malware-reverse-engineering-beginners/

Part 2: https://intezer.com/blog/incident-response/malware-reverse-engineering-for-beginners-part-2/
Intezer Malware Reverse Engineering for Beginners - Part 1: From 0x0 - Intezer Reverse engineering malware is the process of dissecting malicious software to understand how it operates, identify its purpose, and build defenses against it. Part 1 covers setting up a safe environment, static and dynamic analysis, assembly language, and…
Post #402 1.6K
Google Chrome V8 CVE-2024-0517 Out-of-Bounds Write Code Execution.

https://blog.exodusintel.com/2024/01/19/google-chrome-v8-cve-2024-0517-out-of-bounds-write-code-execution
Exodus Intelligence Google Chrome V8 CVE-2024-0517 Out-of-Bounds Write Code Execution - Exodus Intelligence By Javier Jimenez and Vignesh Rao Overview In this blog post we take a look at a vulnerability that we found in Google Chrome’s V8 JavaScript engine a few months ago. This vulnerability was patched in a Chrome update on 16 January 2024 and assigned CVE-2024…
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →