More results...
ChopChop is a command-line tool for dynamic application security testing on web applications, initially written by the Michelin CERT. Its goal is to scan several endpoints and identify exposition of services/files/folders through the webroot. Checks/Signatures are declared in a config file (by default: chopchop.yml), fully configurable, and especially by developers. “Chop chop” is a phrase rooted in […]
A command injection vulnerability has been discovered in the D-Link DAP-X1860 range extender, allowing threat actors to execute remote code on affected devices. The CVE ID for this vulnerability has been given as CVE-2023-45208, and the severity is bei…
The latest version of Cobalt Strike 4.9 is now available. This release includes improvements to Cobalt Strike’s post-exploitation capabilities, including the ability to export Beacon without a reflective loader, which adds official support for pr…
Pablo Martínez, a member of the Red Team at cybersecurity firm Entelgy Innotec Security, has uncovered significant vulnerabilities in low-cost video surveillance cameras available for purchase on popular online platforms. His findings shed light on se…
The Trojan War’s famous horse trick inspired the term for cyberattacks, where a user unwittingly downloads a file that causes harm when opened. HUMAN’s Satori Team unveils BADBOX, a cryptic and intricate network of fraud schemes, mirroring …
In the dynamic realm of cybersecurity, vulnerabilities emerge and evolve constantly. The recent discovery of CVE-2023-43770 highlights an alarming Cross-Site Scripting (XSS) flaw in popular webmail software, Roundcube. This article delves deep into the vulnerability, offering a hands-on Proof-of-Concept to understand its intricacies and implications. Join us as we unveil the layers behind this significant […]
In a recent joint effort to bolster national cybersecurity, the National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) have unveiled their findings on the “Top Ten Cyber Security Misconfigurations.”&#…
In the rapidly evolving landscape of Linux systems, vulnerabilities can emerge that challenge even seasoned developers. ‘Building and Configuring: Kernel Exploits on Ubuntu 23.04’ delves deep into the intricacies of kernel vulnerabilities found in Ubuntu’s latest release. Through this guide, we’ll navigate the steps for identifying, building, and exploiting these weaknesses, ensuring you’re equipped with […]
Nightmangle is post-exploitation Telegram Command and Control (C2/C&C) Agent, created by @1N73LL1G3NC3. It was developed as Proof of Concept (POC), that Telegram API can be used by threat actors for post-exploitation and to control their agents.. Nightmangle uses Telegram as a C2 server to communicate between the attacker and the client. However, it can only set […]
In the intricate realm of cyber threats, GootLoader emerges as a formidable challenge. This article delves deep into the intricacies of decoding its payloads and obfuscations. Equipped with hands-on scripts and tools, we aim to guide cybersecurity enthusiasts and professionals through the maze of GootLoader. Get ready for an informative journey. Index JavaScript Decoding Automated […]