Hacking

How to abuse GitHub Codespaces to deliver malicious content

Researchers demonstrated how to abuse a feature in GitHub Codespaces to deliver malware to victim systems. Trend Micro researchers reported that it is possible to abuse a legitimate feature in the development environment GitHub Codespaces to deliver malware to victim systems. Users can customize their project for GitHub Codespaces by committing configuration files to their repository, which […]

The post How to abuse GitHub Codespaces to deliver malicious content appeared first on Security Affairs.

January 17, 2023
0 comment
Read More >>

What Next?

So i gonna try it again and i hope that mods not gonna delete this post. I found way how to get into school network and get students password. It’s bad protected, my question is, if i gonna say this to somebody who manage school network can i have problem from it? And if so how can I show them the problem si they can fix it. If something is off ,english isn’t my born language.

submitted by /u/Gold-Dig-2351
[link] [comments]

January 17, 2023
0 comment
Read More >>

Patch your Zoho ManageEngine instance immediately! PoC Exploit for CVE-2022-47966 will be released soon

A PoC exploit code for the unauthenticated remote code execution vulnerability CVE-2022-47966 in Zoho ManageEngine will be released soon. The CVE-2022-47966 flaw is an unauthenticated remote code execution vulnerability that impacts multiple Zoho products with SAML SSO enabled in the ManageEngine setup. The issue also impacts products that had the feature enabled in the past. The […]

The post Patch your Zoho ManageEngine instance immediately! PoC Exploit for CVE-2022-47966 will be released soon appeared first on Security Affairs.

January 17, 2023
0 comment
Read More >>

The FBI Identified a Tor User

No details, though:

According to the complaint against him, Al-Azhari allegedly visited a dark web site that hosts “unofficial propaganda and photographs related to ISIS” multiple times on May 14, 2019. In virtue of being a dark web site—­that is, one hosted on the Tor anonymity network—­it should have been difficult for the site owner’s or a third party to determine the real IP address of any of the site’s visitors.

Yet, that’s exactly what the FBI did. It found Al-Azhari allegedly visited the site from an IP address associated with Al-Azhari’s grandmother’s house in Riverside, California. The FBI also found what specific pages Al-Azhari visited, including a section on donating Bitcoin; another focused on military operations conducted by ISIS fighters in Iraq, Syria, and Nigeria; and another page that provided links to material from ISIS’s media arm. Without the FBI deploying some form of surveillance technique, or Al-Azhari using another method to visit the site which exposed their IP address, this should not have been possible…

January 17, 2023
0 comment
Read More >>

Fortinet observed three rogue PyPI packages spreading malware

Researchers discovered three malicious packages that have been uploaded to the Python Package Index (PyPI) repository by Lolip0p group. FortiGuard Labs researchers discovered three malicious PyPI packages (called ‘colorslib’, ‘httpslib’, and “libhttps”) on the PyPI repository that were uploaded by the same actor, Lolip0p. The packages were discovered on January 10, 2023, the packages “colorslib” and […]

The post Fortinet observed three rogue PyPI packages spreading malware appeared first on Security Affairs.

January 17, 2023
0 comment
Read More >>

Flipper Zero worth it?

I’ve been wanting a Flipper Zero for about half a year now, especially since I could never get my pwnagotchi to work. But it’s been a half a year and i’ve progressed significantly since then. I also hear a lot of people with more experience than me tell me it’s not worth the money, you can do everything a Flipper Zero can do cheaper with a Raspberry Pi Zero W and other tools.

Is it worth it? Really the only reason for me to get it now is for the dolphin buddy aesthetic. I’m still a noob at NFC/Bluetooth/radio hacking. Would a Chameleon Tiny Pro or Chameleon Mini Rev G be more useful?

submitted by /u/9x19mm_parabellvm
[link] [comments]

January 17, 2023
0 comment
Read More >>

books

Any book recommendations for a newbie here? A beginers guide if can. submitted by /u/Ryanrence [link] [comments]

January 17, 2023
0 comment
Read More >>