@GranetMan

IT Security Researcher, I'm passionate in #Linux #Arduino #DigitalForensics #CyberSecurity #OpenSource #OpenMind #EthicalHacker Volunteer #ItalianRedCross

 Sicily, Italy
0.0.0.0.org
Joined August 2014
  • Tweets5K
  • Following883
  • Followers816
287Media
A curated list of awesome honeypots, tools, components and much more. github.com/paralax/awesome-h… cc @_odisseus

GitHub - paralax/awesome-honeypots: an awesome list of honeypot resources

an awesome list of honeypot resources. Contribute to paralax/awesome-honeypots development by creating an account on GitHub.

github.com
47
1
63
0-click RCE via MMS exploit for Samsung's Android OS versions O(8.x), P(9.0) and Q(10.0) #Fuzzing CVE-2020-8899 googleprojectzero.blogspot.c… Demo: youtu.be/ZQnb8kRMkHg
3
89
7
229
Enel power company admits ransomware attack - @Ionut_Ilascu bleepingcomputer.com/news/se…
32
2
52
CVE-2020-1301 | Windows SMB Remote Code Execution Vulnerability - all Windows versions affected portal.msrc.microsoft.com/en…
9
313
20
603
Honda investigates possible ransomware attack, networks impacted - @Ionut_Ilascu bleepingcomputer.com/news/se…

Honda investigates possible ransomware attack, networks impacted

Computer networks in Europe and Japan from car manufacturer giant Honda have been affected by issues that are reportedly related to a SNAKE Ransomware cyber-attack.

bleepingcomputer.com
7
109
9
149
Google's indexing of WhatsApp numbers raises privacy concerns - @LawrenceAbrams bleepingcomputer.com/news/se…

Google's indexing of WhatsApp numbers raises privacy concerns

Google is indexing the phone numbers used on WhatsApp, and a researcher is concerned that it could cause privacy issues or be used for malicious purposes.

bleepingcomputer.com
2
29
10
51
About #Android #Joker #Malware from Google Play. First Reading, September 2019 : medium.com/csis-techblog/ana… The "Bread" Family, January 2020: security.googleblog.com/2020… A closer look, February 2020, Joker abused the popularity of the Thunder VPN application: abalabs.com/2020/02/20/a-clo…
9
1
14
L'Italia dell'Innovazione digitale in due tweet. Un'App piena di bug che non servirà a nulla, spreco di denaro pubblico per lo sviluppo e per la task force (erano in 74). Non si sa se sia più servile il primo o l'ultimo tw "abbiamo molto da imparare". #ImmuniApp #Immuni
2
3
1
12
IoT Village hosts talks, occurring over 3 days from May 28-30 (EST Time), by expert security researchers who dissect real-world exploits and vulnerabilities and hacking contests consisting of off-the-shelf IoT devices. iotvillage.org #IoT #DefCon #hacking #CyberSecurity
13
2
13
#NSA warns #Russia-linked APT group is exploiting #Exim flaw since 2019 securityaffairs.co/wordpress… #securityaffairs #hacking #SandWorm

NSA warns Russia-linked APT group is exploiting Exim flaw since 2019

The U.S. NSA warns that Russia-linked APT group known as Sandworm Team has been exploiting a critical flaw in the Exim mail transfer agent (MTA).

securityaffairs.com
NSA: Russian govt hackers exploiting critical Exim flaw since 2019 - @serghei bleepingcomputer.com/news/se…

NSA: Russian govt hackers exploiting critical Exim flaw since 2019

The U.S. National Security Agency (NSA) says that Russian military threat actors tracked as Sandworm Team have been exploiting a critical flaw in the Exim mail transfer agent (MTA) software since at...

bleepingcomputer.com
3
40
4
86
Sandworm Team, Russian GRU Main Center for Special Technologies actors, continue to exploit Exim mail transfer agent #vulnerability, CVE-2019-10149. Patch to the latest version to protect your networks. Learn more here: nsa.gov/News-Features/News-S…
14
369
55
551
Granet retweeted
NSA/CSS
@NSAGov28 May 2020
Russian GRU actors, Sandworm Team, are exploiting a #vulnerability present in unpatched Exim mail transfer agent software. Protect your networks by checking out the latest from @NSACyber
NSA Cyber
@NSACyber28 May 2020
Sandworm Team, Russian GRU Main Center for Special Technologies actors, continue to exploit Exim mail transfer agent #vulnerability, CVE-2019-10149. Patch to the latest version to protect your networks. Learn more here: nsa.gov/News-Features/News-S…
7
61
14
107
SSRF + CRLF + HTTP Pipeline + Docker API = RCE… How dangerous is Request Splitting, a vulnerability in Golang or how we found the RCE in Portainer and hacked Uber link.medium.com/dSWQ6ewPL6

How dangerous is Request Splitting, a vulnerability in Golang or how we found the RCE in Portainer…

Every idea needs a Medium

link.medium.com
4
368
5
842
🔥🔥🔥 Hackers release Unc0ver 5.0.0 — the latest #JAILBREAK tool that can unlock any #iPhone and iPad using an UNPATCHED 0-day #vulnerability, including those running the latest iOS 13.5 version. Details here — thehackernews.com/2020/05/ip… #tech #infosec #cybersecurity #technology
6
210
19
359
QNAP pre-auth root RCE Exploit (CVE-2019-7192 - CVE-2019-7195) github.com/th3gundy/CVE-2019… #QNAP #vulnerability #Exploit #BugBounty
2
85
4
189
I learned a lot tonight. This is what dev tools tells me in Edge by just visiting eBay. The website is port scanning my laptop, bypassing my firewall, and doing it in/from the browser. It checked 14 ports. Let's discuss. 1/5
86
842
130
2,140
Our Elasticsearch honeypot is now open source: gitlab.com/bontchev/elasticp…

Vesselin Bontchev / ElasticPot · GitLab

An Elasticsearch Honeypot

gitlab.com
2
93
1
356
Kaiten: an Undetectable Payload Generator. "This tool is for educational purpose only", yeah of course! 😉 Features - Undetectable Payload Generation - Stealth FUD Payload - Self Signing Certificate - Random Junk code Fresh update on GitHub: github.com/shadowlabscc/Kait…
2
28
1
30
"We want you to do a full penetration against our company, attacking only these 5 critical IPs. Phishing is not in scope, and you can't target any other addresses" they said. I asked: "What about these 200 IP addresses connected to the network that are externally accessible?"
38
104
25
741
Load more