Hacking tutorials retweeted
🚀 Exciting News! The VHL IoT Penetration Testing Essentials course is launching before the end of the month!
Are you ready to dive deep into the world of IoT security and penetration testing?
Sign up for our newsletter and get an exclusive discount! 💰
virtualhackinglabs.com/iot-p…
SniffROM: A tool for passive data capture and reconnaissance of serial flash chips. It is used in conjunction with a Saleae logic analyzer to reconstruct flash memory contents and extract contextual information about device operations.
github.com/alainiamburg/snif…
A Comprehensive Guide on Android Penetration Testing with Frida.
pawanjswal.medium.com/androi…
Hacking tutorials retweeted
New course launch soon!
virtualhackinglabs.com/news/…
curl - SOCKS5 heap buffer overflow - CVE-2023-38545
Affected versions: libcurl 7.69.0 to and including 8.3.0
Not affected versions: libcurl < 7.69.0 and >= 8.4.0
Solution: upgrade to curl 8.4.0 curl.se/docs/CVE-2023-38545.…
Very clear explanation of the issue: daniel.haxx.se/blog/2023/10/…
Severity HIGH security problem to be announced with curl 8.4.0 on Oct 11 · curl/curl · Discussion #12026 · GitHub github.com/curl/curl/discuss…
Hacking tutorials retweeted
🚨 In two days the high severity curl vulnerability (CVE-2023-38545) will be disclosed.
The #KQL queries below create an inventory of all systems that run curl. This will allow you to react quickly once a patch has been pushed, to prevent exploitation.
github.com/Bert-JanP/Hunting…
Hacking tutorials retweeted
🚨 Hundreds of Citrix VPN instances exploited via CVE-2023-3519 are harvesting corporate credentials in cleartext.
At this time, Shodan shows 406 compromised instances with malicious JavaScript code injected into the login page: shorturl.at/qQVX4 (URL shortener because Twitter didn't like my direct links).
Also, I noticed that there is a relatively new and active domain, which is not mentioned in the X-Force report on this campaign (securityintelligence.com/x-f…).
C2/Exfil domain: cloud-js[.]cloud
Hacking tutorials retweeted
1\ How to prove an iphone was wiped 🔎👇
#dfir #mobileforensics
When a user wipes their phone, it generally results in the creation of a file ".obliterated". This file is located:
/private/var/root
This isn't enough to identify the timestamp of when the wipe occurred (...cont)
Red Wizard is an open-source tool designed to provide repeatable, OPSEC-safe infrastructure for Red Teaming operations. secura.com/blog/red-wizard-1
Hackers compromise 3CX desktop app in a supply chain attack bleepingcomputer.com/news/se…
Penetration Testing REST APIs Using Burp Suite - Part 2 mindpointgroup.com/blog/rest…
Penetration Testing REST APIs Using Burp Suite - Part 1 mindpointgroup.com/blog/rest…
Hacking tutorials retweeted
Can you spot the vulnerability? 🔎
This is docker-compose file for the infra of an application
The application allows users to sign up and log in
Show us how you'd take over a victim's account in the comments 👇
The best explanation gets a 25€ SWAG voucher!🎫
GitHub - madhuakula/kubernetes-goat: Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀 github.com/madhuakula/kubern…
GitHub - OWASP/crAPI: completely ridiculous API (crAPI) github.com/OWASP/crAPI
Hacking (with) Grafana, the most widely used solution for monitoring linkedin.com/pulse/hacking-g…
Penetration Testing REST APIs Using Burp Suite - Part 1 mindpointgroup.com/blog/rest…