curesec

IT-Security Consulting, Penetrationtests, Audits, Hard- and Software Analysis, IT-Security Policies and Training

[curesec @Curesec]

Marco was at MUC:SEC and giving a talk about the SLP vulnerability. Nice evening pre-conference party. See you again next time. Cheers

[curesec @Curesec]

We are doing our first live online training!
As we consider it a BETA one and would love to have feedback from our YOU we lowered the price :)

Topic: x86_32 Assembly and Shellcode-Lab for Linux
Details: 3.10.2023 - 6.10.2023
https://t.co/aUajAEr5tq

[curesec @Curesec]

Marco did a talk at #ChaosCommunicationCamp of #CCC about the #SLP vulnerability. Check it here:

https://t.co/sMliQVQTat

[Bitsight @Bitsight]

@BitSight and @Curesec have jointly discovered a high-severity vulnerability in the Service Location Protocol (SLP), potentially exposing unsuspecting organizations to massive Denial-of-Service (DoS) amplification attacks. Discover more: https://t.co/vjqDblhMei

#DoS #SLP

[curesec @Curesec]

slpload is used to test if a specified ipv4/ipv6 IP is vulnerable to SLP amplification attack. (CVE-2023-29552).

https://t.co/qkDxeJ49E5

#SLP

[curesec @Curesec]

CVE-2023-29552:
Please find our latest published research in regard of the Service Location Protocol Amplification Attack.

https://t.co/BUoknuCm97

#DoS #SLP #AmplificationAttack

[curesec @Curesec]

Tech insights to Nevada Group operations.

[Resecurity® @RESecurity]

Resecurity® has identified a relatively new #ransomware family called “Nevada Ransomware”. On February 1st, the operators behind the project updated the locker for Windows and Linux/ESXi, and distributed new builds for their affiliates.

Learn more 👇:
https://t.co/IkJAI2Ohfh

[curesec @Curesec]

Interesting, the ransomware group behind the #ESXi hack, has (mostly) removed their #bitcoin wallet addresses from the hacked server pages.

[dash @User_to_Root]

1.745 Infected machines by this campaign and probably growing. Search term at #shodan
title:"How to restore your files".

[curesec @Curesec]

@dsopas @User_to_Root A reason must be the Datacenter of OVH. They deliver ESXi systems to international customers. Thesis: Systems located in France, customers located through international.

[curesec @Curesec]

@UK_Daniel_Card @SHODAN Shodan is not scanning for this port.
We have published a tool for the protocol, featuring also listscans. Supported are version 1 and 2. Also we added an info packet for vmware esx servers.
https://t.co/5S9ke8FchI

[curesec @Curesec]

We just published slpscan, a #SLP scanning suite with support for protocol version 1 and 2.

https://t.co/5S9ke8FchI

[curesec @Curesec]

Due the current events in regard of #SLP and the massive #ESXi ransomware hacks, we will publish an internal research tool for investigating SLP.
Stay tuned.

[curesec @Curesec]

@wimremes GPEN

[curesec @Curesec]

Notes on gaining a root shell at a YooSee Robot:
https://t.co/uWpzUEbIwE
#hardware #hacking

[curesec @Curesec]

We are looking forward to an awesome year, full of research and new things to hack about.
#hack2023

[curesec @Curesec]

May 2023 be an awesome year!
Happy New Year!
#Happy2023

[curesec @Curesec]

Security Advisory: VDSL Client Modem ALL-BM100VDSL2: Broken Authentication and Default Root User
Blog: https://t.co/YGM3jQK4c3

[curesec @Curesec]

Security Advisory: VDSL Client Modem ALL-BM100VDSL2: CSRF
Blog: https://t.co/x57r1h7fdB

[curesec @Curesec]

Security Advisory: VDSL Client Modem ALL-BM100VDSL2: XSS
Blog: https://t.co/Vq6uUHMoqV