cKure

® Twitter handle for Telegram channel Cyber Security News Aggregator.

Archives at (remove extra dot in URL)

Posts b

[cKure @cKure7]

■■■■■ BLINDER: A self-hosted, web-based Blind XSS detection and management tool that delivers real-time notifications via Telegram bot.

The program is under 300 lines of code. And can record victim's battery percentage, NATed IP etc.

https://t.co/YXqOM9sB4d

[cKure @cKure7]

#powergate zero-day attack by Israel 🇮🇱 targeting Hizbollah from Lebanon 🇱🇧

[cKure @cKure7]

■■■□□ Cyber-War: Unclassified zero-day Power-Gate exploit by the Zionist entity (Israel 🇮🇱) likely involved the following steps.

1. Pager firmware 0-day (for custom firmware update) or Kernel 0-day for the OS through the network or by the supply chain attack.

2. Payload (

[cKure @cKure7]

References:
https://t.co/weJkpwT8FL
https://t.co/edGy7kyptJ
https://t.co/XI7NCZFwY0

[cKure @cKure7]

https://t.co/gMLTtkI7gw

[cKure @cKure7]

■■■■□ Cyber-Attack by Israel on Iran: the Jew* at work!

Stuxnet 2.0: Iran 🇮🇷 hit by new, more aggressive variant of powerful industrial control malware.

[cKure @cKure7]

Jalali was quoted as saying by the semi-official ISNA news agency at a news conference marking Iran’s civil defence day. He did not give further details.

*The term Jew referring to the Zionist (as they call themselves) regime.

https://t.co/0ADMscyQ2i

https://t.co/avCly1JROH

[cKure @cKure7]

How an Indian startup (Appin) hacked the world 🌍

https://t.co/yXLTR5RElv

https://t.co/ZZwmXFaHa4

[cKure @cKure7]

■■■■□ Data-Leak by 5-Hands group as they breach tens of millions of records from government and private entities around the globe 🌎

✓ThreatSec
✓GhostSec
✓Stormous
✓Blackforums
✓SiegedSec

[cKure @cKure7]

■■■□□ CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling vulnerability.

https://t.co/Nqx0Cf9ddU

[cKure @cKure7]

■■■■□ Windows: From DA to EA with ESC5.

https://t.co/8kD29peNVe

[cKure @cKure7]

■■■■□ Israel government torpedoed Morocco spyware deal - and caused NSO's competitor QuaDream to shut down.

https://t.co/TOnTGifFrr

[cKure @cKure7]

■■□□□ Cyber-Attack: Non-state actors from Bangladesh and Sudan are launching attacks against Israel and its allies (incl. UAE).

They were able to take-down at least two government websites this weekend.

● https://t.co/KrCJh3iSOq (https://t.co/jbdZxzsOKR)

● moei.…

[cKure @cKure7]

■■■■■ PowerLessShell: Run PowerShell command without invoking powershell.exe.

https://t.co/fPPYtjiDjj