Granet

IT Security Researcher, I'm passionate in #Linux #Arduino #DigitalForensics #CyberSecurity #OpenSource #OpenMind #EthicalHacker
Volunteer #ItalianRedCross

[Granet @GranetMan]

A curated list of awesome honeypots, tools, components and much more. https://t.co/MtQffan3jC cc @_odisseus

[Lukas Stefanko @LukasStefanko]

0-click RCE via MMS exploit for Samsung's Android OS versions O(8.x), P(9.0) and Q(10.0) #Fuzzing CVE-2020-8899
https://t.co/Qeyq7ACjoN
Demo: https://t.co/VL7eL03SrD

[BleepingComputer @BleepinComputer]

Enel power company admits ransomware attack - @Ionut_Ilascu
https://t.co/bEr9tGInuY

[Florian Roth ⚡️ @cyb3rops]

CVE-2020-1301 | Windows SMB Remote Code Execution Vulnerability

- all Windows versions affected

https://t.co/dNZfQrSgPv

[BleepingComputer @BleepinComputer]

Honda investigates possible ransomware attack, networks impacted - @Ionut_Ilascu
https://t.co/kiQ77eIeRs

[BleepingComputer @BleepinComputer]

Google's indexing of WhatsApp numbers raises privacy concerns - @LawrenceAbrams
https://t.co/Dc6xcvX1OV

[Odisseus @_odisseus]

About #Android #Joker #Malware from Google Play.

First Reading, September 2019 :
https://t.co/AwXoVI2cRK

The "Bread" Family, January 2020:
https://t.co/QL6gyad4y6

A closer look, February 2020, Joker abused the popularity of the Thunder VPN application:
https://t.co/ye9n3g8z7l

[Odisseus @_odisseus]

L'Italia dell'Innovazione digitale in due tweet.

Un'App piena di bug che non servirà a nulla, spreco di denaro pubblico per lo sviluppo e per la task force (erano in 74).

Non si sa se sia più servile il primo o l'ultimo tw "abbiamo molto da imparare".

#ImmuniApp #Immuni

[Granet @GranetMan]

IoT Village hosts talks, occurring over 3 days from May 28-30 (EST Time), by expert security researchers who dissect real-world exploits and vulnerabilities and hacking contests consisting of off-the-shelf IoT devices.

https://t.co/0ajcDmh6nv #IoT #DefCon #hacking #CyberSecurity

[Granet @GranetMan]

#NSA warns #Russia-linked APT group is exploiting #Exim flaw since 2019
https://t.co/XxBEZoxZpD
#securityaffairs #hacking #SandWorm

[BleepingComputer @BleepinComputer]

NSA: Russian govt hackers exploiting critical Exim flaw since 2019 - @serghei
https://t.co/TaP2sRSkRq

[NSA Cyber @NSACyber]

Sandworm Team, Russian GRU Main Center for Special Technologies actors, continue to exploit Exim mail transfer agent #vulnerability, CVE-2019-10149.

Patch to the latest version to protect your networks. Learn more here: https://t.co/6HU3mSPam9

[NSA/CSS @NSAGov]

Russian GRU actors, Sandworm Team, are exploiting a #vulnerability present in unpatched Exim mail transfer agent software.

Protect your networks by checking out the latest from @NSACyber

[Andrei Abakumov @andrewaeva]

SSRF + CRLF + HTTP Pipeline + Docker API = RCE…
How dangerous is Request Splitting, a vulnerability in Golang or how we found the RCE in Portainer and hacked Uber
https://t.co/rc1N9qOXnL

[The Hacker News @TheHackersNews]

🔥🔥🔥 Hackers release Unc0ver 5.0.0 — the latest #JAILBREAK tool that can unlock any #iPhone and iPad using an UNPATCHED 0-day #vulnerability, including those running the latest iOS 13.5 version.

Details here — https://t.co/iFbDL1Z5Cr

#tech
#infosec
#cybersecurity
#technology

[Yunus YILDIRIM @Th3Gundy]

QNAP pre-auth root RCE Exploit (CVE-2019-7192 - CVE-2019-7195)
https://t.co/lhmRDoa5M4

#QNAP #vulnerability #Exploit #BugBounty

[Jack Rhysider 🏴‍☠️ @JackRhysider]

I learned a lot tonight. This is what dev tools tells me in Edge by just visiting eBay.

The website is port scanning my laptop, bypassing my firewall, and doing it in/from the browser.

It checked 14 ports.

Let's discuss. 1/5

[Vess @VessOnSecurity]

Our Elasticsearch honeypot is now open source:

https://t.co/1cYMIc6GJP

[Odisseus @_odisseus]

Kaiten: an Undetectable Payload Generator. "This tool is for educational purpose only", yeah of course! 😉

Features
- Undetectable Payload Generation
- Stealth FUD Payload
- Self Signing Certificate
- Random Junk code

Fresh update on GitHub:
https://t.co/OIPgKnXaOj

[David Evenden @JediMammoth]

"We want you to do a full penetration against our company, attacking only these 5 critical IPs. Phishing is not in scope, and you can't target any other addresses" they said.

I asked: "What about these 200 IP addresses connected to the network that are externally accessible?"