hackertarget.com

Internet facing Vulnerability Scanning & Attack Surface Discovery. Open Source Security tools and intelligence for testing, analysis and defending.

[hackertarget.com @hackertarget]

Due to ongoing outage at Linode, multiple services are currently offline. We hope to be back up and fully operational in the next few hours.

[John Althouse @4A4133]

Announcing the JA4+ Database!
https://t.co/ZqhIkM1dNn

Under *very* active development but ready for use. Expect orders of magnitude more data and JA4+ combinations over the next few months. I recommend downloading the DB and loading up in your data explorer of choice for now.

Everyone has a different use-case for JA4+ so we're trying to make it easy to find what you're looking for. Below are some examples you can do in a data explorer like Elastic.

JA4 to JA4H
JA4 to User-Agent String
JA4 to Application
JA4 to Library
JA4T to Device
JA4X to Device
JA4X to Application
JA4X to Issuers
JA4X to JA4T
etc. etc. etc.

There are so many combinations and use cases for each.

Please send me any feedback, improvement suggestions.

[hackertarget.com @hackertarget]

Build a local Nmap Dashboard with Grafana
https://t.co/YYpSYVKZQN

[hackertarget.com @hackertarget]

Nmap 7.95 released. Loads of new OS and service fingerprints included.
https://t.co/sM5n6uVdwr

[hackertarget.com @hackertarget]

pcap did what - a mini project to visualise zeek logs with grafana
https://t.co/0SoQyph8Ht

[Fox-IT @foxit]

🚨IMPORTANT🚨 We have observed that the implant placed on tens of thousands of Cisco devices has been altered to check for an Authorization HTTP header value before responding [1/3]

[Australian Signals Directorate @ASDGovAu]

! ALERT ! A vulnerability has been found in multiple versions of Fortinet Fortigate devices when SSL-VPN enabled. ACSC recommends organisations apply the available patches immediately, and investigate for signs of compromise. For more details visit https://t.co/1zBXR0EfLJ

[memenetes @memenetes]

Learning kubernetes

[SpiderFoot @spiderfoot]

If you're investigating an organization's internet footprint, you need to check these data sources out!

- @shodanhq
- @censysio
- @binaryedgeio
- @securitytrails
- @hackertarget
- @host
- @viewdns

[hackertarget.com @hackertarget]

@penguinbasher Thanks for the heads up. We have a major upgrade underway to handle increased scan volume.

[Florian Roth ⚡️ @cyb3rops]

.. that I was able to help people uncover threats, prevent further damage, determine the extent of the compromise, kick out the bad guys & ruin their day

Our industry has significant demand for detection engineers that support DFIR & SOC teams

Learn YARA, Suricata, Sigma, Zeek!

[nixCraft 🐧 @nixcraft]

And now it is time for some lighthearted humor 🤣

[Florian Roth ⚡️ @cyb3rops]

What people seem to miss:
The #Log4Shell vulnerability isn't just a RCE 0day.
It's a vulnerability that causes hundreds and thousands of 0days in all kinds of software products.
It's a 0day cluster bomb.

[hackertarget.com @hackertarget]

List of products / vendors with log4j response & info. https://t.co/V5W3NuHgKG

[hackertarget.com @hackertarget]

In case you missed the news there is a vulnerability in log4j. It is a bad one. If you run java in your org you likely have work to do.

[hackertarget.com @hackertarget]

@mo1cyber Please confirm account details using contact form and we will get this sorted. https://t.co/K9tDEz35yk

[SpiderFoot @spiderfoot]

More modules! Just merged two new modules from @thetechr0mancer - Sublist3r and DNSDumpster (from the great @hackertarget team).

Stopped counting how many modules we have now, but it's over 200. Reply with any we are missing!

On master: https://t.co/NvScnUErx6

#OSINT

[hackertarget.com @hackertarget]

@g_corre Thanks for heads up. Endpoint was having issues, and monitoring missed it.

[Mandiant (part of Google Cloud) @Mandiant]

Everyone's heard of #CobaltStrike. But do you know how it works? Don't worry. @ramen0x3f has you covered.

Read the blog post 👉 https://t.co/wtDlzsKRxP

[hackertarget.com @hackertarget]

Extending DetectionLab. A Vagrantfile to deploy Ubuntu with #osquery and ossec pre-configured to send logs to #Splunk on Logger. https://t.co/sHH209Iosr