mkarte

[stacksmashing @ghidraninja]

Breaking Bitlocker: Bypassing the Windows Disk Encryption - using less than $10 of equipment

https://t.co/KOL9grIGHi

[Nicolas Krassas @Dinosn]

Exploiting 0-click Android Bluetooth vulnerability to inject keystrokes without pairing https://t.co/0Qi5Cp3AXP

[HackGit @hack_git]

🔎📞 Phunter

A tool a very useful tool for finding information about a phone number.

https://t.co/EjVVge7LV5

#OSINT #infosec #pentesting

[Stephen Sims @Steph3nSims]

Introduction to Reverse Engineering and Debugging https://t.co/TSmDww3jr0

[Nicolas Krassas @Dinosn]

New Outlook Exploit Unveiled: CVE-2023-35636 Leads to NTLM v2 Password Breach https://t.co/CbIUiYgY2e

[Andrea P @decoder_it]

#DfsCoerce is still alive ;) I've created a custom version of original DfcCoerce-exe , with the added feature to specify alternate credentials for authentication if running on non-domain-joined machines or you need to execute it as a different user https://t.co/f1ohTeoaoz

[Sprocket Security @SprocketSec]

Crawl every SMB shares on every target system for juicy information with MANSPIDER!

File types supported:
✅ PDF
✅ DOCX
✅ XLSX
✅ PPTX
✅ any text-based format
✅ and many more!

Install today 👇

https://t.co/U1f40onkxV

[Nicolas Krassas @Dinosn]

apk2url: quickly extract IP and URL endpoints from APKs https://t.co/JQMgGVjXDh

[Nicolas Krassas @Dinosn]

pandora: A red team tool to extract credentials from password managers https://t.co/JN4A7kOhWI

[Nicolas Krassas @Dinosn]

Pmkidcracker - A Tool To Crack WPA2 Passphrase With PMKID Value Without Clients Or De-Authentication https://t.co/Z2ouMFfdqK

[~/w4rell.sh @W4ReLL]

Concernant la faille SSH #Terrapin, bien que "complexe" à exploiter, elle n'est pas à prendre à la légère, alors si vous voulez vérifier si vous êtes concernés, exécutez d'abord l'outil de vérification https://t.co/Sk2lbrtb9o

Mettez à jour ensuite vos systèmes, cette faille concerne clients ET serveurs SSH.

Si vos systèmes ne sont pas encore patchables, modifiez manuellement les ciphers dans vos /etc/ssh/sshd_config.

Ciphers [email protected]

Et redémarrez votre service. Autrement n'hésitez pas à aller jeter un œil sur le site officiel https://t.co/WrDfXBCxWS ou sur l'article suivant : https://t.co/WSYfdanpqW

[Nicolas Krassas @Dinosn]

GTFONow: Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries https://t.co/6DrM9JhPbW

[Deus ex Silicium @dexsilicium]

Peu de gens savent que jusqu'au début des années 2000 les fabricants d'appareils fournissaient le manuel technique avec les schémas et la liste des composants électroniques POUR POUVOIR LES REPARER, à l'instar de cet ampli Kenwood de 1991.
Pourquoi ont-ils arrêté de le faire ?

[Nicolas Krassas @Dinosn]

Researcher to Release PoC for 0-day Windows CVE-2023-36036 Flaw https://t.co/4uofzCDXTu

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Advanced SQLI Cheatsheet 📓

- https://t.co/nctldQhI9r

#infosec #bugbountytips #cybersec

[𝐑𝐀𝐢𝐡𝐚𝐧 ✪ @zapstiko]

Advanced SQLI Cheatsheet 📓
#bugbountytips #bugbounty #SQLi https://t.co/ZPemAvVmIF

[Ambionics Security @ambionics]

Introducing a new tool for #PHP filters attacks, #wrapwrap: an algorithm to add an arbitrary prefix and suffix to a PHP resource, improving the exploitation of file read and #SSRF vulnerabilities.

https://t.co/iP3DpFBEmx

[Hunter @HunterMapping]

🚨Alert🚨CVE-2023-48777
Critical Vulnerability in Elementor Affecting 5+ Million Websites
🔗Hunter:https://t.co/HnoDIi4eDX

Dorks 👇👇👇
FOFA app="WP-Elementor"
SHODAN http.component:"wordpress"
📰Refer to https://t.co/6uSXOTsk3h
#infosec #infosecurity #Infosys

[Nicolas Krassas @Dinosn]

headerpwn: A fuzzer for analyzing how servers respond to different HTTP headers https://t.co/K9ShWOij9K

[BleepingComputer @BleepinComputer]

50K WordPress sites exposed to RCE attacks by critical bug in backup plugin - @serghei
https://t.co/2h4xI9KHFD

https://t.co/2h4xI9KHFD