2018-09-27 News Feed

VPNFilter Router Malware Adds 7 New Network Exploitation Modules
https://thehackernews.com/2018/09/vpnfilter-router-hacking.html
#hackerstuff #HackThePlanet

---

ex-NSA Hacker Discloses macOS Mojave 10.14 Zero-Day Vulnerability
https://thehackernews.com/2018/09/apple-macos-mojave-exploit.html
#hackerstuff #HackThePlanet

---

New Linux Kernel Bug Affects Red Hat, CentOS, and Debian Distributions
https://thehackernews.com/2018/09/linux-kernel-vulnerability.html
#hackerstuff #HackThePlanet

---

Banking trojan found in call recorder app on Play Store – stole over €10,000

Banking trojan found in call recorder app on Play Store – stole over €10,000

#hackerstuff #HackThePlanet

---

Vibing Your Way Through an Enterprise: How Attackers are Becoming More Sneaky

https://github.com/Tylous/Vibe

#hackerstuff #HackThePlanet

---

Cloudflare Encrypting SNI: Fixing One of the Core Internet Bugs
https://blog.cloudflare.com/esni/
#hackerstuff #HackThePlanet

---

A cache invalidation bug in Linux memory management
https://googleprojectzero.blogspot.com/2018/09/a-cache-invalidation-bug-in-linux.html
#hackerstuff #HackThePlanet

---

Blanket: a sandbox escape targeting iOS 11.2.6

Blanket is a sandbox escape targeting iOS 11.2.6

#hackerstuff #HackThePlanet

---

Siaberry’s Command Injection Vulnerability
https://blog.spaceduck.io/siaberry-1/
#hackerstuff #HackThePlanet

---

SQL injection, Oracle and full-width characters – Tomas Lažauninkas – Medium
https://medium.com/@Wflki/sql-injection-oracle-and-full-width-characters-13bb86fc034a
#hackerstuff #HackThePlanet

---

Executing Meterpreter in Memory on Windows 10 and Bypassing AntiVirus
https://www.n00py.io/2018/06/executing-meterpreter-in-memory-on-windows-10-and-bypassing-antivirus/
#hackerstuff #HackThePlanet

---

SSD Advisory – VirtualBox VRDP Guest-to-Host Escape

SSD Advisory – VirtualBox VRDP Guest-to-Host Escape

#hackerstuff #HackThePlanet

---

Bypassing Duo Two-Factor Authentication (Fail Open)
https://www.n00py.io/2018/08/bypassing-duo-two-factor-authentication-fail-open/
#hackerstuff #HackThePlanet

---

Using “magic” DNS-resolutions to track suspicious domains
https://blog.dcso.de/using-magic-dns-resolutions-to-track-suspicious-domains/
#hackerstuff #HackThePlanet

---

Gaining Shell using Server Side Template Injection (SSTI)
https://medium.com/@david.valles/gaining-shell-using-server-side-template-injection-ssti-81e29bb8e0f9
#hackerstuff #HackThePlanet

---

cspparse: A tool to evaluate Content Security Policies.
https://github.com/C0RB3N/cspparse
#hackerstuff #HackThePlanet

---

BYOB (Build Your Own Botnet)
https://github.com/malwaredllc/byob
#hackerstuff #HackThePlanet

---

Effortless security feature detection with Winchecksec
Effortless security feature detection with Winchecksec
#hackerstuff #HackThePlanet

---