Category: News Feed Stuff

Official Monero Site Hacked to Distribute Cryptocurrency Stealing Malware
https://thehackernews.com/2019/11/hacking-monero-cryptocurrency.html
#HackThePlanet

---

New Flaw Lets Rogue Android Apps Access Camera Without Permission
https://thehackernews.com/2019/11/android-camera-hacking.html
#HackThePlanet

---

CVE-2019-18934: Vulnerability in IPSEC module
https://nlnetlabs.nl/projects/unbound/security-advisories/#vulnerability-in-ipsec-module
#HackThePlanet

---

Docker Patched the Most Severe Copy Vulnerability to Date With CVE-2019-14271

Docker Patched the Most Severe Copy Vulnerability to Date With CVE-2019-14271

#HackThePlanet

---

Playing With Old Hacks

Playing With Old Hacks

#HackThePlanet

---

bounty-targets-data: This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/etc) that are eligible for reports
https://github.com/arkadiyt/bounty-targets-data
#HackThePlanet

---

Troubleshooting shell scripts that grew slower with age
http://rachelbythebay.com/w/2019/11/18/oldbash/
#HackThePlanet

---

Javafuzz: coverage-guided fuzz testing for Java
https://github.com/fuzzitdev/javafuzz
#HackThePlanet

---

CVE-2019-16662 & CVE-2019-16663 – Unauthenticated remote code execution vulnerabilities in rConfig (All versions)
https://www.sudokaikan.com/2019/11/cve-2019-16662-cve-2019-16663.html
#HackThePlanet

---

New NextCry Ransomware Encrypts Data on NextCloud Linux Servers
https://www.bleepingcomputer.com/news/security/new-nextcry-ransomware-encrypts-data-on-nextcloud-linux-servers/
#HackThePlanet

---

Subdomain_recon.py: A SubDomain Reconnaissance Tool
https://nullsweep.com/subdomain-recon-a-subdomain-reconnaissance-tool/
#HackThePlanet

---

Install Chrome via GPO and save yourself some time
https://www.techrepublic.com/blog/google-in-the-enterprise/install-chrome-via-gpo-and-save-yourself-some-time/
#HackThePlanet

---

Enhanced Interior Gateway Routing Protocol (EIGRP) for IPv4 configuration
http://www.networkinghub.in/2019/01/enhanced-interior-gateway-routing.html
#HackThePlanet

---

Cloud Network Security 101: AWS VPC Endpoints
https://www.fugue.co/blog/network-security-vpc-endpoints-101
#HackThePlanet

---

Arbitrary Command execution in Privacy Disclaimer page of a very popular organization
Arbitrary Command execution in Privacy Disclaimer page of a very popular organization
#HackThePlanet

---

Common Linux Privilege Escalation: Writable Root PATH

#HackThePlanet

---

SCShell: Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
https://github.com/Mr-Un1k0d3r/SCShell
#HackThePlanet

---

Beginner Network Pentesting course
https://github.com/hmaverickadams/Beginner-Network-Pentesting/blob/master/Readme.md
#HackThePlanet

---

Symantec Endpoint Protection – Self-Defense Bypass and Potential Usages (CVE-2019-12758)
https://safebreach.com/Post/Symantec-Endpoint-Protection-Self-Defense-Bypass-and-Potential-Usages-CVE-2019-12758
#HackThePlanet

---

COMahawk: Privilege Escalation: Weaponizing CVE-2019-1405 and CVE-2019-1322
https://github.com/apt69/COMahawk
#HackThePlanet

---

Qualcomm Chip Flaws Let Hackers Steal Private Data From Android Devices
https://thehackernews.com/2019/11/qualcomm-android-hacking.html
#HackThePlanet

---

Company Detected Years-Long Breach Only After Hacker Maxed Out Servers’ Storage
https://thehackernews.com/2019/11/hacking-file-storage.html
#HackThePlanet

---

New ZombieLoad v2 Attack Affects Intel’s Latest Cascade Lake CPUs
https://thehackernews.com/2019/11/zombieload-cpu-vulnerability.html
#HackThePlanet

---

SSD Advisory – iOS Jailbreak via Sandbox Escape and Kernel R/W leading to RCE
https://ssd-disclosure.com/archives/4066/ssd-advisory-via-ios-jailbreak-sandbox-escape-and-kernel-r-w-leading-to-rce
#HackThePlanet

---

AppSec POV on Dependency Management
https://blog.npmjs.org/post/187496869845/appsec-pov-on-dependency-management
#HackThePlanet

---

New Group of Hackers Targeting Businesses with Financially Motivated Cyber Attacks
https://thehackernews.com/2019/11/financial-cyberattacks.html
#HackThePlanet