Latest Cyber Security Updates
Cyber Security News
VMware vCenter 6.5 / 7.0 Remote Code Execution Proof Of Concept
Authored by NebulabdSec | Site github.com
VMware vCenter version 6.5 and 7.0 remote code execution proof of concept exploit.
advisories | CVE-2021-21972
Change Mirror Download
#-*- coding:utf-8 -*-banner...
Cyber Vulnerabilities & Exploits
The latest hacker news
New ModPipe Point of Sale (POS) Malware Targeting Restaurants, Hotels
By: Ravie Lakshmanan
Cybersecurity researchers today disclosed a new kind of modular backdoor that targets point-of-sale (POS) restaurant management software from Oracle in an attempt...
US Agencies and FireEye Were Hacked Using SolarWinds Software Backdoor
By: Ravie Lakshmanan
State-sponsored actors allegedly working for Russia have targeted the US Treasury, the Commerce Department's National Telecommunications and Information Administration (NTIA), and other...
TikTok Bug Could Have Exposed Users’ Profile Data and Phone Numbers
By: Ravie Lakshmanan
Cybersecurity researchers on Tuesday disclosed a now-patched security flaw in TikTok that could have potentially enabled an attacker to build a database...
Learning & Cyber Education
The UNC2529 Triple Double: A Trifecta Phishing Campaign
In December 2020, Mandiant observed a widespread, global phishing campaign targeting numerous organizations across an array of industries. Mandiant tracks this threat actor as...
Breaches & Data Leaks
Federal agency has suffered a successful espionage-related cyberattack
By: Tara Seals
The attack featured a unique, multistage malware and a likely PulseSecure VPN exploit.
A federal agency has suffered a successful espionage-related cyberattack that...
- Advertisement -
Most popular
AWS CloudShell Terminal Escape Injection / Remote Code Execution
Authored by Google Security Research, Felix Wilhelm
The javascript terminal emulator used by AWS CloudShell handles certain terminal escape codes incorrectly. This can lead to...
Tesla’s Elon Musk asks about converting ‘large transactions’ to bitcoin
Elon Musk on Sunday asked about the possibility of converting “large transactions” of Tesla Inc’s balance sheet into bitcoin, according to a Twitter exchange...
Security & Hacking Tools
Shad0w – Modular C2 Framework
SHAD0W is a modular C2 framework designed to successfully operate on mature environments.
It uses a range of methods to evade EDR and AV while...
Big Bounty Recon – Reconnaissance Tool
BigBountyRecon
BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target...
GitDorker – Scrape Secrets From GitHub Through Usage Of A Large Repository
GitDorker is a tool that utilizes the GitHub Search API and an extensive list of GitHub dorks that I’ve compiled from various sources to...
Pesidious – Malware Mutation Using Reinforcement Learning
Malware Mutation using Deep Reinforcement Learning and GANs
The purpose of the tool is to use artificial intelligence to mutate a malware (PE32 only) sample to bypass...
Hellraiser – CVE-Search Vulnerability Scanner
HellRaiser
Vulnerability Scanner
Install
HellRaiser depends on cve-search API. Have a cve-search API running and add the address in config/config.yml on cvesearch_api_domain field.
Install ruby, bundler and rails. https://gorails.com/setup/ubuntu/16.04
Install redis-server and nmap.
sudo apt-get update
sudo apt-get...
Daily Exploits
Odoo 12.0.20190101 Unquoted Service Path
Authored by 1F98D
Odoo version 12.0.20190101 suffers from an unquoted service path vulnerability.
Change Mirror Download
# Exploit Title: Odoo 12.0.20190101 - 'nssm.exe' Unquoted Service Path# Exploit...
Splinterware System Scheduler Professional 5.30 Unquoted Service Path
Authored by Andrea Intilangelo
Splinterware System Scheduler Professional version 5.30 suffers an unquoted service path vulnerability.
Change Mirror Download
# Exploit Title: Splinterware System Scheduler Professional 5.30...
Android NFC nfa_rw_sys_disable Type Confusion
Authored by Google Security Research, nedwill
Android NFC suffers from a type confusion vulnerability in nfa_rw_sys_disable.
Offensive & Defensive Security Tools
The Cyber Post Videos
Android Vulnerability StrandHogg 2.0 Proof Of Concept
01:46
Thunderbolt Vulnerability - Thunderspy PoC - Unlocking A Windows Computer In Under 5 Minutes
05:55
Metasploit For Dummies Part 4 - Basic Exploitation
11:48
Metasploit For Dummies Part 2 - Understanding Metasploit Modules
19:39
Metasploit For Dummies Part 3 - Information Gathering & Auxiliary Scanners
12:19
Metasploit For Dummies - Exploits, Modules & Payloads - 1
22:59
