SysAdmin 24x7

InvisiMole Spyware is a powerful malware that went undetected for at least five years https://securityaffairs.co/wordpress/73400/malware/invisimole-spyware.html

VPNFilter Can Also Infect ASUS, D-Link, Huawei, Ubiquiti, UPVEL, and ZTE Devices https://www.bleepingcomputer.com/news/security/vpnfilter-can-also-infect-asus-d-link-huawei-ubiquiti-upvel-and-zte-devices/

SEGURIDAD SCADA: Visualizar topología de redes bajo el protocolo PROFINET. https://www.gurudelainformatica.es/2017/12/seguridad-scada-visualizar-topologia-de.html

Welcome to the non-neutral net: Day one https://nakedsecurity.sophos.com/2018/06/11/welcome-to-the-non-neutral-net-day-one/amp/

Russia Government to Fine the Search Engines Linked to Banned VPN and Internet proxy services https://gbhackers.com/russia-banned-vpn/amp/

"Recopilación de herramientas para analizar CMS" https://www.fwhibbit.es/recopilacion-de-herramientas-para-analizar-cms Wordpress 🛠 wpscan https://github.com/wpscanteam/wpscan Versión en Ruby 🛠 wordpresscan https://github.com/swisskyrepo/Wordpresscan 🛠 wpseku https://github.com/m4ll0k/WPSeku 🛠 zoom https://github.com/UltimateLabs/Zoom 🛠 wordpress-exploit-framework https://github.com/rastating/wordpress-exploit-framework 🛠 Vane github: https://github.com/delvelabs/vane 🛠 Plescot https://code.google.com/archive/p/plecost/downloads 🛠 WPhunter https://github.com/Jamalc0m/wphunter 🛠 wpbf - WordPress Brute Force https://github.com/atarantini/wpbf 🛠 WPForce https://github.com/n00py/WPForce 🛠 WPSploit - WordPress Plugin Code Scanner https://github.com/m4ll0k/WPSploit 🛠 WordPress-XMLRPC-Brute-Force-Exploit https://github.com/1N3/Wordpress-XMLRPC-Brute-Force-Exploit.git Drupal 🛠 DrupalScan https://github.com/rverton/DrupalScan 🛠 Drupscan https://github.com/tibillys/drupscan 🛠 Droopescan github: https://github.com/droope/droopescan 🛠 Drupalgeddon 2 y 3: https://github.com/dreadlocked/Drupalgeddon2 / https://github.com/rithchard/Drupalgeddon3 / https://github.com/a2u/CVE-2018-7600 Joomla 🛠 Joomscan https://github.com/rezasp/joomscan 🛠 Joomlascan https://github.com/drego85/JoomlaScan 🛠 JCS https://github.com/TheM4hd1/JCS 🛠 Joomlavs https://github.com/rastating/joomlavs.git 🛠 OWASP Joomla! vulnerability Scanner https://github.com/PentestBox/OWASP-Joomla-Vulnerability-Scanner Moodle 🛠 Flunym0us https://github.com/fluproject/flunym0us 🛠 Mooscan https://github.com/vortexau/mooscan Genéricos 🛠 CMSmap https://github.com/Dionach/CMSmap 🛠 CMSsc4n https://github.com/n4xh4ck5/CMSsc4n El autor de la magnífica recopilación es N4xh4ck5 Twitter: https://twitter.com/n4xh4ck5 Github: https://github.com/n4xh4ck5 #SeguridadInformática #Hacker

Stable Channel Update for Desktop Wednesday, June 6, 2018 The stable channel has been updated to 67.0.3396.79 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. https://chromereleases.googleblog.com/2018/06/stable-channel-update-for-desktop.html

Múltiples vulnerabilidades en Security Identity Manager de IBM Fecha de publicación: 08/06/2018 Importancia: 4 - Alta Recursos afectados:  IBM Security Identity Manager versiones 7.0 y 7.0.1. https://www.certsi.es/alerta-temprana/avisos-seguridad/multiples-vulnerabilidades-security-identity-manager-ibm

Security updates available for Flash Player | APSB18-19 Adobe has released security updates for Adobe Flash Player for Windows, macOS, Linux and Chrome OS. These updates address critical vulnerabilities in Adobe Flash Player 29.0.0.171 and earlier versions.  Successful exploitation could lead to arbitrary code execution in the context of the current user. Adobe is aware of a report that an exploit for CVE-2018-5002 exists in the wild, and is being used in limited, targeted attacks against Windows users. These attacks leverage Office documents with embedded malicious Flash Player content distributed via email. https://helpx.adobe.com/security/products/flash-player/apsb18-19.html

VPNFilter Can Also Infect ASUS, D-Link, Huawei, Ubiquiti, UPVEL, and ZTE Devices https://www.bleepingcomputer.com/news/security/vpnfilter-can-also-infect-asus-d-link-huawei-ubiquiti-upvel-and-zte-devices/

Ejecución remota de código en la familia antivirus F-Secure http://unaaldia.hispasec.com/2018/06/ejecucion-remota-de-codigo-en-la.html

Múltiples vulnerabilidades en productos Cisco Fecha de publicación: 07/06/2018 Importancia: 5 - Crítica Descripción:  Cisco ha publicado 28 vulnerabilidades en diversos productos, siendo 2 vulnerabilidades de severidad crítica, 11 de severidad alta y 15 de severidad media. https://www.certsi.es/alerta-temprana/avisos-seguridad/multiples-vulnerabilidades-productos-cisco-31

PESecurity: verificando las protecciones de un binario en Windows (ASLR, DEP y SafeSEH) con Powershell: http://www.hackplayers.com/2018/06/pesecurity-verificando-las-protecciones.html

Destructive and MiTM Capabilities of VPNFilter Malware Revealed https://thehackernews.com/2018/06/vpnfilter-router-malware.html

📃 "Borrando datos de nuestros cacharros portatiles de forma segura" https://elbinario.net/2018/05/24/borrando-datos-de-nuestros-cacharros-portatiles-de-forma-segura/ 🛠 App Android sdelete https://play.google.com/store/apps/details?id=com.vb2labs.android.sdelete&hl=en_US 🛠 App Android Secure Wipe https://play.google.com/store/apps/details?id=com.pinellascodeworks.securewipe&hl=en_US Y... ...si quieres recuperar archivos borrados: https://t.me/seguridadinformatic4/494 ...si quieres quemar tu móvil: https://t.me/seguridadinformatic4/225 #Android #SeguridadInformática #App

Zip Slip Vulnerability https://snyk.io/research/zip-slip-vulnerability

F-Secure Anti-Virus: Remote Code Execution via Solid RAR Unpacking (RCE as NT AUTHORITY\SYSTEM https://landave.io/2018/06/f-secure-anti-virus-remote-code-execution-via-solid-rar-unpacking/

⚠️ macOS Security Updates 2018-003 and iOS 11.4 Several bugfixes in the new security update 2018-003 and iOS 11.4. Please update your phones and systems. On both systems (!) apple fixed code execution vulnerabilities. (Severity: 🔸high) More Info: iOS 11.4: https://support.apple.com/de-de/HT208848 MacOS: https://support.apple.com/de-de/HT208849 #alert #severityhigh #macos #ios #vulnerability #HT208849 #HT208848