SysAdmin 24x7

TeleRAT: Un nuevo troyano que utiliza Telegram como covert channel. https://www.securityartwork.es/2018/05/07/telerat-un-nuevo-troyano-que-utiliza-telegram-como-covert-channel/

Equifax reveals full horror of that monstrous cyber-heist of its servers 146 million people, 99 million addresses, 209,000 payment cards, 38,000 drivers' licenses and 3,200 passports http://www.theregister.co.uk/2018/05/08/equifax_breach_may_2018/

Critical vulnerability impacts Bitcoin Cash miners Users of ABC mining software are being urged to update their builds immediately. https://www.zdnet.com/article/critical-vulnerability-impacts-bitcoin-cash-miners/

📃 "Más de 40 webs intencionalmente vulnerables para (legalmente) practicar tus habilidades de hacking" ENG https://www.bonkersabouttech.com/security/40-plus-list-of-intentionally-vulnerable-websites-to-practice-your-hacking-skills/392 🛠 bWAPP http://www.itsecgames.com/ 🛠 Damn Vulnerable iOS App (DVIA) http://damnvulnerableiosapp.com/ 🛠 Google Gruyere http://google-gruyere.appspot.com/ 🛠 HackThis!! https://www.hackthis.co.uk/ 🛠 Hack this site https://www.hackthissite.org/ 🛠 Hellbound hackers https://www.hellboundhackers.org/ 🛠 MacAfee HacMe sites http://www.mcafee.com/us/downloads/free-tools/index.aspx 🛠 Mutillidae https://sourceforge.net/projects/mutillidae/ 🛠 OverTheWire http://overthewire.org/wargames/ 🛠 Peruggia https://sourceforge.net/projects/peruggia/ 🛠 Root Me https://www.root-me.org/?lang=es 🛠 Try2Hack http://www.try2hack.nl/ 🛠 Vicnum http://vicnum.ciphertechs.com/ 🛠 WebGoat http://webappsecmovies.sourceforge.net/webgoat/ 🛠 Juice Shop https://github.com/bkimminich/juice-shop 🛠 Hack.me https://hack.me/ 🛠 Hackdemic https://github.com/Hackademic/hackademic 🛠 SlaveHack http://www.slavehack.com/ 🛠 Hackxor http://hackxor.sourceforge.net/cgi-bin/index.pl 🛠 Boggelt https://github.com/psiinon/bodgeit 🛠 Moth http://www.bonsai-sec.com/en/research/moth.php 🛠 EnigmaGroup http://www.enigmagroup.org/ 🛠 OWASP Bricks https://www.owasp.org/index.php/OWASP_Bricks 🛠 Damn Vulnerable Web Application (DVWA) http://www.dvwa.co.uk/ 🛠 ExploitMe Mobile Android Labs http://securitycompass.github.io/AndroidLabs/setup.html 🛠 XSS game area https://xss-game.appspot.com/ 🛠 W3Challs https://w3challs.com/ 🛠 The ButterFly Security Project https://sourceforge.net/projects/thebutterflytmp/ 🛠 Damn Vulnerable Web Services DVWS (PHP) http://dvws.secureideas.net/ 🛠 OWASP Insecure Web App Project https://www.owasp.org/index.php/Category:OWASP_Insecure_Web_App_Project 🛠 Acunetix (Forum ASP) http://testasp.vulnweb.com/ 🛠 Acunetix (Blog .NET) http://testaspnet.vulnweb.com/ 🛠 Acunetix (Art shopping PHP) http://testphp.vulnweb.com/ 🛠 Cenzic CrackMeBank http://crackme.cenzic.com/ 🛠 HP/SpiDynamics Free Bank Online http://zero.webappsecurity.com/ 🛠 IBM/Watchfire AltoroMutual http://demo.testfire.net/ 🛠 Badstore http://www.badstore.net/ 🛠 revesing.kr http://reversing.kr/index.php 🛠 RingZer0 Team Online CTF https://ringzer0team.com/ 🛠 Hacking-lab https://www.hacking-lab.com/index.html #Hacker #HackingÉtico

Python exploit for Remote Code Executuion on GPON home routers (CVE-2018-10562). Initially disclosed by VPNMentor (https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/), kudos for their work. https://github.com/f3d0x0/GPON

Encontrado el primer ransomware con 'Process Doppelgänging' para evadir su detección http://unaaldia.hispasec.com/2018/05/encontrado-el-primer-ransomware-con.html

Russia Blocks 50 VPNs and Proxy Services Providing Access to Telegram https://www.bleepingcomputer.com/news/government/russia-blocks-50-vpns-and-proxy-services-providing-access-to-telegram/

Chrome freezes PC running Windows OS after Windows 10 April update [...] “This Answers post advises users that they can use the Windows logo key + Ctrl + Shift + B keyboard combination to resolve the issue when their computer freezes. This keyboard combination causes the video driver to restart, which will cause the normal Windows screen to appear again.” [...] https://securityaffairs.co/wordpress/72197/security/windows-10-april-update-issues.html

Investigadores encuentran 8 nuevos "Spectre" en procesadores Intel. https://securityaffairs.co/wordpress/72158/hacking/spectre-ng-vulnerabilities.html

Sherlock PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities. https://github.com/rasta-mouse/Sherlock

routersploit v3.0.0 released: Router Exploitation Framework https://securityonline.info/routersploit-router-exploitation-framework/

MeterSSH: Bypassing IDS Firewall using Meterpreter over SSH https://securityonline.info/meterssh-bypassing-ids-firewall-using-meterpreter-ssh/

WMI Registry | WMI Persistence using wmic.exe https://securityonline.info/wmi-persistencepowershell-wmi-persistencewmi-registrywmi-registry-query/

Elevación de privilegios y otras vulnerabilidades en TP-Link EAP Controller http://unaaldia.hispasec.com/2018/05/elevacion-de-privilegios-y-otras.html

#Hackers españoles 🇪🇸 https://t.co/WKSl6UNSLe

Ejecución remota de código en 7-Zip y antivirus no especificados http://unaaldia.hispasec.com/2018/05/ejecucion-remota-de-codigo-en-7-zip-y.html

TBK DVR4104 / DVR4216 - Credentials Leak https://www.exploit-db.com/exploits/44577/

The Pentagon bans Huawei and ZTE smartphone sales at military bases worldwide BUT YOUR DEVICE MANUFACTURER ISN'T THE ONLY RISK. https://www.grahamcluley.com/the-pentagon-bans-huawei-and-zte-smartphones-from-military-bases-worldwide/