ӉѦСҠіИԌ ҬЄѦӍ СѦИѦL ѺҒіСіѦL DіҒԱՏіóИ

🔓SHA-1 gets SHAttered The implication of SHA-1 collisions being practical (not simply theoretical) is that if any of the four example application types (digital signature schemes, message authentication co des, password hashing, and content-addressable storage) were using SHA-1, they would all be vulnerable to attackers who could obtain colliding signatures, codes, passwords, or files respectively. However, since SHA-1 usage has significantly decreased in the last few years (especially since 2017), it may seem that this post is somewhat redundant. However, as time goes on all hash functions may become vulnerable to collision attacks - not only SHA-1. Therefore, as computational time decreases and power increases, the analyses and principles described above are relevant to hash functions that are (at the time of writing) considered more secure.

Cómo realizar movimientos laterales con Socat – Parte 2 de 2 https://thehackerway.com/2023/03/29/como-realizar-movimientos-laterales-con-socat-parte-2-de-2/

Android Architecture eBook https://reconshell.com/android-architecture-ebook/

Copilot, ChatGPT y GPT-4 han cambiado el mundo de la programación para siempre. Esto opinan los programadores https://www.xataka.com/servicios/copilot-chatgpt-gpt-4-han-cambiado-para-siempre-mundo-programacion-esto-que-opinan-expertos

Aparecen los supuestos requisitos de Windows 12, y no son buenas noticias https://www.softzone.es/noticias/windows/supuestos-requisitos-windows-12/

Europol advierte que ChatGPT ya está ayudando a los delincuentes • The Register https://www.theregister.com/2023/03/28/chatgpt_europol_crime_report/

Detenidos cinco varones en Sevilla por estafar a más de 100 personas a través de las redes sociales https://sevilla.abc.es/sevilla/detenidos-cinco-varones-sevilla-estafar-100-personas-20230328113857-nts.html

TikTok es el 'caballo de Troya' de China, según la NSA https://hipertextual.com/2023/03/tiktok-caballo-de-troya-china

🔥 Telegram bot for monitoring/searching new CVE & PoCs 🤖 @pocfather_bot can provide:    ✔️ Monitoring new CVE (using filters) ✔️ Monitoring new PoCs (using filters) ✔️ CVE related info ✔️ CVE search ✔️ PoCs search CVE/PoC monitoring modes: ⭕️ CVE/Level ⭕️ CVE/Keywords ⭕️ PoC/Keywords ⭕️ PoC/Vendor Products @pocfather_bot

Curso Python by NSA

AM0N-Eye: is the most advanced Red Team & Adversary Simulation Software in the current C2 Market Some TTPs of AM0N-Eye 1. Linux, MacOS and windows c2 server 2. Fake Alert techniques 3. AV/EDR evasion techniques 4. shellcode Generator & obfuscatior 5. Persistence techniques 6. New BOF 7. AV/EDR Recon 8. PayloadGenerator Undetected by antivirus programs 9. custom malwares 10. New c2 profiles https://github.com/momika233/AM0N-Eye

🔖ASPNET web form tip when bypassing certain WAF rules using #COOKIELESS: - WAF blocks /admin/main.aspx - WAF uses canonicalization & not case sensitive Possible bypasses: 🍪/admin/(S(X))/main.aspx 🍪/admin/Foobar/(S(X))/../(S(X))/main.aspx 🍪/(S(X))/admin/(S(X))/main.aspx

apk.sh makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK. https://github.com/ax/apk.sh

Рубрика: Нам пишут CaveCarver PE backdooring tool which utilizes and automates code cave technique #backdoor #PE

github dork to find openai api key /"sk-[a-zA-Z0-9]{20,50}"/

💥CVE-2023-28464: Linux: Bluetooth: hci_conn_cleanup function has double free In the Bluetooth subsystem, a double free vulnerability was found in the hci_conn_cleanup function of net/bluetooth/hci_conn.c, which may cause DOS or privilege escalation. 🔗Call Trace from syzbot here. ⚠️Version: Linux kernel 6.2 (this problem also exists in 6.3-rc1)

🔥ARM TrustZone: pivoting to the secure world Contents: 💾Discovery of two vulnerabilities in secure world components 💾Exploitation to get code execution in a trusted driver, while not having a debugger for this obscure environment 💾Leverage of aarch32 T32 instruction set to find nice stack pivots 💾Turning an arbitrary write into an arbitrary code execution