SysAdmin 24x7

radare2 3.0 releases: unix-like reverse engineering framework and commandline tools https://securityonline.info/radare2-reverse-engineering-framework/

Echa un vistazo al Tweet de @Honey_SEC: https://twitter.com/Honey_SEC/status/1051721217118482432?s=09

Statistics Google collects statistics about IPv6 adoption in the Internet on an ongoing basis. We hope that publishing this information will help Internet providers, website owners, and policy makers as the industry rolls out IPv6. https://www.google.com/intl/en/ipv6/statistics.html

LogRM: uses windows event logs to gather information about internal network LogRM is a post-exploitation powershell script which it uses windows event logs to gather information about the internal network in a penetration testing engagement. It is not only useful for blue teams but also for red teams because some of its functionalities can be used for lateral movement. You will be able to use LogRM not only on a localhost machine but also in a remote machine using WinRM protocol which is by default enabled in a new Windows versions. https://securityonline.info/logrm/

Ubuntu Security Notice USN-3790-1 Ubuntu Security Notice 3790-1 - It was discovered that Requests incorrectly handled certain HTTP headers. An attacker could possibly use this issue to access sensitive information. https://packetstormsecurity.com/files/149799/USN-3790-1.txt

Pentagon Travel Provider Data Breach Counts 30,000 Victims Department of Defense Has Begun Notifying Military and Civilian Breach Victims https://www.bankinfosecurity.com/pentagon-data-breach-exposed-30000-travel-records-a-11600

Múltiples vulnerabilidades en PHP Fecha de publicación: 15/10/2018 Importancia: 4 - Alta Recursos afectados:  PHP versiones 7.2.x PHP versiones 7.1.x Descripción:  Se han publicado múltiples vulnerabilidades en PHP para las versiones anteriormente mencionadas. https://www.incibe-cert.es/alerta-temprana/avisos-seguridad/multiples-vulnerabilidades-php-0

Catálogo de herramientas de forense. https://toolcatalog.nist.gov/populated_taxonomy/

Hacking WIFI: WPA2 y KRACKATTACK https://hacking-etico.com/2017/10/19/hacking-wifi-wpa2/

Expert released PoC Code Microsoft Edge Remote Code Execution flaw Security expert published the PoC exploit code for the recently fixed critical remote code execution flaw in Edge web browser tracked as CVE-2018-8495. https://securityaffairs.co/wordpress/77095/hacking/microsoft-edge-remote-code-execution.html

Manual reverse engineering of WebAssembly: static code analysis https://www.forcepoint.com/blog/security-labs/manual-reverse-engineering-webassembly-static-code-analysis

A mysterious grey-hat is patching people's outdated MikroTik routers. Internet vigilante claims he patched over 100,000 MikroTik routers already. https://www.zdnet.com/article/a-mysterious-grey-hat-is-patching-peoples-outdated-mikrotik-routers/

#Wireshark 2.6.4 has been released. Enjoy. https://www.wireshark.org/docs/relnotes/wireshark-2.6.4.html

Alert (AA18-284A) Publicly Available Tools Seen in Cyber Incidents Worldwide https://www.us-cert.gov/ncas/alerts/AA18-284A

Detectada campaña fraudulenta de phishing al Banco Santander https://www.osi.es/es/actualidad/avisos/2018/10/detectada-campana-fraudulenta-de-phishing-al-banco-santander

La ICANN publica una guía integral sobre las expectativas durante el traspaso de la KSK https://www.icann.org/es/system/files/files/ksk-rollover-expect-22aug18-es.pdf Se comentó aquí el cambio: https://t.me/sysadmin24x7/1858 Quedan 7 días.

Múltiples vulnerabilidades en IBM WebSphere Application Server de IBM Cloud Fecha de publicación: 11/10/2018 Importancia: 5 - Crítica Recursos afectados:  Esta vulnerabilidad afecta a las siguientes versiones de IBM WebSphere Application Server: Liberty Versión 9.0 Versión 8.5 Descripción:  IBM ha publicado un boletín de seguridad describiendo múltiples vulnerabilidades que afectan a IBM WebSphere Application Server perteneciente a IBM Cloud. https://www.incibe-cert.es/alerta-temprana/avisos-seguridad/multiples-vulnerabilidades-ibm-websphere-application-server-ibm

Linux security tools (top 100) The best Linux security tools of this moment. The list is populated with open source tools and software that is publically available. https://linuxsecurity.expert/security-tools/top-100/

DNSDiag - DNS Diagnostics And Performance Measurement Tools https://www.kitploit.com/2018/10/dnsdiag-dns-diagnostics-and-performance.html