Cisco Addressed Numerous Bugs In IOS and IOS XE With September Update Bundle

Latest Hacking News-- Cisco has rolled-out its biannual update bundle for its networking operating systems IOS (Internetwork Operating System) and IOS XE. The Cisco Addressed Numerous Bugs In IOS and IOS XE With September Update Bundle on Latest Hacking News. View original article on Latest Hacking News

mapCIDR – Small Utility Program To Perform Multiple Operations For A Given subnet/CIDR Ranges

KitPloit - PenTest Tools!-- Small utility program to perform multiple operations for a given subnet/CIDR ranges. The tool was developed to ease load distribution for mass scanning operations, it can be used both as a library and as independent CLI tool. Features Simple and modular code base making it easy to contribute. CIDR distribution for … Continue reading mapCIDR – Small Utility Program To Perform Multiple Operations For A Given subnet/CIDR Ranges

Chinese APT Group Targets Media, Finance, and Electronics Sectors

The Hacker News-- Cybersecurity researchers on Tuesday uncovered a new espionage campaign targeting media, construction, engineering, electronics, and finance sectors in Japan, Taiwan, the U.S., and China. Linking the attacks to Palmerworm (aka BlackTech) — likely a China-based advanced persistent threat (APT) — Symantec's Threat Hunter Team said the first wave of activity associated with this campaign began last … Continue reading Chinese APT Group Targets Media, Finance, and Electronics Sectors

How to Analyze Web Browser Extensions for Possible Malware & Other Malicious Activity

Null Byte « WonderHowTo-- Browser extensions are extremely useful since they can expand web browsers like Google Chrome and Mozilla Firefox beyond their built-in features. However, we don't always know who's behind a browser add-on or what it's doing beyond what's advertised. That's where ExtAnalysis comes into play. ExtAnalysis will unpack an extension so that … Continue reading How to Analyze Web Browser Extensions for Possible Malware & Other Malicious Activity

Lil-Pwny – Auditing Active Directory Passwords Using Multiprocessing In Python

KitPloit - PenTest Tools!-- A multiprocessing approach to auditing Active Directory passwords using Python. About Lil Pwny Lil Pwny is a Python application to perform an offline audit of NTLM hashes of users' passwords, recovered from Active Directory, against known compromised passwords from Have I Been Pwned. The usernames of any accounts matching HIBP will … Continue reading Lil-Pwny – Auditing Active Directory Passwords Using Multiprocessing In Python

Exploiting fine-grained AWS IAM permissions for total cloud compromise: a real world example (part…

InfoSec Write-ups - Medium-- Exploiting fine-grained AWS IAM permissions for total cloud compromise: a real world example (part 1/2)IntroductionThis is a real case study of how to enumerate and use IAM permissions to your advantage. I strongly suggest you read my previous article on how IAM permissions work. It’s long, but necessary to understand most of … Continue reading Exploiting fine-grained AWS IAM permissions for total cloud compromise: a real world example (part…