extr retweeted
Time's up - full source code linked below.
ASSETS LEFT IN NOBITEX ARE NOW ENTIRELY OUT IN THE OPEN.
بازمانده دارایی های شما در نوبیتکس هم اکنون در معرض دید و خطر هستند
But before that, lets meet Nobitex from the inside:
Exchange Deployment (1/8)
extr retweeted
NEW: 🇮🇷 Iranian crypto exchange Nobitex was exploited for $81.7M, including Bitcoin that was permanently burned.
🇮🇱 Pro-Israel hacker group Predatory Sparrow claims responsibility and vows to release Nobitex’s source code and internal data within 24 hours, warning remaining assets are at risk.
extr retweeted
🚨 WARNING: Another Chrome zero-day exploited in the wild.
Google just patched CVE-2025-5419 — a high-severity V8 engine flaw found by its own Threat Analysis Group.
Attackers are already using it via malicious HTML pages.
Update Chrome NOW | Read: thehackernews.com/2025/06/ne…
extr retweeted
博客好久没更新了，发一篇笔记
Postgresql JDBC Attack and Stuff
su18.org/post/postgresql-jdb…
extr retweeted
🚨 Asian Cyber Security Challenge (ACSC) is back!
🗓️ Aug 16 (Sat) 12:00 – Aug 17 (Sun) 12:00 JST
🌏 Hosted by 5 non-ASEAN ICC countries (Team ASEAN launched!)
🎮 Open to all, but finalists must be nationals of those 5.
📜 Selection rules coming soon!
🔗 acsc.asia/
extr retweeted
Newer variants of the #BPFDoor has an interesting modification made that avoids detections looking for processes with raw sockets. The kernel reports SOCK_DGRAM rather then rather loud "SOCK_RAW". Here we have a sample found in the recent SKT telco breach. (1/20)
extr retweeted
Yes, appears to be another DPRK sample. C2 passed as an arg to this binary. Leverages CURL API's. Executes data written to /Users/Shared/.<random> with popen(). Imported function calls aren't resolved at first, requires following jumps to clean up and rename.
extr retweeted
🚨 Massive new risk for data systems!
CVE-2025-30065 | Apache Parquet Java lib flaw (CVSS 10.0) lets attackers execute arbitrary code via poisoned files.
If your pipelines touch untrusted Parquet files, patch NOW.
Read: thehackernews.com/2025/04/cr…
extr retweeted
We now have a @metasploit exploit in the pull queue for that Oracle Access Manager vuln, CVE-2021-35587. You can check it out here: github.com/rapid7/metasploit…
extr retweeted
In 2020, I solved a gnarly reverse engineering challenge in PlaidCTF. Only 9 teams solved.
It's a huge pile of Typescript. Everything is named after a fish.
The catch? There's no code, only types. How do they perform computation using just the type system?
(Spoiler: Circuits!)
extr retweeted
🇰🇵 Sekoia #TDR team investigated a malicious campaign that employs fake job interview websites to deliver backdoors on Windows and macOS - #GolangGhost using #ClickFix tactic. Dubbed #ClickFake Interview, this campaign has been attributed to #Lazarus APT
blog.sekoia.io/clickfake-int…
extr retweeted
I made a plugin for HxD that's helpful for CTF players. Now you can copy as string, Python array, or base64. Finally, no more cyberchef for base64<->hex. Download it here git.io/JTIe2
extr retweeted
KeenLab released the latest 5G security research demo : youtu.be/Ca9lPMMToi0
extr retweeted
Attack and Defense Around #PowerShell Event Logging: from V2 to V6 (and PWSH that increase your attack surface) - both #BlueTeam and #RedTeam point of views :)
nsfocusglobal.com/Attack-and…
+ #Microsoft #Security Security Advisory #CVE-2018-8415: github.com/PowerShell/Announ…
extr retweeted
It was after I solved Remote originally that RoguePotato was released by @decoder_it and @splinter_code. I realized too late last week that Remote was a good target, hence the follow up post. I'll also look at how @ippsec ran it and why that worked.
0xdf.gitlab.io/2020/09/08/ro…
File and file meta information acquisition using PowerShell in Live Response environment
github.com/iidx/PSListCopy
extr retweeted
Team ToEatSushi
@RBTree_Pg_
@pr0cf51
@zzoru
@siwu_network
@physicube
@_bincat
kookhh0827
@diff72840089
@gPayl0ad
@e3xtr
