BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SubGPT - Find Subdomains With GPT, For Free
- Uro - Declutters Url Lists For Crawling/Pentesting
- Wshlient - A Simple Tool To Interact With Web Shells And Command Injection Vulnerabilities
- Pulsegram - Integrated Keylogger With Telegram
- Scrapling - An Undetectable, Powerful, Flexible, High-Performance Python Library That Makes Web Scraping Simple And Easy Again!
- VulnKnox - A Go-based Wrapper For The KNOXSS API To Automate XSS Vulnerability Testing
- Camtruder - Advanced RTSP Camera Discovery and Vulnerability Assessment Tool
- Frogy2.0 - An Automated External Reconnaissance And Attack Surface Management (ASM) Toolkit
- PEGASUS-NEO - A Comprehensive Penetration Testing Framework Designed For Security Professionals And Ethical Hackers. It Combines Multiple Security Tools And Custom Modules For Reconnaissance, Exploitation, Wireless Attacks, Web Hacking, And More
- Text4Shell-Exploit - A Custom Python-based Proof-Of-Concept (PoC) Exploit Targeting Text4Shell (CVE-2022-42889), A Critical Remote Code Execution Vulnerability In Apache Commons Text Versions < 1.10
Exploit DB
- [local] Microsoft - NTLM Hash Disclosure Spoofing (library-ms)
- [local] ZTE ZXV10 H201L - RCE via authentication bypass
- [local] Daikin Security Gateway 14 - Remote Password Reset
- [local] Microsoft Windows - XRM-MS File NTLM Information Disclosure Spoofing
- [local] unzip-stream 0.3.1 - Arbitrary File Write
- [remote] code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting (XSS)
- [local] Microsoft Windows 11 23h2 - CLFS.sys Elevation of Privilege
- [remote] OpenSSH server (sshd) 9.8p1 - Race Condition
- [remote] WonderCMS 3.4.2 - Remote Code Execution (RCE)
- [local] tar-fs 3.0.0 - Arbitrary File Write/Overwrite
Hackers Could Unleash Chaos Through Backdoor in China-Made Robot Dogs
/in General NewsAn undocumented remote access backdoor in the Unitree Go1 Robot Dog allows remote control over the tunnel network and use of the vision cameras to see through their eyes.
The post Hackers Could Unleash Chaos Through Backdoor in China-Made Robot Dogs appeared first on SecurityWeek.
SecurityWeek – Read More
Oracle Hit with Lawsuit Over Alleged Cloud Breach Affecting Millions
/in General NewsOracle faces a class action lawsuit filed in Texas over a cloud data breach exposing sensitive data of 6M+ users; plaintiff alleges negligence and delays.
Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News – Read More
Japan Bolsters Cybersecurity Safeguards With Cyber Defense Bill
/in General NewsThe bill will allow Japan to implement safeguards and strategies that have been in use by other countries for some time.
darkreading – Read More
Over 1,500 PostgreSQL Servers Compromised in Fileless Cryptocurrency Mining Campaign
/in General NewsExposed PostgreSQL instances are the target of an ongoing campaign designed to gain unauthorized access and deploy cryptocurrency miners.
Cloud security firm Wiz said the activity is a variant of an intrusion set that was first flagged by Aqua Security in August 2024 that involved the use of a malware strain dubbed PG_MEM. The campaign has been attributed to a threat actor Wiz tracks as
The Hacker News – Read More
European Commission takes aim at end-to-end encryption and proposes Europol become an EU FBI
/in General NewsThe Commission said it would create roadmaps regarding both the “lawful and effective access to data for law enforcement” and on encryption.
The Record from Recorded Future News – Read More
5 tools I trust to keep my online conversations private and anonymous
/in General NewsPrivacy matters. These apps and services help you communicate without putting your identity or data at risk from prying eyes.
Latest stories for ZDNET in Security – Read More
Genetic sharing site openSNP to shut down, citing concerns of data privacy and ‘rise in authoritarian governments’
/in General NewsThe open source repository of genetic data will delete its banks of data on April 30, its co-founder confirms.
Security News | TechCrunch – Read More
Russia tightens cybersecurity measures as financial fraud hits record high
/in General NewsVladimir Putin signed a law on Monday that prohibits state institutions, banks and others from using foreign messaging apps when communicating with customers.
The Record from Recorded Future News – Read More
Hackers Looking for Vulnerable Palo Alto Networks GlobalProtect Portals
/in General NewsGreyNoise warns of a coordinated effort probing the internet for potentially vulnerable Palo Alto Networks GlobalProtect instances.
The post Hackers Looking for Vulnerable Palo Alto Networks GlobalProtect Portals appeared first on SecurityWeek.
SecurityWeek – Read More
Lucid PhaaS Hits 169 Targets in 88 Countries Using iMessage and RCS Smishing
/in General NewsA new sophisticated phishing-as-a-service (PhaaS) platform called Lucid has targeted 169 entities in 88 countries using smishing messages propagated via Apple iMessage and Rich Communication Services (RCS) for Android.
Lucid’s unique selling point lies in its weaponizing of legitimate communication platforms to sidestep traditional SMS-based detection mechanisms.
“Its scalable,
The Hacker News – Read More