BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
PoC Published for Critical Fortra Code Execution Vulnerability
/in General NewsA critical directory traversal vulnerability in Fortra FileCatalyst Workflow could lead to remote code execution.
The post PoC Published for Critical Fortra Code Execution Vulnerability appeared first on SecurityWeek.
SecurityWeek – Read More
Audit Committees Rank Cybersecurity as Top Priority Amid SEC Crackdown
/in General NewsAudit committees rank cybersecurity as their top oversight priority, the Center for Audit Quality and Deloitte found in a survey conducted as the Securities and Exchange Commission pushed forward with strict rules on cyberattack disclosure.
Cyware News – Latest Cyber News – Read More
Get on CompTIA Certification Track With These $30 Study Guides
/in General NewsKickstart a lucrative career in IT with this extensive bundle that includes 10 study guides on CompTIA and more of today’s leading IT certifications.
Security | TechRepublic – Read More
South African Government Pension Data Leak Fears Spark Probe
/in General NewsLockBit ransomware gang claims 668GB of data it dumped online was stolen from South Africa’s pension agency.
darkreading – Read More
APT28 Hacker Group Targeting Europe, Americas, Asia in Widespread Phishing Scheme
/in General NewsThe Russia-linked threat actor known as APT28 has been linked to multiple ongoing phishing campaigns that employ lure documents imitating government and non-governmental organizations (NGOs) in Europe, the South Caucasus, Central Asia, and North and South America.
“The uncovered lures include a mixture of internal and publicly available documents, as well as possible actor-generated
The Hacker News – Read More
3 Ways Businesses Can Overcome the Cybersecurity Skills Shortage
/in General NewsWith budget constraints and a limited supply of skilled talent, businesses need to get creative to defend against rampant cybersecurity threats.
darkreading – Read More
I tested this $40 security camera from Amazon and it now has a place in my home
/in General NewsThe newest version of the Blink Mini sees key improvements that make it worthy even for non-budget shoppers.
Latest stories for ZDNET in Security – Read More
Hackers Claim Accessing 740GB of Data from Viber Messaging App
/in General NewsBy Waqas
Hackers claim to have breached Viber, stealing 740GB of data, including source code, and are now demanding ransom of 8 Bitcoin.
This is a post from HackRead.com Read the original post: Hackers Claim Accessing 740GB of Data from Viber Messaging App
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Automakers Are Telling Your Insurance Company How You Really Drive
/in General NewsPlus: The operator of a dark-web cryptocurrency “mixing” service is found guilty, and a US senator reveals that popular safes contain secret backdoors.
Security Latest – Read More
Hackers Using Cracked Software on GitHub to Spread RisePro Info Stealer
/in General NewsCybersecurity researchers have found a number of GitHub repositories offering cracked software that are used to deliver an information stealer called RisePro.
The campaign, codenamed gitgub, includes 17 repositories associated with 11 different accounts, according to G DATA. The repositories in question have since been taken down by the Microsoft-owned subsidiary.
“The repositories look
The Hacker News – Read More