A week in security (November 18 – 24)

Last week on Malwarebytes Labs, we looked at stalkerware’s legal enforcement problem, announced our cooperation with other security vendors and advocacy groups to launch Coalition Against Stalkerware, published our fall 2019 review of exploit kits, looked at how Deepfake on LinkedIn makes for...

Cyborg ransomware posing as Windows update hits PCs

By Sudais Named Cyborg ransomware; the attackers try to lure users by sending emails prompting them to take immediate action with a two-line subject. This is a post from HackRead.com Read the original post: Cyborg ransomware posing as Windows update hits PCs...

Warning! Windows 10 Fake Update is Actually Ransomware

Microsoft never sends updates via email. Many folks don’t know that, which is why a new ransomware campaign masquerading as a Windows 10 update is so pernicious. You may have already gotten a fake notice saying “Install Latest Microsoft Update Now!” Or “Critical Microsoft Windows Update!”, with t...

Fake 'Windows Update' Installs Cyborg Ransomware

A malicious spam campaign that informs victims it contains a “critical Windows update” instead leads to the installation of Cyborg ransomware, researchers have found. Further, they were able to access its builder, which can be used to create malware variants. The email-based threat, discovered...

Exploit for Use After Free in Microsoft

ispy ispy : Eternalbluems17-010/BluekeepCVE-2019-0708 S...

BruteSploit - Collection Of Method For Automated Generate, Bruteforce And Manipulation Wordlist

BruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a penetration test to enumerate and can be used in CTF for manipulation,combine,transform and permutation some words or file text. Tutorial Check in...

Dracnmap - Exploit Network and Gathering Information with Nmap

Dracnmap is an open source program which is using to exploit the network and gathering information with nmap help. Nmap command comes with lots of options that can make the utility more robust and difficult to follow for new users. Hence Dracnmap is designed to perform fast scaning with the...

jSQL Injection v0.73 - Java Tool For Automatic SQL Database Injection

jSQL Injection is a lightweight application used to find database information from a distant server. jSQL is free , open source and cross-platform Windows, Linux, Mac OS X, Solaris. jSQL is part of Kali Linux , the official new BackTrack penetration distribution. jSQL is also included in Black Ha...

Next Generation Penetration Testing Distro: Cyborg Hawk

Next Generation Penetration Testing Distro The world’s most advanced, powerful and yet beautiful penetration testing distribution ever created.Lined up with ultimate collection of tools for pro Ethical Hackers and Cyber Security Experts. Simplify security in your IT infrastructure with Cyborg. It...

Whois.com Cross Site Scripting

Exploit Title: whois.com XSS Date: 26.11.2011 - 19.23 Author: Mr.PaPaRoSSe Tested On: Win7 Platform: Php ------------------------------------------------------------- http://domains.whois.com/hosting.php?type= "alert"DarkDevilZ / Mr.PaPaRoSSe"...

contra-SQL.txt

LiderHack.Org & BhhGroup.Org script name : Contra Haber Sistemi v1.0 Script Download : http://www.maxiasp.com/scriptler/HaberSistemi.rar Risk : High Found By : ShaFuck31 Thanks : | Dekolax | The RéD | CyBorG | DesquneR | f1r3b0y | BaZaL | SaboTaqe | ST@ReXT | BLaSTER | B1G B0SS | UNiKnoX |...

URBAN Multiple Local Buffer Overflow Vulnerabilities

Secunia Advisory: SA16680 Release Date: 2005-09-05 Critical: Not critical Impact: Privilege escalation Where: Local system Solution Status: Vendor Patch Software: URBAN The Cyborg Project 1.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it...