Feds Reveal Hidden Cobra's Trove of Espionage Tools

The U.S. Department of Homeland Security and Federal Bureau of Investigation have exposed what they say are hacking tools used by the North Korean-sponsored APT group Hidden Cobra. The disclosure was the result of a broad government effort to combat the advanced persistent threat group, who have...

PayloadsAllTheThings

This is a collection of security-related tools and resources, including a list of useful payloads and bypass techniques for web application security and penetration testing/CTF Capture The Flag. The repository includes tools such as Pacu, an AWS exploitation framework, and Bucket Finder, a tool f...

Report: Microsoft’s GitHub Account Gets Hacked

Hackers have broken into Microsoft’s GitHub account and stolen 500 GB of data from the tech giant’s own private repositories on the developer platform, according to published reports. A group that calls itself Shiny Hunters claims it stole and then leaked the data, which did not appear to include...

InfinityBlack Dismantled After Selling Millions of Credentials

The InfinityBlack hacking group, which is responsible for selling millions of stolen credentials, has been dismantled. Polish and Swiss law-enforcement authorities, supported by Europol, arrested five individuals in Poland believed to be members of InfinityBlack, on April 29. According to Europol...

InfinityBlack hacking group dismantled; 5 hackers arrested

By Waqas Authorities have arrested 5 members of the infamous InfinityBlack hacking group known for hacking databases... This is a post from HackRead.com Read the original post: InfinityBlack hacking group dismantled; 5 hackers arrested...

SAS@Home Virtual Summit Showcases New Threat Intel, Industry Changes

As the COVID-19 pandemic continues to force in-person cybersecurity event cancellations, Kaspersky is forging ahead with a virtual security summit, SAS@home. Topics on the agenda include threat intel on advanced persistent threats APTs, new vulnerability research, and topics related to a...

Amid Its Covid-19 Crisis, China Was Still Hacking Uighurs’ iPhones

Security researchers reveal a months-long, indiscriminate campaign targeting the iPhones of Chinese Muslims...

Exploit for Double Free in Whatsapp

WhatsPayloadRCE This is a Automated Generate Payload for CVE-...

Zero-Day Warning: It's Possible to Hack iPhones Just by Sending Emails

Watch out Apple users! The default mailing app pre-installed on millions of iPhones and iPads has been found vulnerable to two critical flaws that attackers are exploiting in the wild, at least, from the last two years to spy on high-profile victims. The flaws could eventually let remote hackers...

Chinese Hackers Using New iPhone Hack to Spy On Uyghur Muslims

A Chinese hacking group has been found leveraging a new exploit chain in iOS devices to install a spyware implant targeting the Uyghur Muslim minority in China's autonomous region of Xinjiang. The findings, published by digital forensics firm Volexity, reveal that the exploit — named "Insomnia" —...

Fraud & hacking guides are the most sold item on dark web

By Sudais Asif Who could have imagined fraud and hacking guides are the most sold item on the dark web aiming at teaching people how to hack PayPal or a website, etc. This is a post from HackRead.com Read the original post: Fraud & hacking guides are the most sold item on dark web...

SCANNER-INURLBR

It is an offensive tool for web application vulnerability scanning. The primary CVE ID present in the context is not explicitly mentioned, but the tool is designed for Google Hacking and web application vulnerability scanning. The target product/service or framework is not explicitly stated, but...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I'm being interviewed on "Hacking in the Public Interest" as part of the Black Hat Webcast Series, on Thursday, April 16, 2020 at 2:00 PM EDT. The list is maintained on this page...

52k Iranian ID cards with selfies sold on dark web & hacking forum

By Waqas The data is being sold both on the dark web and an infamous hacking forum putting the privacy of thousands of Iranians at risk. This is a post from HackRead.com Read the original post: 52k Iranian ID cards with selfies sold on dark web & hacking forum...

Terabytes of OnlyFans data being sold on hacking forum

By Waqas Last month reports emerged that OnlyFans website was targeted by hackers after a massive database... This is a post from HackRead.com Read the original post: Terabytes of OnlyFans data being sold on hacking forum...

Houseparty denies hacking user accounts; offers $1 million reward

By Deeba Ahmed Houseparty, a video conferencing-based desktop and mobile application owned by the Fortnite fame Epic Games, has denied these claims. This is a post from HackRead.com Read the original post: Houseparty denies hacking user accounts; offers $1 million reward...

Personal details & phone numbers of 42M Iranians sold on a hacking forum

By Waqas Iranians, unfortunately, have been hit hard by Coronavirus and the last thing they would like to have is getting their privacy breached. This is a post from HackRead.com Read the original post: Personal details & phone numbers of 42M Iranians sold on a hacking forum...

Chinese Hacking Surges Amid Coronavirus Crisis

Plus: A Windows zero day, an iOS watering hole, and more of the week's top security news...

Katana - A Python Tool For Google Hacking

Katana-ds ds for dorkscanner is a simple python tool that automates Google Hacking/Dorking and support Tor It becomes more powerful in combination with GHDB Installation : Use the package manager pip to install requirements cd Katana python3 pip install -r requirments python3 katana-ds.py Tested...

Turning an OBD-II reader into a USB / NFC attack tool

One of my favourite sorts of hardware hacking is making a device do something it was never intended for. It's creative, disruptive, and fun. Everyone has their own way of going about things. Different methodologies, habits, and skill sets mean that approaches will be diverse. This is how I work...