sandcat

Sandcat Browser Sandcat은 Chromium과 Lua의 속도와 성능을 결합한 가벼운 멀티탭 웹 브라우저입니다. Sandcat은 내장된 라이브 헤더, 확장 가능한 사용자 인터페이스 및 명령줄 콘솔, 리소스 뷰어, 그리고 웹 개발자와 침투 테스터, 라이브 웹 애플리케이션을 검사해야 할 때 유용한 다양한 기능을 제공합니다. 자세한 내용은 http://www.syhunt.com/sandcat/를 방문하세요. Sandcat 아키텍처에 대한 추가 세부 사항은 아래의 docs 디렉터리 및 크레딧 섹션도 참조하십시오. 디렉터...

WebView2-Cookie-Stealer

블로그 포스트 자세한 내용은 이 블로그 포스트를 읽어주세요. 소스 코드 이 코드는 Microsoft의 WebView2 코드의 수정된 버전입니다. 현재 코드는 정리하고 더 좋게 만들 수 있습니다. 데모 실행 예제 사용 예제 사용법 Windows 10 및 11에서 테스트 완료. 바이너리가 실행되면 https://office.com/login이 로드됩니다. JavaScript 키로거가 모든 페이지에 주입되고 키 입력이 http://127.0.0.1:8080로 전송됩니다. 또한 사용자가 성공적으로 인증하면...

LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts

Cybersecurity researchers have flagged a previously undocumented Rust-based remote access trojan RAT codenamed LabubaRAT that masquerades as NVIDIA software to blend into target environments. "LabubaRAT creates a reusable foothold for hands-on activity," Blackpoint Cyber researchers Sam Decker an...

EUVD-2023-28882

Malicious code in bioql PyPI...

EUVD-2023-26990

Malicious code in bioql PyPI...

EUVD-2024-26096

Malicious code in bioql PyPI...

Hackers Exploit Webview2 to Deploy CoinLurker Malware and Evade Security Detection

Bogus software update lures are being used by threat actors to deliver a new stealer malware called CoinLurker. "Written in Go, CoinLurker employs cutting-edge obfuscation and anti-analysis techniques, making it a highly effective tool in modern cyber attacks," Morphisec researcher Nadav Lorber...

PVS 2402 | Console Setup: EdgeWebView2 not installing correctly

When launching the "Console Installer" it tries to install the prerequired software which includes Edge WebView2. In some cases when installing it from the iso, Edge WebView2 might not show up in "appwiz.cpl" or "Apps and Features". If you start the "Console Installer" again it is shown as "not...

The vulnerability of the Webview2 control in the Microsoft Edge browser allows attackers to perform spoofing attacks.

The vulnerability of the Webview2 control in Microsoft Edge exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks...

Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based Webview2, which can be exploited by attackers to conduct spoofing attacks...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities - Apr24

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2024-29049

Microsoft Edge Chromium-based Webview2 Spoofing Vulnerability...

CVE-2024-29049

Microsoft Edge Chromium-based Webview2 Spoofing Vulnerability...

CVE-2024-29049

CVE-2024-29049 describes a spoofing vulnerability in Microsoft Edge (Chromium-based) that involves the Edge WebView2 component. Connected sources consistently identify the affected element as the WebView2 surface used by Edge’s Chromium-based browser, resulting in spoofing of the user interface. ...

CVE-2024-29049 Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

...

Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

...

Microsoft Edge (Chromium) < 122.0.2365.120 / 123.0.2420.81 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 122.0.2365.120 / 123.0.2420.81. It is, therefore, affected by multiple vulnerabilities as referenced in the April 4, 2024 advisory. - Microsoft Edge Chromium-based Webview2 Spoofing Vulnerability CVE-2024-29049 -...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based Webview2, which can be exploited by attackers to conduct spoofing attacks...

Zoom Client for Meetings < 5.13.3 Vulnerability (ZSB-23001)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.13.3. It is, therefore, affected by a vulnerability as referenced in the ZSB-23001 advisory. - Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for...

Beware: New DoubleFinger Loader Targets Cryptocurrency Wallets with Stealer

A novel multi-stage loader called DoubleFinger has been observed delivering a cryptocurrency stealer dubbed GreetingGhoul in what's an advanced attack targeting users in Europe, the U.S., and Latin America. "DoubleFinger is deployed on the target machine, when the victim opens a malicious PIF...