thc-tips-tricks-hacks-cheat-sheet

I trucchi preferiti di THC: Suggerimenti, Tricks & Hacks Cheat Sheet https://thc.org/tips Una raccolta dei nostri trucchi preferiti. Molti di questi trucchi non sono nostri. Ci limitiamo a raccoglierli. Mostriamo i trucchi 'così come sono' senza spiegare perché funzionano. Devi conoscere Linux pe...

phantun

Phantun Un obfuscator UDP-to-TCP leggero e veloce. Indice Phantun Ultima versione Panoramica Utilizzo 1. Abilitare l'inoltro IP del kernel 2. Aggiungere le regole firewall necessarie Client Usando nftables Usando iptables Server Usando nftables Usando iptables 3. Eseguire i binari di Phantun...

[SECURITY] Fedora 42 Update: openvpn-2.6.20-1.fc42

OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for...

Network tunneling with… QEMU?

Cyberattackers tend to give preference to legitimate tools when taking various attack steps, as these help them evade detection systems while keeping malware development costs down to a minimum. Network scanning, capturing a process memory dump, exfiltrating data, running files remotely, and even...

CVE-2021-44425

An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.3. An unnecessarily open listening port on a machine in the LAN of an attacker, opened by the Anydesk Windows client when using the tunneling feature, allows the attacker unauthorized access to the local machine's AnyDesk...

Multiple government entities targeted by China-linked Daxin malware

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here A technologically advanced and previously undocumented malware Daxin was used as the advanced persistent threat APT weapon by China-linked actor against government critical infrastructures across the globe. This malware can re...

Malicious Cyber Actor Use of Network Tunneling and Spoofing to Obfuscate Geolocation

Summary This Activity Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge ATT &CK™ and Pre-ATT&CK frameworks. See the MITRE ATT&CK for Enterprise and Pre-ATT&CK frameworks for referenced threat actor techniques. Attributing malicious cyber activity that uses network tunneli...

l2tpd Malformed Data Remote DoS

The remote host is running l2tpd, a network tunneling application. The installed version is vulnerable to a denial of service attack. An attacker may use this flaw to disable the VPN and prevent partners / employees from connecting to it. C Tenable Network Security, Inc. Ref:...