0L4Bs – Cross-site Scripting Labs For Web Application Security Enthusiasts
Cross-site scripting labs for web application security enthusiastsList of Chall :~ Chall 1 | URL~ Chall 2 | Form~ Chall...
Come Meet Us at the RSA Conference 2020
The RSA Conference 2020 is swiftly approaching, and we’re getting excited about the events we’ll be attending as we join...
Lokibot now using fake Epic Games installer to fool victims
The data harvesting malware Lokibot has again been upgraded by its creators, this time to impersonate a popular online game...
Harnessing the power of identity management (IDaaS) in the cloud
Sometimes, consumers have it easy. Take, for example, when they accidentally lock themselves out of their personal email. Their solution?...
A week in security (February 10 – 16)
Last week on Malwarebytes Labs, we explained how to battle online coronavirus scams with facts, discussed the persistent re-infection techniques...
Security Experts Say Hackers Can Hack Russian Banks In 5 Days
Experts from the information security company Positive Technologies came to the conclusion that hackers will need only five days on...
Users can now remove xHelper, the irremovable malware
Hooray! You can now remove the unremovable android malware. Yes, it is xHelper, the unremovable android malware. After 10 months...
Hackers Attack IOTA’s Trinity Wallet, Company Shuts Down the Network
The hackers attacked the IOTA's cryptocurrency wallet and stole all the funds. The theft happened by exploiting a vulnerability in...
Apple Becomes the First Major US Company to Say that the ‘Corona’ Epidemic Will Hit Its Finances
The iPhone maker cautions that disturbance in China from the coronavirus will result in revenues falling short of forecasts'. Underscoring...
Russian software will be installed on smartphones and smartwatches in the summer
Russian maps, search, antivirus and audio-visual services should be installed from July 1 on all new smartphones, tablets and smartwatches,...
AZORult spreads as a fake ProtonVPN installer
AZORult has its history. However, a few days ago, we discovered what appears to be one of its most unusual...
CVE Api – Parse & filter the latest CVEs from cve.mitre.org
Parse & filter the latest CVEs from https://cve.mitre.org. DocsUsagehttp://localhost:4000/cve?target=KEYWORDThe year parameter is optional.http://localhost:4000/cve?target=KEYWORD&year=YEARExampleshttp://localhost:4000/cve?target=ruby%20on%20railshttp://localhost:4000/cve?target=ruby%20on%20rails&year=2020If you want to parse the latest year,...
NekoBot – Auto Exploiter With 500+ Exploit 2000+ Shell
NekoBotV1 | Auto Exploiter With 500+ Exploit 2000+ ShellFeatures : Wordpress :1- Cherry-Plugin2- download-manager Plugin3- wysija-newsletters4- Slider Revolution 5- gravity-forms6-...
ServiceNow CMDB Asset Import Using the InsightVM Integration for ServiceNow CMDB
This post is part two of our blog series covering the recently released InsightVM Integration for ServiceNow CMDB application available...
Facebook Data Breach: API Security Risks
In the year 2018 Facebook disclosed a massive data breach due to which the company had to face a lawsuit...
Facebook and Google- The Kingpins Who Generated Millions of Ad Revenue This Year!
This fiscal year has been quite a success for all the social media platforms in terms of online digital advertising...
Gospider – Fast Web Spider Written In Go
GoSpider - Fast web spider written in GoInstallationgo get -u github.com/jaeles-project/gospiderFeaturesFast web crawlingBrute force and parse sitemap.xmlParse robots.txtGenerate and verify...
DecryptTeamViewer – Enumerate And Decrypt TeamViewer Credentials From Windows Registry
Uses CVE-2019-18988 to enumerate and decrypt TeamViewer credentials from Windows registry. Blogpost detailing the vulnerability: https://whynotsecurity.com/blog/teamviewer/Usage.DecryptTeamViewer.exeDownload DecryptTeamViewer Original Source
DrSemu – Malware Detection And Classification Tool Based On Dynamic Behavior
Dr.Semu runs executables in an isolated environment, monitors the behavior of a process, and based on Dr.Semu rules created by...
Hacker to stand trial for stealing and distributing Russian Railways data
The investigating authorities completed a criminal investigation into the theft of data from Russian Railways employees. This was reported by...
US Intelligence Reveals Malware, Blames North Korea
The FBI (Federal Bureau of Investigation), US Cyber Command, and DHS (Department of Homeland Security) recently discovered a hacking operation...
Syborg – Recursive DNS Subdomain Enumerator With Dead-End Avoidance System
Syborg is a Recursive DNS Domain Enumerator which is neither active nor completely passive. This tool simply constructs a domain...
Manul – A Coverage-Guided Parallel Fuzzer For Open-Source And Blackbox Binaries On Windows, Linux And MacOS
Manul is a coverage-guided parallel fuzzer for open-source and black-box binaries on Windows, Linux and macOS (beta) written in pure...
Fuzzowski – The Network Protocol Fuzzer That We Will Want To Use
The idea is to be the Network Protocol Fuzzer that we will want to use.The aim of this tool is...
