─────────────────────────────────────────────────────────────────────────────── ▄▄▄▄▄▄▄▄▄▄▄▄▄ ░▒█████▌██ ▌██ ▌██▀▀ ░▒██▀▀▌██▀█ ███▌██▌██▐▐██▀▌ ▄▄▄▄▄▄▄▄▄▄▄▄▄ ▒▒▒▒▒▒▒▒▒▒▒▒▒ ▐██▌ ██▄▄▌██ ▌██ ▄ ░▒██ ██▄█ ██ ▌██▌██▐▐██ ▌ ▒▒▒▒▒▒▒▒▒▒▒▒▒ ▀▀▀▀▀▀▀▀▀▀▀▀▀ ▐██▌ ██ ▌██▄▄▌██▄▄▌ ░▒██▄▄▌██ █▌███▌██████▐██▄▌ ▀▀▀▀▀▀▀▀▀▀▀▀▀ ─────────────────────────────────────────────────────────────────────────────── TWITCH | TWITTER | PATREON | INSTAGRAM | GITHUB | PERISCOPE | TIKTOK | SNAPCHAT 2019-06-18 - S2:E3 - LiveOverflow ┌───┐┌───┐┌─┐╷╷ ┌─┬┐ ▄▄▄│ │ ││ ╲ ┤│ │││ │ │ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ │ └─┘─┘└───┘└─┴┴┘└┴─┘ │ │ │ · • Disgruntled security firm discloses zero-days in Facebooks WordPress · plugins • New Echobot malware is a smorgasbord of vulnerabilities • Sad SACK: Linux PCs, servers, gadgets can be crashed by Ping of Death network packets > Advisory • Yubico recalls FIPS Yubikey tokens after flaw found > Advisory • Samsung suggests scanning your smart TV for malware every few weeks • Homeland Security has tested a working BlueKeep exploit • Niantic is suing Global++ hackers ahead of Harry Potter launch • Target outage caused by error made during regular maintenance • Digital driver licence rollout to follow NSW election • Telegram blames China for 'powerful DDoS attack' during Hong Kong protests • Millions of Venmo transactions scraped in warning over privacy settings • Mozilla patches Firefox zero-day abused in the wild │ │ ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ ┐ ┐ ┌───┐┌───┐┌───┐┌───│ ┌─┬─┐┌───┐┌───│┌───│ ┌─┬┐ ▄▄▄│ ╲ ││ ╲ ││ ╲ ││ ╲ │ │ │ │ ╲ ┤│ ╲ ││ ╲ │ │ │ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ │ └───│└───┘└───┘└───┘ └─┘ └───┘└───┘└───┘└┴─┘ │ │ └───┘ │ · · • John Deere BadUSB • Reverse engineering the rendering of The Witcher 3, part 15 - fog • SIM swap horror story: Ive lost decades of data and Google wont lift a finger • Running iOS in QEMU to an interactive bash shell (1): tutorial • Why This Revenge Porn Activist Is Selling Nudes to Get to DEF CON │ │ ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ ┌─┐─┐ ┌─┬┐┌───┐┌──┬╴┌─┐─┐┌─┐ ▄▄▄│ │ │ │ │ │ ╲ ┤│ ├╴│ │ ││ │─┐▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ │ └─┴─┘└┴─┘ └───┘└──┘ └─┴─┘└─┴─┘ │ │ │ · • DFIR Cheatsheet · • Password Recovery Software • Microsoft Releases Sysmon 10 With DNS Query Logging Feature │ │ ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ ┌─┬┐┌───│┌──┬╴┌───│┌─┬─┐┌┬─┬┐ ▄▄▄ │ │ │ ╲ ││ ├╴│ ╲ ││ │ │ │ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ │ └┴─┘ └───┘└──┘ └───┘└─┘ └┴─┴┘ │ │Please note that all links in the Safari section may contain malicious, │ ·offensive, or unwanted content. Click at your own risk! View the source ·to see links, and take appropriate steps as needed. • Some malicious SQL gone wrong [hermit] • Totally Spies Paint - Microsoft [hermit] • Formerly open directory for UK Parliament [world] • A seemingly hijacked redirect from Western Union [xehle] • Elite Defacements 1 & 2 [x0] │ │ ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ ┌─┬─┐┌─┐─┐┌───┐┌───│┌─┐ ┌─┬┐ ▄▄▄│ │ │ ├ ││ ╲ ┤│ ╲ ││ ├ │ │ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ │ └─┴─┘└─┘─┘└───┘└───┘└─┴─┘└┴─┘ │ │ │ · • cryptoapi: SymCrypt modular inverse algorithm · • kube-env-stealer: Automated GKE Kubelet Impersonation and Cluster Secret Stealer via kube-env │ │ ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀