Getty Images/iStockphoto A new trend is emerging among ransomware groups where they prioritize stealing data from workstations used by top …
CISA: SolarWinds hackers also used password guessing to breach targets
The US Cybersecurity and Infrastructure Security Agency (CISA) said today that the threat actor behind the SolarWinds hack also used password …
Solarflare – SolarWinds Orion Account Audit / Password Dumping Utility
Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out …
New side-channel attack can recover encryption keys from Google Titan security keys
A duo of French security researchers has discovered a vulnerability impacting chips used inside Google Titan and YubiKey hardware security …
UhOh365 – A Script That Can See If An Email Address Is Valid In Office365 (User/Email Enumeration)
A script that can see if an email address is valid in Office365. This does not perform any login attempts, …
Hack-Tools v0.3.0 – The All-In-One Red Team Extension For Web Pentester
The all-in-one Red Team browser extension for Web Pentesters HackTools, is a web extension facilitating your web application penetration tests, …
SolarWinds fallout: DOJ says hackers accessed its Microsoft O365 email server
NEW YORK, NY – DECEMBER 11: A US Department of Justice seal is displayed on a podium during a news …
US government formally blames Russia for SolarWinds hack
Four US cyber-security agencies, including the FBI, CISA, ODNI, and the NSA, have released a joint statement today formally accusing the Russian …
MaskPhish – Give A Mask To Phishing URL
MaskPhish is a simple script to hide phishing URL under a normal looking URL(google.com or facebook.com). Source : KitPloit – …
SolarWinds: The more we learn, the worse it looks
In March of 2020, Americans began to realize that the coronavirus was deadly and going to be a real problem. …