Subdomain enumeration with open source tool called SubEnum >  F5 BIG-IP (CVE-2023-46747) exploit > ARP scan on internal network after the exploit > Port / Service enumeration > Lateral movement to MSSQL Database Server > Credential dump from MSSQL server > RDP into MSSQL server >…

If you want to read the original court document, here it is: documentcloud.org/documents/2452…

Notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

github.com/amlweems/xzbot

'Russian' hacktivists KillNet made curious statements: 1. That terract was organized by FSB; 2. That weapons were sold by Luger on Rutor who is under FSB; 3. ..'to justify their actions towards another country' [UA]; 4. Spread rumors about new terract.
HUR burnt them too fast :(

My condolences to victims & their relatives in terracts in Moscow. It's time to accept that radical islamism is a common threat and enemy; I hope that despite all_ongoing_BS countries will never stop informational exchange about terrorists. Inshallah to all adequate muslim guys.

⚠️ Phishing with Developer Tool blocking still active with new masquerading technique.

📧 We’ve noticed that attackers are sending emails containing RTF documents with the Reconciliation lure in the following naming pattern:

kiwinet. co .il___Reconciliation .PDF .rtf

🔗…