Cyber Research #34

Mert Coskuner

2 min readApr 16, 2022

Articles

Akamai Blog | Critical Remote Code Execution Vulnerabilities in Windows RPC Runtime

Microsoft's April 2022 Patch Tuesday introduced patches to more than a hundred new vulnerabilities in various…

www.akamai.com

CVE-2022-25165: Privilege Escalation to SYSTEM in AWS VPN Client - Rhino Security Labs

Vulnerabilities Overview Affected Product The AWS VPN Client application is affected by an arbitrary file write as…

rhinosecuritylabs.com

AWS RDS Vulnerability Leads to AWS Internal Service Credentials

Lightspin's Research Team obtained credentials to an internal AWS service by exploiting a local file read vulnerability…

blog.lightspin.io

Malware on Cloud: Linux, Database, Cryptomining, Ransomware - Orca Security

In this blog, we will discuss the main malware types you may encounter in your cloud with examples and ways to detect…

orca.security

mr.d0x

Analyzing Cortex XDR and finding ways to bypass it. Update Palo Alto's security team promptly released the following…

mrd0x.com

mr.d0x

This article explores a phishing technique that simulates a browser window within the browser to spoof a legitimate…

mrd0x.com

Tools

GitHub - kris-nova/boopkit: Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior…

Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin. - GitHub…

github.com

GitHub - xforcered/InvisibilityCloak: Proof-of-concept obfuscation toolkit for C# post-exploitation…

Proof-of-concept obfuscation toolkit for C# post-exploitation tools. This will perform the below actions for a C#…

github.com

GitHub - utkusen/socialhunter: crawls the website and finds broken social media links that can be…

Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an…

github.com

GitHub - stackrox/stackrox: The StackRox Kubernetes Security Platform performs a risk analysis of…

The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility…

github.com

Thank you for reading!

If you find this newsletter useful and know other people who would too, forward it to them to help spread the knowledge. If you have questions, comments or feedback, reach out via /in/mcoskuner.

Cyber Research #34

Articles

Akamai Blog | Critical Remote Code Execution Vulnerabilities in Windows RPC Runtime

Microsoft's April 2022 Patch Tuesday introduced patches to more than a hundred new vulnerabilities in various…

CVE-2022-25165: Privilege Escalation to SYSTEM in AWS VPN Client - Rhino Security Labs

Vulnerabilities Overview Affected Product The AWS VPN Client application is affected by an arbitrary file write as…

AWS RDS Vulnerability Leads to AWS Internal Service Credentials

Lightspin's Research Team obtained credentials to an internal AWS service by exploiting a local file read vulnerability…

Malware on Cloud: Linux, Database, Cryptomining, Ransomware - Orca Security

In this blog, we will discuss the main malware types you may encounter in your cloud with examples and ways to detect…

mr.d0x

Analyzing Cortex XDR and finding ways to bypass it. Update Palo Alto's security team promptly released the following…

mr.d0x

This article explores a phishing technique that simulates a browser window within the browser to spoof a legitimate…

Tools

GitHub - kris-nova/boopkit: Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior…

Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin. - GitHub…

GitHub - xforcered/InvisibilityCloak: Proof-of-concept obfuscation toolkit for C# post-exploitation…

Proof-of-concept obfuscation toolkit for C# post-exploitation tools. This will perform the below actions for a C#…

GitHub - utkusen/socialhunter: crawls the website and finds broken social media links that can be…

Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an…

GitHub - stackrox/stackrox: The StackRox Kubernetes Security Platform performs a risk analysis of…

The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility…

Thank you for reading!

Written by Mert Coskuner