Popular Rust Crate liblzma-sys Compromised with XZ Utils Backdoor Files

Over 800 npm Packages Found with Discrepancies, 18 Exploit 'Manifest Confusion'

New Wi-Fi Vulnerabilities Expose Android and Linux Devices to Hackers

CISA and OpenSSF Release Framework for Package Repository Security

Microsoft Introduces Linux-Like 'sudo' Command to Windows 11

Tell Me Your Secrets Without Telling Me Your Secrets

Critical Vulnerabilities Uncovered in Open Source CasaOS Cloud Software

Holehe - Tool To Check If The Mail Is Used On Different Sites Like Twitter, Instagram And Will Retrieve Information On Sites With The Forgotten Password Function

Holehe Online Version

Summary

Efficiently finding registered accounts from emails.

Holehe checks if an email is attached to an account on sites like twitter, instagram, imgur and more than 120 others.

• Retrieves information using the forgotten password function.
• Does not alert the target email.
• Runs on Python 3.

Installation

With PyPI

pip3 install holehe

With Github

git clone https://github.com/megadose/holehe.git
cd holehe/
python3 setup.py install

Quick Start

Holehe can be run from the CLI and rapidly embedded within existing python applications.

 CLI Example

holehe test@gmail.com

 Python Example

import trio
import httpx

from holehe.modules.social_media.snapchat import snapchat


async def main():
    email = "test@gmail.com"
    out = []
    client = httpx.AsyncClient()

    await snapchat(email, client, out)

    print(out)
    await client.aclose()

trio.run(main)

Module Output

For each module, data is returned in a standard dictionary with the following json-equivalent format :

{
  "name": "example",
  "rateLimit": false,
  "exists": true,
  "emailrecovery": "ex****e@gmail.com",
  "phoneNumber": "0*******78",
  "others": null
}

• rateLitmit : Lets you know if you've been rate-limited.
• exists : If an account exists for the email on that service.
• emailrecovery : Sometimes partially obfuscated recovery emails are returned.
• phoneNumber : Sometimes partially obfuscated recovery phone numbers are returned.
• others : Any extra info.

Rate limit? Change your IP.

Maltego Transform : Holehe Maltego

Thank you to :

• navlys
• Chris
• socialscan
• UhOh365
• soxoj
• mxrch (and for the logo)
• novitae

Donations

For BTC Donations : 1FHDM49QfZX6pJmhjLE5tB2K6CaTLMZpXZ

 License

GNU General Public License v3.0

Built for educational purposes only.

Modules

Enhancing Security Operations Using Wazuh: Open Source XDR and SIEM

Hackers Flood NPM with Bogus Packages Causing a DoS Attack

Attackers Flood NPM Repository with Over 15,000 Spam Packages Containing Phishing Links

Threat Actors Turn to Sliver as Open Source Alternative to Popular C2 Frameworks

Google Launches OSV-Scanner Tool to Identify Open Source Vulnerabilities

Open Source Ransomware Toolkit Cryptonite Turns Into Accidental Wiper Malware

Their Photos Were Posted Online. Then They Were Bombed

Pocsploit - A Lightweight, Flexible And Novel Open Source Poc Verification Framework

pocsploit is a lightweight, flexible and novel open source poc verification framework

Pain points of the POC framework in the market

1. There are too many params, I don't know how to get started, but only some of them are commonly used.
2. YAML poc framework(like nuclei & xray) is not flexible enough. the conversion cost is very high when writing poc. Sometimes it's hard when encountering non-http protocols. (only hex can be used)
3. Sometimes POC has false positives, which can be avoided by accurate fingerprint matching.
4. It is heavily dependent on the framework. Poc in pocsploit can be used in the framework and can also be used alone.

Advantages of pocsploit

1. Lighter, does not depend on the framework, a single poc can run
2. Easier to rewrite Poc
3. More flexible (compared to nuclei, xray, goby, etc.)
4. Fewer false positives, providing fingerprint prerequisite judgment, you can first judge whether the site has the fingerprint of a certain component, and then perform POC verification, which is more accurate
5. There are many ways to use, providing poc / exp
6. Detailed vulnerability information display
7. Poc ecological sustainability: I will continue to update the Poc to modules/, and welcome everyone to join us Contribute Poc

Encountered code/poc issues, please Submit issue

Poc Statistics

cve	cnnvd	others
345	7	102

Usage

Install requirements

pip3 install -r requirements.txt

• poc to verify single website

python3 pocsploit.py -iS "http://xxxx/" -r "modules/" -t 100 --poc

• specific poc

python3 pocslpoit.py -iS "http://xxxxx" -r "modules/vulnerabilities/thinkphp/thinkphp-5022-rce.py" --poc

• exp to exploit many websites (with urls in a file)

python3 pocslpoit.py -iF "urls.txt" -r "modules/vulnerabilities/" --exp

• Turn on fingerprint pre-verification, verify the fingerprint first, and then enter the poc verification after matching

python3 pocslpoit.py -iS "http://xxxxx" -r "modules/vulnerabilities/thinkphp/thinkphp-5022-rce.py" --poc --fp

• Output to file & console quiet mode

python3 pocslpoit.py -iS "http://xxxx" -r "modules/vulnerabilities/" --poc -o result/result.log -q

• Other Usage

python3 pocsploit.py --help

others

OOB

Please config conf/config.py

P.S. How to build your own DNSLog，please visit Hyuga-DNSLog

• DNSLOG_URI: DNSLog Address
• DNSLOG_TOKEN: Token
• DNSLOG_IDENTIFY: your identity

Download Pocsploit

Removing Open Source Visibility Challenges for Security Operations Teams

Identifying security threats early can be difficult, especially when you’re running multiple security tools across disparate business units and cloud projects. When it comes to protecting cloud-native applications, separating legitimate risks from noise and distractions is often a real challenge.

That’s why forward-thinking organizations look at things a little differently. They want to help their application developers and security operations (SecOps) teams implement unified strategies for optimal protection. This is where a newly expanded partnership from Trend Micro and Snyk can help.

Dependencies create risk

In today’s cloud-native development streams, the insatiable need for faster iterations and time-to-market can impact both downstream and upstream workflows. As a result, code reuse and dependence on third-party libraries has grown, and with it the potential security, compliance and reputational risk organizations are exposing themselves to.

Just how much risk is associated with open source software today? According to Snyk research, vulnerabilities in open source software have increased 2.5x in the past three years. https://info.snyk.io/sooss-report-2020. What’s more, a recent report claimed to have detected a 430% year-on-year increase in attacks targeting open source components, with the end goal of infecting the software supply chain. While open source code is therefore being used to accelerate time-to-market, security teams are often unaware of the scope and impact this can have on their environments.

Managing open source risk

This is why cloud security leader Trend Micro, and Snyk, a specialist in developer-first open source security, have extended their partnership with a new joint solution. It’s designed to help security teams manage the risk of open source vulnerabilities from the moment code is introduced, without interrupting the software delivery process.

This ambitious achievement helps improve security for your operations teams without changing the way your developer teams work. Trend Micro and Snyk are addressing open source risks by simplifying a bottom-up approach to risk mitigation that brings together developer and SecOps teams under one unified solution. It combines state-of-the-art security technology with collaborative features and processes to eliminate the security blind spots that can impact development lifecycles and business outcomes.

Available as part of Trend Micro Cloud One, the new solution being currently co-developed with Snyk will:

• Scan all code repositories for vulnerabilities using Snyk’s world-class vulnerability scanning and database
• Bridge the organizational gap between DevOps & SecOps, to help influence secure DevOps practices
• Deliver continuous visibility of code vulnerabilities, from the earliest code to code running in production
• Integrate seamlessly into the complete Trend Micro Cloud One security platform

This unified solution closes the gap between security teams and developers, providing immediate visibility across modern cloud architectures. Trend Micro and Snyk continue to deliver world class protection that fits the cloud-native development and security requirements of today’s application-focused organizations.

The post Removing Open Source Visibility Challenges for Security Operations Teams appeared first on .