Catchy names - "USBHarpoon" and "USB Condom" .You should read this if you are used to borrowing USB charging cables.

 USBHarpoon  - Malicious version of a USB charging cable, one that can compromise a computer in just a few seconds. Once plugged in, it turns into a peripheral device capable of typing and launching commands.

The USBHarpoon / BadUSB cable attack is successful on unlocked machines, where it can launch commands that download and execute a payload. On Windows, the commands can run directly from the Run prompt; on Mac and Linux it could launch a terminal and work from there.

Solution is "USB Condom" , (I am not joking)- An electronic accessory like this blocks the data pins on a USB cable and allows only power to go through (but, they can be infected too)


https://www.bleepingcomputer.com/news/security/usbharpoon-is-a-badusb-attack-with-a-twist/

Police can unlock your iPhone with "GrayKey"

Regional police forces, such as the Maryland State Police and Indiana State Police, are procuring a technology called ‘GrayKey’ which can break into iPhones, including the iPhone X running the latest operating system iOS 11.

Grayshift has been shopping its iPhone cracking technology to police forces. The firm, which includes an ex-Apple security engineer on its staff, provided demonstrations to potential customers, according to one email.


The device comes in two versions: a $15,000 one which requires online connectivity and allows 300 unlocks (or $50 per phone), and and an offline, $30,000 version which can crack as many iPhones as the customer wants.


https://motherboard.vice.com/en_us/article/vbxxxd/unlock-iphone-ios11-graykey-grayshift-police

Want to hack into systems exposed to Internet - No skills needed just run "AutoSploit" Script.

It crawls the internet looking for machines that are possibly vulnerable to attack – typically due to unpatched security bugs – and automatically takes over them for you

The software, posted publicly on GitHub this week by someone calling themselves Vector, is called AutoSploit. It makes mass hacking exceedingly easy. After collecting targets via the Shodan search engine – an API key is required – the Python 2.7 script attempts to run Metasploit modules against them.

https://www.theregister.co.uk/2018/01/31/auto_hacking_tool/

Top 10 Security Tools according to ToolsWatch.Org Readers

Not all are free

01 – OWASP ZAP – Zed Attack Proxy Project
02 – Lynis
03 – Haka
04 – Faraday
05 – BeEF – The Browser Exploitation Framework
06 – Burp Suite
07 – PeStudio
08 – Nmap
09 – IDA Pro
10 – OWASP Offensive (Web) Testing Framework


Check here:
http://www.toolswatch.org/2016/02/2015-top-security-tools-as-voted-by-toolswatch-org-readers/

BlindElephant - Web Application Fingerprinter

 Attempts to discover the version of a (known) web application by comparing static files at known locations against pre-computed hashes for versions of those files in all all available releases

Follow this link if interested:

http://blindelephant.sourceforge.net/

Free Web Assessment Tool - RAWR

RAWR – Rapid Assessment of Web Resources

It does have a few pre-reqs


The link below has more information:-
http://www.darknet.org.uk/2014/04/rawr-rapid-assessment-of-web-resources/

Email addresses of LinkedIn users exposed via a web browser add-on tool

I hope you are not using the same Email address for all your important accounts. (Are you?)

As usual, LinkedIn is defensive and goes the usual route of threatening Sell Hack. 

Why not take the easy way of conding securely, that should save a lot of trouble.

According to the article:- 

Sell Hack is available as a free extension to the Chrome browser that, once installed, will pop up a "hack in" button on LinkedIn profiles.

Sell Hack insisted that the the tool was created for marketing professionals and that all data is publicly available.

But the social network for professionals did not agree.

"We are doing everything we can to shut Sell Hack down. On 31 March LinkedIn's legal team delivered Sell Hack a cease-and-desist letter as a result of several violations," a spokesman told the BBC.

The link below has more information:-

http://www.bbc.com/news/technology-26833863

Update-1

The plug-in seems to collecting publicly available data and it looks like LinkedIn is trying to help the users but, I am not sure anything can be done since, the data is anyway public.

(from: http://www.tripwire.com/state-of-security/top-security-stories/sell-hack-plug-really-reveal-email-addresses-linkedin/ )

And that is likely the case, according to Yahoo columnist Alyssa Bereznak, who writes that the application reveals the account holders email address “by running through an algorithm while you’re on a person’s LinkedIn page. The algorithm checks publicly available data to produce that person’s email address, or at least its very best guess.”

(Here is the scary part)
Why all the fuss if the Sell Hack does not compromise LinkedIn’s security? Apparently when the plug-in is installed, users must grant it permissions which allow the software to monitor users’ activity and harvest data.

“The catch is, even after you’ve used SellHack, the extension is able to watch your activity on the site and collect the information of any direct connection whose page you’ve decided to visit,” wrote Bereznak. “What it’s using this information for is unclear.”

Tools / Utilities - Free Security Tools - Top 125 Network Security Tools

This one is dynamic and the rating shows their popularity.

This is a good bookmark for all security folks



LINK:

http://sectools.org/

Tools / Utilities - SIFT - SANS Investigate Forensic Toolkit 3.0 is now available (FREE)

This is a free open-source forensic tools designed to perform detailed digital forensic examinations.

The link below has information on its capabilities , instructions to install on a Linux box and how to download a fully ready VMware appliance.




The links below has more information and download info:

http://digital-forensics.sans.org/blog/2014/03/23/sans-sift-3-0-virtual-machine-released

Pen Testing Anonymously - Using Tor and Privoxy

Useful when you don't want to be identified when researching bad/Malicious site.



The links below has more information:

http://pen-testing.sans.org/blog/pen-testing/2014/03/16/tor-nonymous-using-tor-for-pen-testing

Toos / Utilities - SSLsplit - For man-in-the-middle attacks against SSL/TLS for PenTest and Forensics

.

SNIPPETS from the Article:-

Connections are transparently intercepted through a network address translation engine and redirected to SSLsplit. SSLsplit terminates SSL/TLS and initiates a new SSL/TLS connection to the original destination address, while logging all data transmitted

SSLsplit supports plain TCP, plain SSL, HTTP and HTTPS connections over both IPv4 and IPv6. For SSL and HTTPS connections, SSLsplit generates and signs forged X509v3 certificates on-the-fly, based on the original server certificate subject DN and subjectAltName extension. SSLsplit fully supports Server Name Indication (SNI) and is able to work with RSA, DSA and ECDSA keys and DHE and ECDHE cipher suites. SSLsplit can also use existing certificates of which the private key is available, instead of generating forged ones. SSLsplit supports NULL-prefix CN certificates and can deny OCSP requests in a generic way.

The links below has more information:

http://www.toolswatch.org/2014/03/sslsplit-v0-4-8-transparent-and-scalable-ssltls-interception/

WIG - Another webapp information Gatherer

OS identification is done by using the value of the ‘server’ and ‘X-Powered-By’ in the response header.

The version detection is based on md5 checksums of statics files, regex and string matching. OS detection is based on headers and packages listed in the ‘server’ header

http://www.darknet.org.uk/2014/02/wig-webapp-information-gatherer-identify-cms/