🐀 Cybersecurity Advance Class
🎭 ARP Spoofing (ARP Poisoning)

In una rete locale, un attaccante può inviare risposte ARP false e convincere i dispositivi che il suo MAC appartenga al gateway. Il risultato? Il traffico passa attraverso di lui, aprendo la porta a intercettazione, manipolazione dei dati e attacchi Man-in-the-Middle (MITM).

@sicurezza

#CyberSecurity #ARP #MITM #Networking #Nextred

Assholes Will Always Exist

Over the years they've been called a lot of things. Some of the terms, these miscreants actually donned like a cape or wore the disparaging noun as a badge of honor:

- #cracker
- #list_bully
- #foreign_agent
- #incel
- #phishermen
- #spammer
- #blackhat

The list is truly, much too long to collate in a single fly by topical mention; and that's really not the point of what I'm writing about here either. What is absolutely pernicious, is the #MiTM style attack on software distribution rising to a level where even the source cannot be held in high confidence.

When these atrocious acts become the commonplace verbs to the infamous nouns above it is time that each and every one of us stand vigil and at the ready to come to the aid of our community members. Here's one such place where we can begin - the #AUR: https://archlinux.org/news/active-aur-malicious-packages-incident/

#tallship #FOSS #malware

⛵

https://mrbruh.com/amd2/

#amd #rce #mitm #vulnerabilities

oproxy - an an open-source local proxy server for inspecting, replaying, and modifying HTTP, HTTPS, and SOCKS5 traffic - released in v0.1.7 and v0.1.8

https://secburg.com/posts/oproxy-v017-v018-released/

#mitm #mitmproxy #tools #proxy #opensource

👉 New post: 10 Months Unpatched: Dissecting LocalSend CVE-2025-54792

LocalSend uses HTTPS, but this CVE shows why encryption is not same as authentication. Forged UDP discovery packet poison nearby device list, making encrypted transfer go to wrong peer.

In this write-up:
- How unverified UDP data becomes a trusted UI entry
- A Python PoC using spoofed packet & fake HTTPS receiver
- A proposed fix for broken model

🔗 Link: https://blog.joeyc.dev/posts/localsend-cve-2025-54792/

#LocalSend #CVE #CyberSecurity #InfoSec #MITM

oproxy - an an open-source local proxy server for inspecting, replaying, and modifying HTTP, HTTPS, and SOCKS5 traffic - released in v0.1.6

https://secburg.com/posts/oproxy-v016-released/

#mitm #mitmproxy #tools #proxy #opensource