β𧩠Mischief and Malware Enthusiast ππ΅οΈββοΈ | Breaking firewalls since '13 π₯
"Professionally smitten by the devilish charm of malicious ingenuity." #CyberRomantic
~ Nullum Cacas Statum ~ αͺαα hαͺα₯α αhα¬ ααΎαα αΎf ααΎαΆs ~
#Malware | #Phishing | #Hacking | #Vulnerabilities | #Cybersecurity | #NetworkSecurity
Blue Team: ππ
Purple Team: π
Red Team: β€οΈ
| Nullum Cacas Statum | |
| αͺαα hαͺα₯α αhα¬ ααΎαα αΎf ααΎαΆs | |
| Country | Cyberia |
..and there's another Unfurl release as well! v2025.03 is live and adds new features and some fixes, including:
π Parsing #Google Search's UDM parameter
π Recognizing #Mastodon usernames and parsing Mastodon forks (like truthsocial[.]com and gab[.]com)
π§Ή Utility parser to "clean up" inputs
Try it out at https://unfurl.link or read more about the update https://dfir.blog/unfurl-parses-googe-udm-and-truth-social/
Facebook has disclosed a vulnerability in the FreeType font rendering library, affecting all versions up to 2.13.0. This can lead to arbitrary code execution and is seen exploited in the wild.
FreeType 2 is a widely used open-source library that enables text rendering and manipulation. It is integrated into millions of (embedded) systems and applications, including Linux, Android, game engines, Browsers. GUI frameworks, and online platforms.
Although a non vulnerable version (FreeType 2.13.0 and up) was released on 2023-02-09, it is expected that many vulnerable versions are still in use due to its widespread use of this library.
@chillybot @da_667 @screaminggoat
I see mentions from ppl stating "I don't have this license so I'm not impacted"
But are we sure thatβs enough? The requirement in the SA says βDNS security logging must be enabledβ¦β but doesnβt actually mention anything about needing a license.
I get that the license is required to use the feature and see the logs, but does just enabling the setting make you vulnerable? Iβve been trying to look into this, because the advisory isnβt super clear on this (for a change.... 
.
Anyone have any ideas or maybe has looked into an actual attack or found a proof of concept?
#Netflix Europe offices raided in tax fraud probe
@bobdobberson haha, that is also an option...
Why not just reach out to some local companies doing DFIR? I'm sure some agreement is possible?
Or find some DFIR rooms on platforms like HackTheBox, TryHackMe etc.
Or DFIR forums? YT video's?
@bobdobberson what do you mean exactly?
You want to practice red-teaming shoulder surfing?
Or learn about DFIR indicators that SS has happened?
RyanDFIR
RansomLook