The Logjam Attack – ANOTHER Critical TLS Weakness

The Logjam Attack – ANOTHER Critical TLS Weakness. ... The Logjam attack allows a man-in-the-middle attacker to downgrade vulnerable TLS connections to 512-bit export-grade cryptography. This allows the attacker to read and modify any data passed over the connection.

Apple’s Password Storing Keychain Cracked on iOS & OS X

If you want to view the passwords stored in iCloud Keychain

On your iPhone, iPad, or iPod touch with iOS 12 or later: Tap Settings > Passwords & Accounts > Website & App Passwords. Use Face ID or Touch ID when you're prompted. Tap a website to view your password.

For more Downloading tools click on the below link...

The Hacking Bureau.

ProtonMail DDoS Attack – Sustained & Sophisticated

Radware® (NASDAQ: RDWR), a leading provider of cyber security and application delivery solutions ensuring optimal service level for applications in virtual, cloud and software defined data centers, has been appointed by ProtonMail to help it fight back on the cyber attacks it has endured from multiple, simultaneous attackers.

ProtonMail has been fighting a series of Advanced Persistent DoS (APDoS) attacks, which have exceeded 100Gbps, and numerous attack vectors, that have shut down their secure email service, their ISP and every other company in their data center. The first attacker, the Armada Collective is a new hacking group motivated by financial gain who demanded a ransom from the company. The second attack came from an unknown group. This second attack caused the bulk of the damage.

For More Downloading tools click on the below link...

The Hacking Bureau.

KeeFarce – Extract KeePass Passwords (2.x) From Database

KeeFarce – Extract KeePass Passwords (2. ... KeeFarce allows you to extract KeePass passwords (2. x) by using DLL injection to execute code and retrieve the database information from memory. The cleartext information, including usernames, passwords, notes and url's are dumped into a CSV file in %AppData%.

For More Downloading Tools click on the below link...

The Hacking Bureau.

ISIS Running 24-Hour Terrorist Crypto Help-desk

There have been multiple mentioned of ISIS using encryption and ‘encrypted messaging systems’ in the news reports since the Paris incident, it turns out they mostly mean Telegram. Which we’ve only mentioned once before, when they got pounded by an epic DDoS attack.

For more downloading tools click on the below link...

The Hacking Bureau.

Dell Backdoor Root Cert – What You Need To Know

So a few days ago the Internet exploded with chatter about a Dell backdoor root cert AKA a rogue root CA, almost exactly like what happened with Lenovo and Superfish.

It started with this Reddit thread – Dell ships laptops with rogue root CA, exactly like what happened with Lenovo and Superfish in the Technology sub and got a lot of traction from there.

For more downloading tools click on the below link...

The Hacking Bureau.

DROWN Attack on TLS – Everything You Need To Know.

DROWN is a serious vulnerability that affects HTTPS and other services that rely on SSL and TLS, some of the essential cryptographic protocols for Internet security. These protocols allow everyone on the Internet to browse the web, use email, shop online, and send instant messages without third-parties being able to read the communication.

For more downloading Tools click on the below link...

The Hacking Bureau.