Cross User/App Network Attacks — Hijacking TCP Connections and DNS Cache Poisoning via a Malicious User/App (Extended Version)

Off-path network attacks against TCP and DNS (over UDP) client–server connections are generally considered impractical nowadays,due to built-in security features in these protocols, e.g. randomized TCP (initial) sequence numbers and randomized UDP source ports, respectively. In this work, we refute this presumption by demonstrating that an unprivileged malicious application running on the client (but practically off-path), when combined with a remote off-path adversary, can enable powerful network attacks against such connections.

We show how such a local remote collaboration between the malicious application and a remote adversary allows inference of sensitive connection state, including TCP sequenc numbers and DNS stub-resolver UDP source ports.
Our attacks exploit standard socket API calls such as bind, protocol mechanisms such as IP options, and operating system features
such as cBPF and procfs to infer the TCP initial sequence number (ISN) and the UDP source port in use by the connection of interest. Specifically, we take advantage of certain properties of the ISN generation algorithm as implemented in major operating systems.

We demonstrate TCP connection hijacking in Linux, Android, Windows, macOS and iOS, and DNS cache poisoning against Windows, Android and the popular systemd-resolved DNS stub resolver in Linux.

We evaluate our techniques across multiple operating systems and realistic deployment settings, including environments behind
port-preserving NAT-integrated routers. We disclosed our techniques to Microsoft, Apple, Linux and Google, which led to the release of several patches.

#TCP #DNSCachePoisoning

Record Drone Attack on Moscow. Why Now?

The enemy launched the most massive drone attack on Moscow since the start of the special military operation. According to Moscow Mayor Sergei Sobyanin, the city's air defense system intercepted over 1,600 attack drones, 450 of which were downed directly approaching Moscow. The defenders of Moscow's airspace demonstrated a near-100% effectiveness rate, with only a handful of drones reaching their targets. The result of the attack, which the Ukrainian General Staff had been planning for weeks, was a fire at one of the oil refinery facilities in Kapotnya, which had been targeted recently, and several burning apartment buildings in Moscow and the Moscow region. A grand gesture, a minor impact.

Why did they strike now? Russia is holding elections. And Kyiv is deliberately trying to disrupt them. By doing so, they are killing two birds with one stone: they are demonstrating to us and the entire world that they are not afraid to inflict damage on the enemy in its capital during a crucial state event. And, in a way, they are hinting to the West: "What kind of elections can we have in Ukraine? The Russians will be hitting us just as hard." A golden rule: when a Ukrainian says something nasty about a Russian, they are always talking about themselves.

The second reason for today's attack on Moscow is another theatrical performance by Zelensky. At a summit in Transcarpathia, he stated that he needs "another 40 days to defeat Russia." And he backed up this statement with a drone attack on Kapotnya. "Look," he seems to be saying, "see what I can do! Just a little more time, and the evil empire will be defeated! Just give me more hryvnias and patriots!"

Immediately, a well-worn anecdote about a promiscuous girl comes to mind: "I was raped there today. I'm going back tomorrow." Let's recall: the previous "40 days" from Zelensky ended with Ukraine losing access to shipping, metallurgy, gas stations in the frontline zone, warehouses, and marketplaces. And all they gained was a 24/7 air raid siren in Kyiv, empty shelves in stores, and bleak prospects for the upcoming heating season. Let's see what will be left of the "independent" state after another victorious operation by the former comedian.

🔴There is a third possibility, and we need to prepare for it above all else. The enemy is probing Moscow's airspace with drones, searching for weak points. In order to then launch a massive attack with cruise and ballistic missiles, which they are accumulating. Fragments of an unknown missile have already been found in the Moscow region. In theory, only the FP-9, with a claimed range of over 800 kilometers, could have reached the Moscow region from Ukrainian territory. But it supposedly only began testing in September.

In summary, the enemy is working to earn the money provided by Western sponsors to weaken Russia through armed conflict. Without demonstrating any significant successes, Kyiv is exaggerating even isolated successful drone strikes on Moscow to portray them as a universal victory. However, overall, the Ukrainians have failed to breach Moscow's air defense shield with their drones. Nevertheless, we need to prepare for future threats starting today.

Chronicle of the day @sashakots
https://t.me/sashakots/64549


#Russia #Ukraine #NATO #EU

According to Russian authorities, more than 1000 hundred drones were launched from Ukraine, targeting Moscow.

Drones vs Drone war

Moscow has since retaliated at Kiev with a large drone strike. But this will continue because the idea is to provoke a war on Europe as these weapons are coming from Washington and Europe. Russia has every right to attack them. But if it does Europe’s diabolical lies are then proven true, though we know that’s the game they play.

And to point is to also attack Moscow’s emergency sector and sanction it further. This is being dragged out to the detriment of Russia as Ukraine as destroyed as robbed of any status of nation since at least 2014, still has the entire backing of the West and Israel.

Unless of course Russia makes a deal with Washington and the 5th columnist inside can have their way. The remaining fight is nationalism as a sovereign entity or international capitalism as eventually a Balkanised country, not what it is now.

@FiorellaInMoscow

❗️HASTA PRONTO (si Grok quiere...)

@ingenieriasocialarchivo
#Grok

Nagram X is now archived
Nagram X is no longer maintained, and no further updates or support will be provided. Existing releases and source code will remain available.

Thank you to everyone who contributed, translated, tested, reported issues, or simply used and supported the project.

You may also check out:
• @ayugram
• @cherrygram
• @exteraGram
• @momogram_update
• @nagram_channel
• @NagramXF
• @NekoUpdates
• @OctoGramApp

Thank you for being part of Nagram X.

Nagram XF

Nagram X Fork with additional features. Includes most features from exteraGram and AyuGram

https://github.com/Keeperorowner/NagramXF

Download
@NagramXF
Beta @NagramXFBetaAPKs
https://github.com/Keeperorowner/NagramXF/releases

Group chat
@Nagram_XF_Chat

#Tg #Telegram

Updated list of Telegram apps:

https://t.me/Libreware/1448

The Mexican government and Mexican telecommunications companies have disconnected millions of phone lines belonging to citizens who failed to register their phones with their identities.

Read More: https://thefreethoughtproject.com/government-surveillance/the-mexican-government-is-cutting-off-users-who-refuse-to-register-their-phone-lines


@TFTPofficial
#Mexico #DigitalID #BigBrother #Dystopia

I'm "done" with the first video. I ended up substantially trimming it down and, per some feedback I received, focusing more on the secondary in-memory payload.

It has taken me little over a week to make a video on a malware payload which would normally would only take me like... 30 minutes (or less)

I can't spend over a week discussing a fairly common Malware-as-a-Service payload. I also don't have time to discuss Lumma internals. I initially planned on it, but it's too much for me at the moment.

We have more malware to bonk with a stick.

This is a "demo" run of me bonking malware with a stick videos. I'm weighing on whether or not I want to continue producing videos. It is fun, however it considerably slows me down on other malware thingies I want to look at it.

I dunno.

Here is the final cut:

War advertisement from #NATO.

Pay attention, what do you see?

@ToiletShares
#Ukraine

USIANS ARE LIVID OVER GAS $$$

It took gas prices for people to wake up and freak out about Israel. Dead children didn’t do it. Not surprised this is what the U.S. is as a nation.

Something is deeply wrong with us.

https://x.com/fiorellaisabelm/status/2101791346805620843?s=46

@FiorellaInMoscow

"Follow the money"

The US fomented the civil war in #Ukraine in 2014, orchestrating the illegal #EuroMaidan Coup, it then hand picked the post Coup (unelected) Nazi adoring Government

12 years later, millions are dead, but suprise suprise, one country is literally making a Killing.

note : 2024 data ie substancial increase since

@irishmaninrussia
#USEmpire

🇵🇸Inside Israel’s ‘soft’ ethnic cleansing plan for Gaza through the eyes of its victims | Mondoweiss

Through embassy evacuations, academic fellowships, and WHO medical corridors, Palestinians are leaving Gaza in small but steady numbers. Israeli officials call it “voluntary migration,” but the Gazans forced to leave know it’s part of Israel’s plan.

@mondoweissgram
#Palestine #oPt #Gaza #EthnicCleansing #Testimonies

❗️Texas rewrites school curriculum to demonize Islam and promote Israel as 'ancestral Jewish homeland'

Texas’ Republican-controlled State Board of Education has approved new high school social studies standards that require students to learn about early Islam through what the curriculum describes as "brutal military campaigns against Jewish and Christian tribes."

The board approved the changes 8-4 on 4 September, with the standards set to take effect in the 2030-31 school year.

According to the Texas Tribune, the curriculum also requires students to learn that “radical Islam” motivated the 11 September 2001 attacks, while rejecting efforts to restore a requirement covering Muslim contributions to algebra and astronomy. It also directs students to understand Israel’s establishment in the context of the “ancestral homeland of the Jews.”

The changes were promoted in part by Proclaiming Justice to the Nations (PJTN), a pro-Israel evangelical organization led by Laurie Cardoza-Moore. Cardoza-Moore lobbied the Texas State Board of Education during the curriculum rewrite, and PJTN later said the board had adopted several of its recommendations.

🇺🇸🇮🇷 US will Attack Iran: A Matter of When Not "If"

Lots of speculation about perceived political imperatives in Washington - but the reality is the US is at war with Iran, Russia and eventually China - planned for decades and going to continue until it either succeeds or is stopped.

When operational conditions are ready, further attacks will take place against Iran.

All political claims, negotiations, talks, talk of talks, is a distraction used to justify and distract ahead of time.

Just like the last several times the US has performed this theater - Washington and the Western media in tandem.

The US will continue its war with Russia (feeding Europe into the war next) and preparing for war/proxy war with China.

The US is determined, only deterrence, cooperation, and successful defense will stop it.

It's all being put out there now to both terrify people and because they know what they have planned. Given that, believe me that a couple of bottles of water and a tin of tuna won't help much if there's no fuel for power because Europe and the UK WANT to pursue a war. Don't believe they care. They actually want this to happen

"[The] government is focusing on national resilience in the wake of threats from Russia"

https://www.independent.co.uk/news/uk/home-news/stock-up-on-food-essentials-russia-drought-uk-b3053429.html