Stealing #NetNTLM #hashes with MySQL

https://github.com/SpiderLabs/Responder

Malware writer likes to use ptrace(), why and how?

because with ptrace(), you can essentially redirect the debuggee to call malloc(), and given the newly allocated memory, insert a new program into the newly allocated memory (making sure the pages are marked readable and executable), and redirect some existing codes to that memory for execution and then let the debuggee continue execution.

PoC:

https://github.com/gaffe23/linux-inject

https://shunix.com/shared-library-injection-in-android/

Embedded Operating Systems: A Practical Approach, 2nd Edition 2018

this is not a vulnerability telegram desktop, this is a extension spoofing in windows,

if you need more info, please check youtube link,

https://www.youtube.com/watch?v=FzWuOwjK7-I

BlueHat IL 2018 - Saar Amar - Linux Vulnerabilities Windows Exploits: Escalating Privileges with WSL

https://m.youtube.com/watch?v=3deJvbBHET4

delete any image in Facebook
https://medium.com/@JubaBaghdad/how-i-was-able-to-delete-any-image-in-facebook-community-question-forum-a03ea516e327

Modifying any Ad Space and Placement in the Facebook

https://medium.com/@joshuaregio/modifying-any-ad-space-and-placement-e22c7cec050f

Disclose Facebook page admins

by Sai Naik

Bounty awarded: $3000


https://youtu.be/N_i8sPlbtZs

Executing JScript from Powershell via .NET reflection




[Reflection.Assembly]::LoadWithPartialName('Microsoft.JScript');

$js = 'var js = new ActiveXObject("WScript.Shell");js.Run("calc");'

[Microsoft.JScript.Eval]::JScriptEvaluate($js,[Microsoft.JScript.Vsa.VsaEngine]::CreateEngine());