NEW BOT Телеграм, страница - 173353890

HackerOne

11K subscribers

644 photos

31 videos

79 files

2.74K links

Community : @Sec0x01
@Bug0x

Download Telegram

About

Blog

Apps

Platform

11K subscribers

https://youtu.be/un_3xC2DX3U

windows graphics component pivilege escalation | CVE-2021-26868 PoC

CVE-2021-26868 Windows Graphics Component Elevation of Privilege Vulnerability. It injects shellcode into winlogon.exe, resulting in SYSTEM level privilege escalation. Below, we test the base exploit (injects cmd.exe) and then modify it to inject a Covenant…

1.94K viewsAdeL, 11:21

https://youtu.be/Qy9SmCFUMjk

Gateone ssh file read vulnerability | CVE-2020-35736 poc

#GateOne ssh is an HTML5 web-based terminal emulator and SSH client.

#CVE-2020-35746 - arbitrary file read vulnerability via download.
GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join…

1.79K viewsAdeL, 17:54

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-26855.html

1.73K viewsAdeL, 14:53

https://youtu.be/47OBH4N70f0

Code snippets plugin vulnerability | CVE-2020-8417 PoC

Code Snippets Vulnerability : CVE-2020-8417
Code snippets plugin allowed anybody to forge a request on behalf of an administrator and inject executable code on a vulnerable site. This is a Cross-Site Request Forgery (CSRF) to Remote Code Execution (RCE) vulnerability.…

1.83K viewsAdeL, 16:18

https://fireshellsecurity.team/ssrf/

FireShell Security Team

Posts by tag: ssrf

The FireShell Security Team is an initiative created in 2017 that aims to disseminate knowledge in the areas of InfoSec, CTFs and Hacking.

1.78K viewsAmir Kiani, 08:46

https://youtu.be/xqzfNqMrFGQ

1.79K viewsAdeL, 11:48

#threatleak #malware

https://any.run/cybersecurity-blog/introduction-to-malware-analysis/

ANY.RUN's Cybersecurity Blog

Introduction to Malware Analysis - ANY.RUN's Cybersecurity Blog

Investigate malicious files with our guest writer. He will lead you through each step of Dridex and IcedID analysis, so you can repeat it by yourself.

1.92K viewsAdeL, 12:27

https://youtu.be/zDxCnzNAkAk

1.93K viewsAdeL, 12:18

https://mitre-engenuity.org/blog/2021/07/19/engenuity-releases-ics-security-tools/

1.98K viewsAdeL, 19:10

Automation in Reverse Engineering: String Decryption https://synthesis.to/2021/06/30/automating_string_decryption.html

1.86K viewsAdeL, 16:19

A good historic background of Pegasus, a weapon system by NSO Group and role of Israel 🇮🇱 (government) in supporting the cyber espionage and specifics to India 🇮🇳

Israeli government is trying to evade sanctioning NSO and similar companies under international pressure. Lobbying is not working for Israel. Public is aware and only thing in Israels favour is to stay quiet till the heat dies out.

https://youtu.be/0OWw8IEj9oQ

2.14K viewsAdeL, 17:30

https://www.trendmicro.com/en_us/research/21/g/updated-xcsset-malware-targets-telegram--other-apps.html

Updated XCSSET Malware Targets Telegram, Other Apps

In our last update on the XCSSET campaign, we updated some of its features targeting latest macOS 11 (Big Sur). Since then, the campaign added more features to its toolset, which we have continually monitored. We have also discovered the mechanism used to…

👎1

1.94K viewsAdeL, 13:39

Fuzzing with Grammars

https://www.fuzzingbook.org/html/Grammars.html

www.fuzzingbook.org

Fuzzing with Grammars - The Fuzzing Book

In the chapter on "Mutation-Based Fuzzing", we have seen how to use extra hints – such as sample input files – to speed up test generation. In this chapter, we take this idea one step further, by providing a specification of the legal inputs to a program.…

1.79K viewsAdeL, 20:38

Elasticsearch ECE 7.13.3 - Anonymous Database Dump

https://www.exploit-db.com/exploits/50152

Exploit Database

Elasticsearch ECE 7.13.3 - Anonymous Database Dump

Elasticsearch ECE 7.13.3 - Anonymous Database Dump. CVE-2021-22146 . webapps exploit for Multiple platform

1.75K viewsAdeL, 11:29

Microsoft Warns of LemonDuck Malware Targeting Windows and Linux Systems

https://ift.tt/3zvPwgW

1.69K viewsAdeL, 11:33

New PetitPotam attack
https://twitter.com/cyb3rops/status/1419193618745675776?s=19

Keep calm. This is much less serious than it initially appeared.

1.79K viewsDmitriy, 11:36

Apple fixes zero-day affecting iPhones and Macs, exploited in the wild

https://ift.tt/3eYuZJY

BleepingComputer

Apple fixes zero-day affecting iPhones and Macs, exploited in the wild

Apple has released security updates to address a zero-day vulnerability exploited in the wild and impacting iPhones, iPads, and Macs.

1.85K viewsAdeL, 19:55

CVE-2021-27850 Exploit
https://github.com/kahla-sec/CVE-2021-27850_POC

GitHub - kahla-sec/CVE-2021-27850_POC: A Proof of concept for CVE-2021-27850 affecting Apache Tapestry and leading to unauthencticated…

A Proof of concept for CVE-2021-27850 affecting Apache Tapestry and leading to unauthencticated remote code execution. - kahla-sec/CVE-2021-27850_POC

1.87K viewsAmir Kiani, 19:50

Pegasus is open source and available under the Apache V2 license.

https://pegasus.isi.edu/downloads/

1.89K viewsAdeL, 04:27

https://cio.ubc.ca/sites/cio.ubc.ca/files/documents/resources/Software%20Application%20Security%20Checklist.pdf

1.74K viewsAdeL, 05:44

Portable Executable Injection

https://malwareunicorn.org/workshops/peinjection.html#0

1.79K viewsAdeL, 05:53