NEW BOT Телеграм, страница

hoaxshell
یک شل معکوس ویندوز غیر متعارف است که در حال حاضر شناسایی نشده است
توسط Microsoft Defender و سایر راه حل های AV زیرا صرفاً بر اساس ترافیک http (ها) است.

https://github.com/t3l3machus/hoaxshell

@NetPentester

GitHub

GitHub - t3l3machus/hoaxshell: A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish…

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell. - t3l3machus/hoaxshell

252 views11:02

Network Penetration Testing

#lpe #linux #cve

LPE exploit برای CVE-2022-34918.
این اکسپلویت برای کرنل لینوکس ubuntu 5.15.0-39-generic نوشته شده است.

مقاله: https://randorisec.fr/crack-linux-firewall/

https://github.com/randorisec/CVE-2022-34918-LPE-PoC

@NetPentester

266 views17:04

Network Penetration Testing

#ldap #gc #impacket

اگر پورت های ldap/ldaps توسط فایروال مسدود شده باشند اما پورت gc (3268) قابل دسترسی باشد. در مورد من، kerberoasting با ایمپکت قابل دستیابی نیست. به سادگی پروتکل ldap:// را به gc:// در impacket تغییر دهید.!

@NetPentester

610 views19:44

Network Penetration Testing

#av #evasion

A PoC implementation for an evasion technique to terminate the current
thread and restore it before resuming execution, while implementing page
protection changes during no execution.

https://github.com/janoglezcampos/DeathSleep

@NetPentester

GitHub

GitHub - janoglezcampos/DeathSleep: A PoC implementation for an evasion technique to terminate the current thread and restore it…

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution. - janoglezcam...

264 views20:29

Network Penetration Testing

#windows #impersonate #lpe

DiagTrackEoP
فقط راه دیگری برای سوء استفاده از دسترسی SeIpersonate
https://github.com/Wh04m1001/DiagTrackEoP
@NetPentester

GitHub

GitHub - Wh04m1001/DiagTrackEoP

Contribute to Wh04m1001/DiagTrackEoP development by creating an account on GitHub.

177 views21:15

Network Penetration Testing

[ اجرای اکسپلویت به عنوان نور پروسس محافظت شده از Userland]
هر کدی را به عنوان بالاترین سطح حفاظت اجرا کنید، به این معنی که اکسپلویت به هر Protected Process Light دسترسی کامل خواهد داشت و سرویس های ضد بدافزار قادر به نظارت بر آن نخواهند بود (از آنجایی که با حفاظت پایین تر AntiMalware اجرا می شوند)

https://tastypepperoni.medium.com/running-exploit-as-protected-process-ligh-from-userland-f4c7dfe63387

+POC: https://github.com/tastypepperoni/RunAsWinTcb

#exploit
@NetPentester

Medium

Running Exploit As Protected Process Light From Userland

Overview

171 views01:31

Network Penetration Testing

#pid #lsass

چهارده روش برای خواندن PID برای سرویس زیرسیستم مرجع امنیت محلی (LSASS)

https://www.mdsec.co.uk/2022/08/fourteen-ways-to-read-the-pid-for-the-local-security-authority-subsystem-service-lsass/

@NetPentester

MDSec

Fourteen Ways to Read the PID for the Local Security Authority Subsystem Service (LSASS) - MDSec

Introduction Process enumeration is necessary prior to injecting shellcode or dumping memory. Threat actors tend to favour using CreateToolhelp32Snapshot with Process32First and Process32Next to gather a list of running processes....

193 views03:03

Network Penetration Testing

#sandbox #detect

چنین قطعه کد کوچکی که می تواند به شما در دور زدن برخی از شناسایی های sandbox خودکار کمک کند

@NetPentester

205 views09:04

Network Penetration Testing

Network Penetration Testing pinned a photo

11:46

Network Penetration Testing

MimiKatz for Pentester: Kerberos.

https://www.hackingarticles.in/mimikatz-for-pentester-kerberos/

#MimiKatz
@NetPentester

Hacking Articles

MimiKatz for Pentester: Kerberos

Learn how to use Mimikatz for Pentester: Kerberos with step-by-step guides for Golden Ticket and Pass the Ticket attacks.

196 views23:15

Network Penetration Testing

arpmess

Deny internet access and sniff your local network by performing arp spoofing attacks.

https://github.com/avan-pra/arpmess

@NetPentester

GitHub

GitHub - avan-pra/arpmess: Perform arp spoofing attack in C

Perform arp spoofing attack in C. Contribute to avan-pra/arpmess development by creating an account on GitHub.

197 views00:10

Network Penetration Testing

[ Know Your AD Vulnerability: CVE-2022-26923 ]

مقاله ای با تجزیه و تحلیل دقیق از آسیب پذیری CVE-2022-26923

https://www.semperis.com/blog/ad-vulnerability-cve-2022-26923/
#CVE
#AD
@NetPentester

Semperis

Know Your AD Vulnerability: CVE-2022-26923

Understanding Active Directory vulnerabilities like CVE-2022-26923 is crucial to protecting your organization. Learn about AD vulnerabilities at Semperis.

176 views09:45

Network Penetration Testing

LDAP shell

https://github.com/PShlyundin/ldap_shell

#ldap
#shell
@NetPentester

GitHub

GitHub - PShlyundin/ldap_shell: AD ACL abuse

AD ACL abuse . Contribute to PShlyundin/ldap_shell development by creating an account on GitHub.

184 views10:18

Network Penetration Testing

یک VMWare Workspace ONE به اجرای کد از راه دور دسترسی دارد

https://github.com/sourceincite/hekate
#vmware
#one
#cve
#poc
@NetPentester

GitHub

GitHub - sourceincite/hekate

Contribute to sourceincite/hekate development by creating an account on GitHub.

178 views11:49

Network Penetration Testing

[ اجرای کد Execution: تکنیک ها و تشخیص ]

https://www.huntadhackett.com/blog/concealed-code-execution-techniques-and-detection

@NetPentester

178 views16:21

Network Penetration Testing

EDRSandBlast
ابزاری است که به زبان C نوشته شده است که یک درایور امضا شده آسیب پذیر را برای دور زدن تشخیص های EDR .

https://github.com/wavestone-cdt/EDRSandblast/tree/DefCon30Release
#edr
#bypass
@NetPentester

GitHub

GitHub - wavestone-cdt/EDRSandblast at DefCon30Release

Contribute to wavestone-cdt/EDRSandblast development by creating an account on GitHub.

182 views12:54

About

Blog

Apps

Platform