Observing Attacks Against Hundreds
of Exposed Services in Public Clouds
https://unit42.paloaltonetworks.com/exposed-services-public-clouds
#Cloud
@NetPentester
of Exposed Services in Public Clouds
https://unit42.paloaltonetworks.com/exposed-services-public-clouds
#Cloud
@NetPentester
Unit 42
Observing Attacks Against Hundreds of Exposed Services in Public Clouds
Insecurely exposed services are common misconfigurations in cloud environments. We used a honeypot infrastructure to learn about attacks against them.
+ نحوه تشخیص درهای پشتی اکتیو دایرکتوری Azure :
https://www.inversecos.com/2021/11/how-to-detect-azure-active-directory.html
#BlueTeam
#AD
#Azure
@BlueRedTeam
https://www.inversecos.com/2021/11/how-to-detect-azure-active-directory.html
#BlueTeam
#AD
#Azure
@BlueRedTeam
Inversecos
How to Detect Azure Active Directory Backdoors: Identity Federation
CVE-2021-21972:
PoC Exploit for vCenter
https://github.com/NS-Sp4ce/CVE-2021-21972
https://github.com/horizon3ai/CVE-2021-21972
Exploits the Wii U's bluetooth stack to gain IOSU
kernel access via bluetooth
https://github.com/GaryOderNichts/bluubomb
#bluetooth
@NetPentester
PoC Exploit for vCenter
https://github.com/NS-Sp4ce/CVE-2021-21972
https://github.com/horizon3ai/CVE-2021-21972
Exploits the Wii U's bluetooth stack to gain IOSU
kernel access via bluetooth
https://github.com/GaryOderNichts/bluubomb
#bluetooth
@NetPentester
GitHub
GitHub - NS-Sp4ce/CVE-2021-21972: CVE-2021-21972 Exploit
CVE-2021-21972 Exploit. Contribute to NS-Sp4ce/CVE-2021-21972 development by creating an account on GitHub.
آسیب پذیری 0 day در دستگاه های Tp-link wi-fi
https://securityaffairs.co/wordpress/125016/hacking/0-day-tp-link-wi-fi-6.html?utm_source=feedly&utm_medium=rss&utm_campaign=0-day-tp-link-wi-fi-6
TP-Link TL-WR840N EU v5 RCE
(PoC for CVE-2021-41653)
https://k4m1ll0.com/cve-2021-41653.html
#tplink
#ZeroDay
#Vulnerability
#poc
@NetPentester
https://securityaffairs.co/wordpress/125016/hacking/0-day-tp-link-wi-fi-6.html?utm_source=feedly&utm_medium=rss&utm_campaign=0-day-tp-link-wi-fi-6
TP-Link TL-WR840N EU v5 RCE
(PoC for CVE-2021-41653)
https://k4m1ll0.com/cve-2021-41653.html
#tplink
#ZeroDay
#Vulnerability
#poc
@NetPentester
Owfuzz: a WiFi protocol fuzzing tool using openwifi
https://github.com/alipay/Owfuzz
#tools
@NetPentester
https://github.com/alipay/Owfuzz
#tools
@NetPentester
اسکریپت Nmap که آسیب پذیری های احتمالی را بر اساس سرویس های کشف شده در پورت های باز جستجو می کند.
https://github.com/scmanjarrez/CVEScannerV2
#Nmap
#port
#Vulnerability
#Script
@NetPentester
https://github.com/scmanjarrez/CVEScannerV2
#Nmap
#port
#Vulnerability
#Script
@NetPentester
GitHub
GitHub - scmanjarrez/CVEScannerV2: Nmap noscript that scans for probable vulnerabilities based on services discovered in open ports.
Nmap noscript that scans for probable vulnerabilities based on services discovered in open ports. - GitHub - scmanjarrez/CVEScannerV2: Nmap noscript that scans for probable vulnerabilities based on se...
Proxy-Attackchain:
proxylogon, proxyshell, proxyoracle, proxytoken
full chain exploit tool
https://github.com/FDlucifer/Proxy-Attackchain
#tools
#proxy
@NetPentester
proxylogon, proxyshell, proxyoracle, proxytoken
full chain exploit tool
https://github.com/FDlucifer/Proxy-Attackchain
#tools
#proxy
@NetPentester
افزایش دسترسی Azure از طریق سوء استفاده از مجوزهای Azure API
https://posts.specterops.io/azure-privilege-escalation-via-azure-api-permissions-abuse-74aee1006f48
#microsoft
#api
#Azure
#privilege
#Cloud
@NetPentesters
https://posts.specterops.io/azure-privilege-escalation-via-azure-api-permissions-abuse-74aee1006f48
#microsoft
#api
#Azure
#privilege
#Cloud
@NetPentesters
تجزیه و تحلیل برای CVE-2021-34535 -
آسیب پذیری RCE در Remote Desktop Client
https://www.synack.com/blog/this-microsoft-windows-rce-vulnerability-gives-an-attacker-complete-control
#vulnerability
#RDP
#RCE
#Analysis
@NetPentester
آسیب پذیری RCE در Remote Desktop Client
https://www.synack.com/blog/this-microsoft-windows-rce-vulnerability-gives-an-attacker-complete-control
#vulnerability
#RDP
#RCE
#Analysis
@NetPentester
کانفیگ بک دور برای دور زدن انتی ویروس
https://github.com/RoseSecurity/Anti-Virus-Evading-Payloads
#Bypass
#antivirus
#backdoor
@NetPentester
https://github.com/RoseSecurity/Anti-Virus-Evading-Payloads
#Bypass
#antivirus
#backdoor
@NetPentester
Airstrike - Automatically grab and crack WPA-2 handshakes with distributed client-server architecture
https://github.com/redcode-lab/AirStrike
#tools
#wpa
#airstrike
@NetPentester
https://github.com/redcode-lab/AirStrike
#tools
#wpa
#airstrike
@NetPentester
Cloud service provider security mistakes
https://github.com/SummitRoute/csp_security_mistakes
#Cloud
@NetPentester
https://github.com/SummitRoute/csp_security_mistakes
#Cloud
@NetPentester
GitHub
GitHub - SummitRoute/csp_security_mistakes: This repo has been replaced by https://www.cloudvulndb.org
This repo has been replaced by https://www.cloudvulndb.org - SummitRoute/csp_security_mistakes
MikroTik_vulns.pdf
555.4 KB
Most exploited vulnerabilities of MikroTik devices, 2021.
#Analytics
#Mikrotik
#vulnerability
@NetPentester
#Analytics
#Mikrotik
#vulnerability
@NetPentester
آسیبپذیریهای مایکروسافت و پیاده سازی GitHub OAuth منجر به حملات تغییر مسیر میشوند.
https://www.proofpoint.com/us/blog/cloud-security/microsoft-and-github-oauth-implementation-vulnerabilities-lead-redirection
#Microsoft
#vulnerability
@NetPentester
https://www.proofpoint.com/us/blog/cloud-security/microsoft-and-github-oauth-implementation-vulnerabilities-lead-redirection
#Microsoft
#vulnerability
@NetPentester
CVE-2021-42287
Weaponisation - Active Directory
https://exploit.ph/cve-2021-42287-cve-2021-42278-weaponisation.html
#AD
#cve
@NetPentester
Weaponisation - Active Directory
https://exploit.ph/cve-2021-42287-cve-2021-42278-weaponisation.html
#AD
#cve
@NetPentester
پیاده سازی پایتون برای CVE-2021-42278 (افزایش دسترسی اکتیو دایرکتوری)
https://github.com/ly4k/Pachine
#cve
#privilege
#AD
#python
@NetPentester
https://github.com/ly4k/Pachine
#cve
#privilege
#AD
#python
@NetPentester
Hypervisor compromises using Azure Run Command
https://www.mandiant.com/resources/azure-run-command-dummies
#Cloud
#Azure
@NetPentester
https://www.mandiant.com/resources/azure-run-command-dummies
#Cloud
#Azure
@NetPentester
Thirumalai_Khanna.pdf
3.6 MB
"Who Owns Your Hybrid Active Directory? Hunting for Adversary Techniques", 2021.
#cloud
#ad
@NetPentester
#cloud
#ad
@NetPentester