PoC for CVE-2022-21974 and CVE-2022-21971 Roaming Security Rights Management Services Remote Code Execution Vulnerability"
https://github.com/0vercl0k/CVE-2022-21971
https://github.com/0vercl0k/CVE-2022-21974
#RTF #wordpad #OFFICE #RCE

کلیه اطلاعاتی که لیک شده اند:
https://share.vx-underground.org/Conti/

فقط دکریپتور:

https://anonfiles.com/l3b7n7L6xc/conti_locker_7z

لاکر با پسورد

https://anonfiles.com/lfV7c2L8xa/conti_locker_v2_zip

#conti

Conti TTP
https://github.com/Res260/conti_202202_leak_procedures
https://github.com/soufianetahiria/ContiLeaks/blob/main/cobaltsrike_lolbins

https://dirtypipe.cm4all.com/
#LPE #LINUX

An unexpected Redis sandbox escape affecting only Debian, Ubuntu, and other derivatives
https://www.ubercomp.com/posts/2022-01-20_redis_on_debian_rce

A newly discovered #vulnerability (CVE-2022-25636) in the Netfilter #firewall module of #Linux kernel could be exploited to gain root privileges on vulnerable systems, escape containers or cause a kernel panic.
https://github.com/Bonfee/CVE-2022-25636

RCE exploit for dompdf
https://positive.security/blog/dompdf-rce
https://github.com/positive-security/dompdf-rce

malfrat’s osint map:
https://map.malfrats.industries/

CVE-2022-0337 System environment variables leak on Google Chrome, Microsoft Edge and Opera
https://github.com/Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera

Source Code conti v3
https://anonfiles.com/b6Ha5eP7x2/conti_v3_7z

Top Search Engines for Cyber Security ⚡️📜
1️⃣http://censys.io – Censys Search Engine
2️⃣http://shodan.io – Search engine for Internet-connected devices
3️⃣http://viz.greynoise.io – GreyNoise Visualizer
4️⃣http://zoomeye.org – Cyberspace Search Engine
5️⃣http://onyphe.io – Cyber Defense Search Engine
6️⃣http://wigle.net – Wireless Network Mapping
7️⃣http://intelx.io – Intelligence X
8️⃣http://fofa.so – Cyberspace Security Search Engine
9️⃣http://hunter.io – OSINT Search Engine
🔟http://zorexeye.com – Hacker’s Search Engine
https://twitter.com/HackerGautam/status/1506932786435100674?s=20&t=ZF5EObm8IZSuBqzRZU1sJA

Utility to craft HTML smuggled files for Red Team engagements
https://github.com/surajpkhetani/AutoSmuggle

Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.
https://github.com/XaFF-XaFF/Cronos-Rootkit

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.
https://github.com/Sh0ckFR/DLLirant

LPE exploit targets Ubuntu 21.10 with kernel 5.13.0-37.
https://github.com/Bonfee/CVE-2022-0995
This is my exploit for CVE-2022-0995, an heap out-of-bounds write in the watch_queue Linux kernel component. It uses the same technique described in https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html.

CVE-2019-0708 (BlueKeep) proof of concept allowing pre-auth RCE on Windows7

https://github.com/RICSecLab/CVE-2019-0708