JMX enumeration and attacking tool
https://github.com/qtc-de/beanshooter

winapi search:

https://dennisbabkin.com/winapisearch/

A Python noscript to exploit CVE-2022-36446 Software Package Updates RCE (Authenticated) on Webmin < 1.997
for mitigation Update to Webmin >= 1.997

https://github.com/p0dalirius/CVE-2022-36446-Webmin-Software-Package-Updates-RCE
#webmin #rce

An automatic unpacker and logger for DotNet Framework targeting files! This tool has been unveiled at Black Hat USA 2022.

https://github.com/advanced-threat-research/DotDumper

#unpacker #DotNet

This repository contains de materials for the talk "Exploring the hidden attack surface of OEM IoT devices: pwning thousands of routers with a vulnerability in Realtek’s SDK for eCos OS.", which was presented at DEFCON30.

https://github.com/infobyte/cve-2022-27255
#Realtek #eCos

Parameter miner for zap

https://github.com/zaproxy/zap-extensions
#bugbounty

Sandman is a NTP based backdoor for red team engagements in hardened networks.

https://github.com/Idov31/Sandman

#NTP #backdoor

TOP All bugbounty pentesting CVE-2022- POC Exp RCE example payload Things
https://github.com/hktalent/TOP
#bugbounty

Zimbra RCE simple poc
https://github.com/vnhacker1337/CVE-2022-27925-PoC
#Zimbra #RCE

Security researchers discovered 3 vulnerabilities in the Linux kernel that could allow a local attacker to elevate privileges and potentially execute malicious code. The proof-of-concept code is publicly available increasing the likelihood of exploitation in the wild.

https://github.com/greek0x0/2022-LPE-UAF

https://zplin.me/papers/DirtyCred-Zhenpeng.pdf

#LPE

The sources of the Linux kernel exploitation technique called DirtyCred are now on GitHub. The attack, which was presented at Black Hat 2022 security conference, is a kernel exploitation concept that swaps unprivileged kernel credentials with privileged ones to escalate privileges without overwriting any critical data on the kernel heap.

https://github.com/Markakd/DirtyCred
#LPE

Named Pipe File System Elevation of Privilege Vulnerability CVE-2022-22715
https://github.com/k0keoyo/my_vulnerabilities/tree/master/CVE-2022-22715
Write up:
https://whereisk0shl.top/post/break-me-out-of-sandbox-in-old-pipe-cve-2022-22715-windows-dirty-pipe
#LPE #Windows

CVE-2022-32250-Linux-Kernel-LPE
demo : https://www.youtube.com/watch?v=YqmwA6fPjKE
https://github.com/theori-io/CVE-2022-32250-exploit

UAC Bypass by abusing RPC and debug objects
https://github.com/Kudaes/Elevator

Bootkit for Windows Sandbox to disable DSE/PatchGuard.
https://github.com/thesecretclub/SandboxBootkit

Teamsniper is a tool for fetching keywords in a Microsoft Teams such as (passwords, emails, database, etc.).

https://github.com/xRET2pwn/Teamsniper

#Teamsniper #redteaming

#acunetix #webscanner

#netsparker #webscanner

#nessus #scanner