Parameter miner for zap

https://github.com/zaproxy/zap-extensions
#bugbounty

Sandman is a NTP based backdoor for red team engagements in hardened networks.

https://github.com/Idov31/Sandman

#NTP #backdoor

TOP All bugbounty pentesting CVE-2022- POC Exp RCE example payload Things
https://github.com/hktalent/TOP
#bugbounty

Zimbra RCE simple poc
https://github.com/vnhacker1337/CVE-2022-27925-PoC
#Zimbra #RCE

Security researchers discovered 3 vulnerabilities in the Linux kernel that could allow a local attacker to elevate privileges and potentially execute malicious code. The proof-of-concept code is publicly available increasing the likelihood of exploitation in the wild.

https://github.com/greek0x0/2022-LPE-UAF

https://zplin.me/papers/DirtyCred-Zhenpeng.pdf

#LPE

The sources of the Linux kernel exploitation technique called DirtyCred are now on GitHub. The attack, which was presented at Black Hat 2022 security conference, is a kernel exploitation concept that swaps unprivileged kernel credentials with privileged ones to escalate privileges without overwriting any critical data on the kernel heap.

https://github.com/Markakd/DirtyCred
#LPE

Named Pipe File System Elevation of Privilege Vulnerability CVE-2022-22715
https://github.com/k0keoyo/my_vulnerabilities/tree/master/CVE-2022-22715
Write up:
https://whereisk0shl.top/post/break-me-out-of-sandbox-in-old-pipe-cve-2022-22715-windows-dirty-pipe
#LPE #Windows

CVE-2022-32250-Linux-Kernel-LPE
demo : https://www.youtube.com/watch?v=YqmwA6fPjKE
https://github.com/theori-io/CVE-2022-32250-exploit

UAC Bypass by abusing RPC and debug objects
https://github.com/Kudaes/Elevator

Bootkit for Windows Sandbox to disable DSE/PatchGuard.
https://github.com/thesecretclub/SandboxBootkit

Teamsniper is a tool for fetching keywords in a Microsoft Teams such as (passwords, emails, database, etc.).

https://github.com/xRET2pwn/Teamsniper

#Teamsniper #redteaming

#acunetix #webscanner

#netsparker #webscanner

#nessus #scanner

#appscan #scanner

#burpsuite #burpbounty