The OWASSRF + TabShell exploit chain (CVE-2022-41076)

detailes:

https://blog.viettelcybersecurity.com/tabshell-owassrf/

POC:

https://gist.github.com/testanull/518871a2e2057caa2bc9c6ae6634103e

#Tabshell #exchange

Password:Pwn3rzs

Acunetix Premium v15.3 WINDOWS & Linux => Password: Pwn3rzs

certsync is tool for Dumping NTDS with golden certificates and UnPAC the hash and Base on Certipy =>https://github.com/ly4k/Certipy
https://github.com/zblurx/certsync

Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit
https://github.com/hacksysteam/CVE-2023-21608

CVE-2023-0179-PoC affecting all Linux versions from 5.5 to 6.2-rc3, although the exploit was tested on 6.1.6
https://github.com/TurtleARM/CVE-2023-0179-PoC
#LPE

Security Vulnerabilities fixed in Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, and Focus 97.3.0 (CVE-2022-26485)
https://github.com/mistymntncop/CVE-2022-26485

A noscript to automate privilege escalation with CVE-2023-22809 vulnerability
https://github.com/n3m1dotsys/CVE-2023-22809-sudoedit-privesc
#LPE

Tools and Techniques for Red Team / Penetration Testing
https://github.com/A-poc/RedTeam-Tools

recover esxiargs ransomware
https://github.com/cisagov/ESXiArgs-Recover

​​ntdlll-unhooking-collection

different ntdll unhooking techniques : unhooking ntdll from disk, from KnownDlls, from suspended process, from remote server (fileless)

https://github.com/TheD1rkMtr/ntdlll-unhooking-collection

​​RasmanPotato

Abuse Impersonate Privilege from Service to SYSTEM like other potatoes do

https://github.com/crisprss/RasmanPotato

#lpe

Another Local Windows privilege escalation using a new potato technique ;)

The LocalPotato attack is a type of NTLM reflection attack that targets local authentication. This attack allows for arbitrary file read/write and elevation of privilege.

NOTE: This vulnerability has been fixed by Microsoft in the January 2023 Patch Tuesday with the CVE-2023-21746. If you run this exploit against a patched machine it won't work.

More technical details at --> https://www.localpotato.com/localpotato_html/LocalPotato.html

https://github.com/decoder-it/LocalPotato
#LPE

Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities.
https://github.com/xforcered/BokuLoader