NEW BOT Телеграм, страница

Peneter Tools

Another Local Windows privilege escalation using a new potato technique ;)

The LocalPotato attack is a type of NTLM reflection attack that targets local authentication. This attack allows for arbitrary file read/write and elevation of privilege.

NOTE: This vulnerability has been fixed by Microsoft in the January 2023 Patch Tuesday with the CVE-2023-21746. If you run this exploit against a patched machine it won't work.

More technical details at --> https://www.localpotato.com/localpotato_html/LocalPotato.html

https://github.com/decoder-it/LocalPotato
#LPE

Localpotato

LocalPotato - When Swapping The Context Leads You To SYSTEM

Here we are again with our new &ast;potato flavor, the LocalPotato&excl; This was a cool finding so we decided to create this dedicated website &semi;)

236 views21:09

Peneter Tools

Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities.
https://github.com/xforcered/BokuLoader

GitHub

GitHub - xforcered/BokuLoader: A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance…

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features! - xforcered/BokuLoader

260 views23:06

Peneter Tools

https://github.com/blackarrowsec/redteam-research/tree/master/LPE%20via%20StorSvc
#LPE

GitHub

redteam-research/LPE via StorSvc at master · blackarrowsec/redteam-research

Collection of PoC and offensive techniques used by the BlackArrow Red Team - blackarrowsec/redteam-research

266 views18:29

Peneter Tools

SSH Remote Code Execution
https://github.com/SleepTheGod/SSH-Remote-Code-Execution

GitHub

GitHub - SleepTheGod/SSH-Remote-Code-Execution: SSH Zero-Day Made By ClumsyLulz

SSH Zero-Day Made By ClumsyLulz. Contribute to SleepTheGod/SSH-Remote-Code-Execution development by creating an account on GitHub.

278 views15:53

Peneter Tools

VLAN L2 Pivoting Instrument
https://github.com/c4s73r/HIVE

226 views09:53

Peneter Tools

POC for CVE-2022-39952
https://github.com/horizon3ai/CVE-2022-39952
Fortinet FortiNAC CVE-2022-39952 Deep-Dive and IOCs
https://www.horizon3.ai/fortinet-fortinac-cve-2022-39952-deep-dive-and-iocs/

GitHub

GitHub - horizon3ai/CVE-2022-39952: POC for CVE-2022-39952

POC for CVE-2022-39952. Contribute to horizon3ai/CVE-2022-39952 development by creating an account on GitHub.

310 views19:23

Peneter Tools

Weblogic CVE-2023-21839
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data.
https://github.com/Scarehehe/Weblogic-CVE-2023-21839

GitHub

GitHub - DXask88MA/Weblogic-CVE-2023-21839

Contribute to DXask88MA/Weblogic-CVE-2023-21839 development by creating an account on GitHub.

238 views05:39

Peneter Tools

A modular web reconnaissance tool and vulnerability scanner.
https://github.com/CERT-Polska/Artemis

GitHub

GitHub - CERT-Polska/Artemis: A modular vulnerability scanner with automatic report generation capabilities.

A modular vulnerability scanner with automatic report generation capabilities. - CERT-Polska/Artemis

279 views05:49

Peneter Tools

web scanner
https://docs.xray.cool/
https://github.com/chaitin/xray