POC Exploit for CVE-2019-5736 (vuln in runc package for the Docker)

POC1: https://github.com/ancat/noscripts/blob/master/misc/runc-cve-2019-5736.c

POC2: https://github.com/feexd/pocs/tree/master/
CVE-2019-5736

#poc #expdev #docker #darw1n

Webkit Exploitation Tutorial
https://www.auxy.xyz/tutorial/Webkit-Exp-Tutorial/
#webkit #browser #expdev #tutorial #darw1n

Повышение привелегий в PostgreSQL (разбор CVE-2018-10915)
https://habr.com/ru/post/440394/
#web #cve #postgresql

WordPress 5.0.0 Remote Code Execution
https://blog.ripstech.com/2019/wordpress-image-remote-code-execution/ #web #wordpress #rce

Malware debugging just got a lot easier. There's a new JavaScript bridge for #WinDbg. In this post, we'll walk through these new features https://blog.talosintelligence.com/2019/02/windbg-malware-analysis-with-javanoscript.html #malware #debugging #JavaScript #expdev #darw1n

Extracting a 19 Year Old Code Execution from WinRAR

Article: https://research.checkpoint.com/extracting-code-execution-from-winrar/

POC: https://github.com/Ridter/acefile

#expdev #afl #fuzzing #winrar #darw1n

Jailbreaking Subaru StarLink
https://github.com/sgayou/subaru-starlink-research/blob/master/doc/README.md #hardware #auto #re #jailbreak #darw1n

RCE on the Smiths Medical Medfusion 4000
https://github.com/sgayou/medfusion-4000-research/blob/master/doc/README.md #hardware #re #medical #expdev #darw1n

MS Edge RCE (CVE-2018-8495). Chaining a few bugs in Edge to be able achieve remote code execution by mainly abusing custom URI schemes.

Article:
https://leucosite.com/Microsoft-Edge-RCE/

POC:
https://github.com/kmkz/exploit/blob/master/CVE-2018-8495.html

#browser #edge #rce #expdev #darw1n

https://erfur.github.io/down_the_rabbit_hole_pt2/ #radare2 #uefi #dukeBarman

An archive of low-level CTF challenges developed by j00ru over the years https://github.com/j00ru/ctf-tasks #ctf #reverse #dukeBarman

[PoC] Windows DHCP Server RCE Vulnerability Analysis (CVE-2019-0626) https://mp.weixin.qq.com/s/OissE9gAVkKmAXuiIUeOLA #windows #expdev #rce #poc #darw1n

Linux Kernel hooking engine was updated https://github.com/milabs/khook/tree/dev Looking for testers (update is in only dev branch) and help with ARM support #linux #exploit

Finding Undocumented Intel Atom MSR's in the Viliv S5 Through BIOS Reverse Engineering https://stragedevices.blogspot.com/2019/02/finding-verified-intel-atom-msrs-in.html #reverse #bios #dukeBarman

(CVE-2019-6340) Drupal < 8.6.10 / < 8.5.11 - REST Module Remote Code Execution https://www.ambionics.io/blog/drupal8-rce POC: https://gist.github.com/leonjza/d0ab053be9b06fa020b66f00358e3d88 #web #drupal #rce #poc

☝️ From March 1, our forum will be temporarily closed for maintenance. Therefore, it will not be available for one or two months. We are sorry for the inconvenience.

Unc0ver Jailbreak has been released for iOS 12 .1.2 to iOS 12 with full functional Cydia. Unc0ver tool compatible with iOS 11 to 11.4.1 Jailbreak too.

Article: https://pangu8.com/jailbreak/unc0ver/
Release: https://github.com/pwn20wndstuff/Undecimus/releases

#ios #jailbreak #expdev #tools #darw1n

PHP Security Check List
https://github.com/ismailtasdelen/php-security-check-list
#web #pentest #checklist #darw1n

"The Thunderclap vulnerabilities are security flaws that affect the way modern computers interact with peripheral devices such as network cards, storage, and graphics cards. These vulnerabilities allow an attacker with physical access to a Thunderbolt port to compromise a target machine in a matter of seconds..." Site: http://thunderclap.io/ Paper: http://thunderclap.io/thunderclap-paper-ndss2019.pdf #hardware #dukeBarman

Awesome-WAF: A curated list of awesome web-app firewall (WAF) stuff:
- Fingerprints of almost all known WAFs (80+)
- Popular methods for evasion w/ ex.
- Compiled list of known bypasses for WAFs
- Tools,papers,videos & presentations

https://github.com/0xInfection/Awesome-WAF

#web #pentest #waf #bypass #darw1n

Radare2 team happy to announce Radare Summer of Code this year too. To learn more about RSoC'19 summer internship program visit http://rada.re/rsoc/2019 You will have chance to improve the analysis support, types inference and many other exciting things. #radare2 #reverse #dukeBarman