Modern C++ Pdf 7

سلام بچه ها شبتون بخیر 😅

اینم بخش هفتم از آموزش مدرن سی پلاس پلاس

#modern_cpp
#c
#pdf

سلام بچه ها روزتون بخیر .

این برنامه های C که گذاشتم مثال هایی هستن که داخل فریم ورک c_std وجود دارن یعنی به واسطه پیاده سازی های که انجام دادم اینا رو پیاده کردم .که قابلیت های فریم ورک رو نشون بده .
نزدیک به 40 کتابخونه و صدها تابع و فیچر وجود داره و صدها مثال که نتیجه یکسال کار مداوم بوده یعنی ماه دیگه میشه 1 سال . 😁

امیدوارم ازش استفاده کنید و خب ایضا باگ های احتمالی رو برام ارسال کنید .

البته اینم بگم فریم ورک کاملا کراس پلتفرمه هیچ تغییر نیازی نیست بدید چه موقعی که بخوایید تووویندوز استفاده کنید یا لینوکس .
مواردی هم که نیاز باشه تو document گفتم

https://github.com/KaisenAmin/c_std

#Research
"HookChain: A new perspective for Bypassing EDR Solutions", 2024.

🔥 VMware vCenter Server RCE + PrivEsc

Multiple heap-overflow vulnerabilities in the implementation of the DCE/RPC protocol. They could allow a bad actor with network access to vCenter Server to achieve remote code execution by sending a specially crafted network packet.

— CVE-2024-37079: A heap-overflow vulnerability in the DCERPC protocol implementation of vCenter Server that allows a malicious actor with network access to send specially crafted packets, potentially leading to remote code execution. (CVSS v3.1 score: 9.8 "critical");

— CVE-2024-37080: Another heap overflow vulnerability in the DCERPC protocol of vCenter Server. Similar to CVE-2024-37079, it allows an attacker with network access to exploit heap overflow by sending crafted packets, potentially resulting in remote code execution. (CVSS v3.1 score: 9.8 "critical");

— CVE-2024-37081: This vulnerability arises from a misconfiguration of sudo in vCenter Server, permitting an authenticated local user to exploit this flaw to elevate their privileges to root on the vCenter Server Appliance. (CVSS v3.1 score: 7.8 "high").

Nuclei Template (PoC):
🔗 https://gist.github.com/tothi/0ff034b254aca527c3a1283ff854592a

Shodan

product:"VMware vCenter Server"

FOFA

app="vmware-vCenter"

#vmware #vcenter #rce #lpe #cve

OffSec - OSED 2023 Certified Exploit Developer Training
[ Download ]

#exp

🔴 ارائه های زیر از کنفرانس Nahamcon2024 در یوتیوب منتشر شد.

به پست مربوطه هم اضافه شد.

- js Files Are Your Friends
- Practical AI for Bounty Hunters
- Sluicing Scripts

#کنفرانس #امنیت_وب #باگ_بانتی

🆔 @onhex_ir
➡️ ALL Link

ONHEXGROUP

Progressive Web Apps (PWAs) Phishing

More fake URL bars :)

POC: https://github.com/mrd0x/PWA-Phishing

Private: @ExploitServiceBot
Malware Shop: @MalwareShopBot
All projects @MalwareLinks

Angel Drainer: https://news.1rj.ru/str/+p2mOn-eGo4UzMTEx
Support: @angelsupport

base of exploit mitigations for chrome, dotnet,etc...
[ GitHub ]

#browser #exp

Channel post about
Blockchain and WEB3

🪐 https://news.1rj.ru/str/KS_note

#Introduce good channels

Offensive VBA

credit : @TheXC3LL

Sina Karvandi - Chasing Bugs with Hypervisors

#virtualization
#slides
#binary
———
🆔 @Infosec_Fortress

#virtualization
#slides
#binary
———
🆔 @Infosec_Fortress

From secret images to encryption keys.
credit : HOSEIN. YAVARZADEH

This week, we are joined by Hosein Yavarzadeh from the University of California San Diego, as he is discussing his work on "Pathfinder: High-Resolution Control-Flow Attacks Exploiting the Conditional Branch Predictor" This paper introduces new methods that let attackers read from and write to specific parts of high-performance CPUs, such as the path history register (PHR) and prediction history tables (PHTs).

https://thecyberwire.com/podcasts/research-saturday/330/notes


The research can be found here:
Graph: Growing number of threats leveraging Microsoft API

👾Lets Create An EDR… And Bypass It!
Part 1
Part 2

--------------------------------------------------------------
Related stuff:

∆ Simple EDR In Nim

∆ EDR IS BY NO MEANS THE FINAL SOLUTION [ Blog ]

∆ A brief analysis of EDR architecture - taking Windows platform as an example [ Blog ]

∆ Summary of all EDR bypass methods found so far [ blog ]

[+] An Introduction to Bypassing User Mode EDR Hooks

[+] Blinding EDR On Windows

[+] How your EDR actually works


#EDR