Channel Public Channel

APT

@apt_notes

This channel discusses:

— Offensive Security
— RedTeam
— Malware Research
— OSINT
— etc

Disclaimer:
t.me/APT_Notes/6

Chat Link:
t.me/APT_Notes_PublicChat

Open in Telegram

Subscribers: 16.9K
Photos: 565
Videos: 28
Links: 909

Showing posts older than #304 · Back to latest

Older Posts 20 shown

Post #302 279 Sep 2, 2021, 16:16 UTC

BRAKTOOTH: Causing Havoc on Bluetooth Link Manager

https://asset-group.github.io/disclosures/braktooth/

Post #301 301 Sep 1, 2021, 21:02 UTC

https://shenaniganslabs.io/2021/04/13/Airstrike.html

Shenanigans Labs Airstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316) By default, domain joined Windows workstations allow access to the network selection UI from the lock screen. An attacker with physical access to a locked device with WiFi capabilities (such as a laptop or a workstation) can abuse this functionality to force…

Post #300 369 Sep 1, 2021, 12:06 UTC

CVE-2021-26084.sh1.5 KB

Confluence RCE Exploit - CVE-2021-26084

#exploit #confluecne

Post #299 270 Aug 31, 2021, 12:05 UTC

#tools #opensource
Let's check our community power 🙂
If you are involved in devsecops, please support this feature and write your +1 or any suggestion as well.

https://github.com/DefectDojo/django-DefectDojo/issues/5006

GitHub APIv2: Add feature of linking manually created JIRA tasks to finding · Issue #5006 · DefectDojo/django-DefectDojo Is your feature request related to a problem? Please describe This feature is not related to any problem directly, however, it may add useful functionalities. Describe the solution you'd like U...

Post #298 248 Aug 30, 2021, 21:28 UTC

https://www.thezdi.com/blog/2021/8/30/proxytoken-an-authentication-bypass-in-microsoft-exchange-server

Zero Day Initiative Zero Day Initiative — ProxyToken: An Authentication Bypass in Microsoft Exchange Server Continuing with the theme of serious vulnerabilities that have recently come to light in Microsoft Exchange Server, in this article we present a new vulnerability we call ProxyToken. It was reported to the Zero Day Initiative in March 2021 by researcher Le…

Post #297 210 Aug 28, 2021, 20:06 UTC

https://github.com/EasyHook/EasyHook

GitHub GitHub - EasyHook/EasyHook: EasyHook - The reinvention of Windows API Hooking EasyHook - The reinvention of Windows API Hooking. Contribute to EasyHook/EasyHook development by creating an account on GitHub.

Post #296 195 Aug 27, 2021, 15:40 UTC

CHAOSDB

Critical Vulnerability in Microsoft Azure Cosmos DB

https://chaosdb.wiz.io/

#azure #chaosdb

Wiz ChaosDB: Unauthorized Privileged Access to Microsoft Azure Cosmos DB A critical vulnerability in Azure's flagship Cosmos DB service affecting thousands of customers. Mitigation requires customers' manual actions.

Post #295 180 Aug 27, 2021, 07:58 UTC

https://twitter.com/a13xp0p0v/status/1430845177242046464?s=21

#zeronights

Twitter Alexander Popov I've published the article covering my talk at @ZeroNights! Improving the exploit for CVE-2021-26708 in the Linux kernel to bypass LKRG a13xp0p0v.github.io/2021/08/25/lkr… Slides: a13xp0p0v.github.io/img/CVE-2021-2… PoC exploit demo video: youtube.com/watch?v=O6rsuG……

Post #294 187 Aug 25, 2021, 21:49 UTC

https://www.mdmandgpanswers.com/blogs/view-blog/the-ultimate-guide-to-printnightmare-and-overcoming-it

MDMGPAnswers.com View Blog Where SMART MDM & Group Policy Admins come to Get Smarter.

Post #293 210 Aug 24, 2021, 18:51 UTC

Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.

https://github.com/projectdiscovery/notify

GitHub GitHub - projectdiscovery/notify: Notify is a Go-based assistance package that enables you to stream the output of several tools… Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms. - projectdiscovery/notify

Post #292 212 Aug 24, 2021, 07:54 UTC

Active Directory Penetration Testing Cheatsheet

https://infosecwriteups.com/active-directory-penetration-testing-cheatsheet-5f45aa5b44ff

#AD #pentest #cheatsheet

Post #291 222 Aug 23, 2021, 13:50 UTC

https://github.com/bigb0sss/RedTeam-OffensiveSecurity

#RedTeam

GitHub GitHub - bigb0sss/RedTeam-OffensiveSecurity: Tools & Interesting Things for RedTeam Ops Tools & Interesting Things for RedTeam Ops. Contribute to bigb0sss/RedTeam-OffensiveSecurity development by creating an account on GitHub.

Post #290 199 Aug 23, 2021, 12:54 UTC

WMkick is a TCP protocol redirector/MITM tool that targets NTLM authentication message flows in WMI (135/tcp) and Powershell-Remoting/WSMan/WinRM (5985/tcp) to capture NetNTLMv2 hashes.

Responder

https://github.com/KoreLogicSecurity/wmkick

GitHub GitHub - KoreLogicSecurity/wmkick: WMkick is a TCP protocol redirector/MITM tool that targets NTLM authentication message flows… WMkick is a TCP protocol redirector/MITM tool that targets NTLM authentication message flows in WMI (135/tcp) and Powershell-Remoting/WSMan/WinRM (5985/tcp) to capture NetNTLMv2 hashes. - KoreLogic...

Post #289 193 Aug 23, 2021, 07:49 UTC

https://twitter.com/j0nh4t/status/1429049506021138437?s=21

#razer #windows #privesc

Twitter jonhat Need local admin and have physical access? - Plug a Razer mouse (or the dongle) - Windows Update will download and execute RazerInstaller as SYSTEM - Abuse elevated Explorer to open Powershell with Shift+Right click Tried contacting @Razer, but no answers.…

Post #287 191 Aug 22, 2021, 19:21 UTC

An Empirical Assessment of Endpoint Detection and Response Systems against Advanced Persistent Threats Attack Vectors

https://res.mdpi.com/d_attachment/jcp/jcp-01-00021/article_deploy/jcp-01-00021.pdf

Post #286 263 Aug 19, 2021, 12:12 UTC

Red Team Infrastructure Wiki

Wiki to collect Red Team infrastructure hardening resources

This wiki is intended to provide a resource for setting up a resilient Red Team infrastructure. It was made to complement Steve Borosh and Jeff Dimmock's BSides NoVa 2017 talk "Doomsday Preppers: Fortifying Your Red Team Infrastructure"

https://github.com/bluscreenofjeff/Red-Team-Infrastructure-Wiki

#collection #redteam