Post #999
46
Smuggling an (Un)exploitable XSS
https://www.rcesecurity.com/2020/11/Smuggling-an-un-exploitable-xss/
https://www.rcesecurity.com/2020/11/Smuggling-an-un-exploitable-xss/
Channel Public Channel
AL Alaid TechThread
@offensive_thread
Vulnerability discovery, threat intelligence, reverse engineering, AppSec
- Subscribers
- 1.14K
- Photos
- 7
- Videos
- 2
- Links
- 1.4K
Showing posts older than #1000 · Back to latest
Older Posts 20 shown
Post #998
55
Post #997
38
Windows RpcEptMapper service insecure Registry permissions EoP
https://itm4n.github.io/windows-registry-rpceptmapper-eop/
itm4n’s blog Windows RpcEptMapper Service Insecure Registry Permissions EoP If you follow me on Twitter, you probably know that I developed my own Windows privilege escalation enumeration script - PrivescCheck - which is a sort of updated and extended version of the famous PowerUp. If you have ever run this script on Windows 7 or… https://itm4n.github.io/windows-registry-rpceptmapper-eop/
Post #996
42
How the MVSC Compiler Generates XFG Function Prototype Hashes
https://blog.quarkslab.com/how-the-mvsc-compiler-generates-xfg-function-prototype-hashes.html
Quarkslab How the MVSC Compiler Generates XFG Function Prototype Hashes https://blog.quarkslab.com/how-the-mvsc-compiler-generates-xfg-function-prototype-hashes.html
Post #995
41
OpenEDR is free and open source platform allows you to analyze what’s happening across your entire environment at base-security-event level.
https://github.com/ComodoSecurity/openedr
https://github.com/ComodoSecurity/openedr
Post #994
60
Post #993
62
Post #992
50
Post #991
50
Post #990
49
UAC bypasses from COMAutoApprovalList
https://swapcontext.blogspot.com/2020/11/uac-bypasses-from-comautoapprovallist.html
Blogspot UAC bypasses from COMAutoApprovalList Intro (This post is made with permission of Arush Agarampur - an original author of all methods described below). Here and below we assu... https://swapcontext.blogspot.com/2020/11/uac-bypasses-from-comautoapprovallist.html
Post #989
64
Forwarded from Noise Security Bit (AM)
EoP 0-day exploited in the wild: Windows Kernel Cryptography Driver cng.sys pool-based buffer overflow in IOCTL 0x390400
PoC: https://bugs.chromium.org/p/project-zero/issues/attachmentText?aid=472684
Details: https://bugs.chromium.org/p/project-zero/issues/detail?id=2104
PoC: https://bugs.chromium.org/p/project-zero/issues/attachmentText?aid=472684
Details: https://bugs.chromium.org/p/project-zero/issues/detail?id=2104
Post #988
66
Post #987
57
Abusing Teams client protocol to bypass Teams security policies
https://o365blog.com/post/teams-policies/
Aadinternals Abusing Teams client protocol to bypass Teams security policies Administrators can use teams policies for controlling what users can do in Microsoft Teams.
In this blog, I’ll show that these policies are applied only in client and thus can be easily bypassed. https://o365blog.com/post/teams-policies/
Post #986
45
Active Directory (AD) Attacks & Enumeration at the Network Layer
https://www.lares.com/blog/active-directory-ad-attacks-enumeration-at-the-network-layer/
https://www.lares.com/blog/active-directory-ad-attacks-enumeration-at-the-network-layer/
Post #985
37
Post #984
52
The Many Faces of Emotet
https://spamauditor.org/2020/10/the-many-faces-of-emotet/
https://spamauditor.org/2020/10/the-many-faces-of-emotet/
Post #983
62
Let’s build a high-performance fuzzer with GPUs!
https://blog.trailofbits.com/2020/10/22/lets-build-a-high-performance-fuzzer-with-gpus/
https://blog.trailofbits.com/2020/10/22/lets-build-a-high-performance-fuzzer-with-gpus/
Post #982
75
Post #981
55
Post #980
46
Introducing MIDNIGHTTRAIN - A Covert Stage-3 Persistence Framework weaponizing UEFI variables
https://slaeryan.github.io/posts/midnighttrain.html
https://slaeryan.github.io/posts/midnighttrain.html