Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.14K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #739 · Back to latest

Older Posts 20 shown

Post #738 69 Dec 21, 2019, 17:36 UTC

Drupal 8 File Upload Vulnerability
https://www.aon.com/cyber-solutions/aon_cyber_labs/file-upload-vulnerability-in-drupal8/

Aon Drupal 8 File Upload Vulnerability | Aon's Cyber Labs Aon’s Cyber Solutions recently discovered a security vulnerability in all versions of Drupal 8 below 8.7.11 / 8.8.1.

Post #737 54 Dec 21, 2019, 17:36 UTC

Using WebRTC ICE Servers for Port Scanning in Chrome
https://medium.com/tenable-techblog/using-webrtc-ice-servers-for-port-scanning-in-chrome-ce17b19dd474

Medium Using WebRTC ICE Servers for Port Scanning in Chrome To everything (TURN! TURN! TURN!)

Post #736 45 Dec 21, 2019, 17:35 UTC

From dropbox(updater) to NT AUTHORITY\SYSTEM
https://decoder.cloud/2019/12/18/from-dropboxupdater-to-nt-authoritysystem/

Decoder's Blog From dropbox(updater) to NT AUTHORITY\SYSTEM Hardlinks again! Yes, there are plenty of opportunities to raise your privileges due to incorrect permissions settings when combined with hardlinks in many softwares (MS included) ;-) In this post…

Post #735 48 Dec 21, 2019, 17:35 UTC

POPPOPRET-nullbyte-DLL-bypass
A method to bypass a null byte in a POP-POP-RETN address for exploiting local SEH overflows via DLL injection
https://github.com/FULLSHADE/POPPOPRET-nullbyte-DLL-bypass

Post #734 48 Dec 21, 2019, 17:35 UTC

Operation Wocao: Shining a light on one of China’s hidden hacking groups
https://www.fox-it.com/en/news/whitepapers/operation-wocao-shining-a-light-on-one-of-chinas-hidden-hacking-groups/

Post #733 60 Dec 18, 2019, 07:20 UTC

Hacking GitHub with Unicode's dotless 'i'.
https://eng.getwisdom.io/hacking-github-with-unicode-dotless-i/

Post #732 60 Dec 16, 2019, 07:59 UTC

ReverseTCP Shell - Framework

https://github.com/ZHacker13/ReverseTCPShell

GitHub GitHub - ZHacker13/ReverseTCPShell: PowerShell ReverseTCP Shell - Framework PowerShell ReverseTCP Shell - Framework. Contribute to ZHacker13/ReverseTCPShell development by creating an account on GitHub.

Post #731 59 Dec 16, 2019, 07:00 UTC

Persistence – Office Application Startup
https://pentestlab.blog/2019/12/11/persistence-office-application-startup/

Penetration Testing Lab Persistence – Office Application Startup Microsoft Office is the most popular product in Windows operating systems since it allows users to write and edit documents, create and present slides, gather notes, sent emails and perform calcula…

Post #730 59 Dec 15, 2019, 12:01 UTC

From iPhone to NT AUTHORITY\SYSTEM
https://decoder.cloud/2019/12/12/from-iphone-to-nt-authoritysystem/

Decoder's Blog From iPhone to NT AUTHORITY\SYSTEM As promised in my previous post , I will show you how to exploit the “Printconfig” dll with a real world example. But what does Apple’s iPhone have to do with it?? Well, keep on r…

Post #729 49 Dec 15, 2019, 11:22 UTC

What I Learned from Reverse Engineering Windows Containers
https://unit42.paloaltonetworks.com/what-i-learned-from-reverse-engineering-windows-containers/

Unit 42 What I Learned from Reverse Engineering Windows Containers Our researcher provides an overview on containers - starting with their Linux history - and shows the different implementations of containers in Windows, how they work and the security pitfalls that may occur.

Post #728 58 Dec 11, 2019, 11:11 UTC

https://securelist.com/windows-0-day-exploit-cve-2019-1458-used-in-operation-wizardopium/95432/

Post #727 5 Dec 10, 2019, 13:09 UTC

Forwarded from r0 Crew (Channel)

Extending Ghidra: from Script to Plugins and Beyond https://vimeo.com/377180466 #ghidra #reverse #dukeBarman

Post #726 89 Dec 9, 2019, 12:10 UTC

A fast and flexible NTLM reconnaissance tool

https://github.com/sachinkamath/ntlmrecon

GitHub GitHub - pwnfoo/NTLMRecon: Enumerate information from NTLM authentication enabled web endpoints 🔎 Enumerate information from NTLM authentication enabled web endpoints 🔎 - pwnfoo/NTLMRecon

Post #725 66 Dec 6, 2019, 12:49 UTC

Analysis of Malicious ElectrumX Servers Source Code
http://www.peppermalware.com/2019/12/analysis-of-malicious-electrumx-servers.html

Peppermalware Analysis of Malicious ElectrumX Servers Source Code Blog about computer security, malware and reverse engineering.

Post #724 73 Dec 2, 2019, 18:31 UTC

DEEPWARE SCANNER - сканер deepfake'ов
https://www.deepware.ai

Post #723 63 Nov 25, 2019, 14:26 UTC

flan
A pretty sweet vulnerability scanner
https://github.com/cloudflare/flan

GitHub GitHub - cloudflare/flan: A pretty sweet vulnerability scanner A pretty sweet vulnerability scanner. Contribute to cloudflare/flan development by creating an account on GitHub.

Post #722 58 Nov 25, 2019, 14:25 UTC

fzero_fuzzer
A fast Rust-based safe and thead-friendly grammar-based fuzz generator
https://github.com/gamozolabs/fzero_fuzzer

GitHub GitHub - gamozolabs/fzero_fuzzer: A fast Rust-based safe and thead-friendly grammar-based fuzz generator A fast Rust-based safe and thead-friendly grammar-based fuzz generator - gamozolabs/fzero_fuzzer

Post #721 6 Nov 21, 2019, 14:12 UTC

Forwarded from r0 Crew (Channel)

A Collection of Chrome Sandbox Escape POCs/Exploits for learning https://github.com/allpaca/chrome-sbx-db #exploit #dukeBarman

GitHub GitHub - allpaca/chrome-sbx-db: A Collection of Chrome Sandbox Escape POCs/Exploits for learning A Collection of Chrome Sandbox Escape POCs/Exploits for learning - allpaca/chrome-sbx-db

Post #720 79 Nov 18, 2019, 06:08 UTC

Разбор LPE в Symantec Endpoint Protection

https://posts.specterops.io/cve-2019-12757-local-privilege-escalation-in-symantec-endpoint-protection-1f7fd5c859c6

Medium CVE-2019–12757: Local Privilege Escalation in Symantec Endpoint Protection Symantec Endpoint Protection Version: 14.2 RU1 Build 3335 (14.2.3335.1000) and below Operating System Tested On: Windows 10 1803 x64

Post #719 52 Nov 18, 2019, 06:04 UTC

Описание устройства AppLocker
https://tyranidslair.blogspot.com/2019/11/the-internals-of-applocker-part-1.html

www.tiraniddo.dev The Internals of AppLocker - Part 1 - Overview and Setup This is part 1 in a short series on the internals of AppLocker (AL). Part 2 is here , part 3 here and part 4 here . AppLocker (AL) is...

Older posts →