Channel Public Channel

RESOLUTE ATTACK

@resoluteattack

⚡️RESOLUTE ATTACK - Компания по информационной безопасности

YouTube - https://www.youtube.com/@RESOLUTE-ATTACK

Chat - @RESOLUTECHAT

Web Site - www.resolute-attack.com

Обратная связь - @ResoluteAttack_Bot

Open in Telegram

Subscribers: 6.1K
Photos: 207
Videos: 39
Links: 296

Showing posts older than #801 · Back to latest

Older Posts 13 shown

Post #798 5.22K Jun 27, 2023, 10:06 UTC

OSCP2023.pdf47.8 MB

RESOLUTE ATTACK

🔥 31
😍 5
👍 3
❤ 2
😈 1
👨‍💻 1

Post #796 3.76K Jun 27, 2023, 03:23 UTC

Forwarded from Ralf Hacker Channel (Ralf Hacker)

Прошел год с прошлого релиза, и вот вышло обновление:

CrackMapExec 6.0.0

P.S. Ну лично мне такой штуки как прогресс бар всегда не хватает😁

#redteam #pentest #ad #soft

👍 16
🔥 6

Post #794 4.14K Jun 21, 2023, 12:47 UTC

Forwarded from Caster

OSPF Authentication Cracking by Caster

🔥 23
❤ 6
⚡ 2

Post #793 3.91K Jun 20, 2023, 15:45 UTC

Forwarded from Caster

Caster Mind: MITM Vectors

Основные векторы MITM-атак

::

Main vectors of MITM attacks

[From "Network Nightmare" by Caster]

🔥 28
❤ 6
⚡ 3
👍 1
😨 1

Post #792 3.99K Jun 17, 2023, 19:44 UTC

With Love from pentesters RA ❤️

❤ 36
🔥 15
😍 7
👍 2
👨‍💻 1
😨 1

Post #791 3.65K Jun 17, 2023, 17:39 UTC

Audio

❤ 28
🔥 6
🌚 5
⚡ 3
👍 1
🤔 1
😱 1

Post #790 3.59K Jun 17, 2023, 17:39 UTC

❤️❤️❤️

Post #789 4.21K Jun 16, 2023, 17:44 UTC

☄️ DefaultCreds Cheat Sheet

Python tool to quickly search through a database of 1231+ default logins and passwords for different products.

https://github.com/ihebski/DefaultCreds-cheat-sheet

❤ 20
😍 4
🔥 3
👍 1

Post #787 4.08K Jun 12, 2023, 15:21 UTC

Сильно, но мы ещё не тестили

🤔 22
👍 3
🌚 3

Post #786 3.49K Jun 12, 2023, 15:20 UTC

Forwarded from linkmeup

Отлично! Теперь шелл можно и через SMS пропихнуть.
Пока безопасники бьются с DLP, настраивают политики и заливают порты эпоксидкой, просто отправь SMS на номер.TCPoverSMS, my ass.
https://github.com/persistent-security/SMShell

🤔 17
👍 7
🔥 4
🤩 3
❤ 2

Post #777 5.47K Jun 9, 2023, 18:00 UTC

D1_COMMSEC_Upgrading_Rollback_Agnostic_Replay_Attacks_Carlos_Gomez.pdf8.4 MB D1T1_Leveraging_Advanced_Techniques_of_DMA_Reentrancy_to_Escape.pdf1.5 MB D2 COMMSEC - Feeding Gophers to Ghidra - Max Kersten.pdf421.7 KB D2_COMMSEC_Red_Wizard_A_User_friendly_Infrastructure_for_Red_Teams.pdf2.7 MB D2T1_How_MySQL_Servers_Can_Attack_YOU_Martin_Rahkmanov_&_Alexander.pdf5.4 MB D2T1_Smart_Speaker_Shenanigans_Making_the_SONOS_One_Sing_Its_Secrets.pdf19.2 MB D2T2_Automated_Black_box_Security_Testing_of_Smart_Embedded_Devices.pdf5.3 MB

☄️ ДОКЛАДЫ С HITBSecConf2023 - Amsterdam

RESOLUTE ATTACK

👍 13
❤ 5
🔥 5
😍 1

Post #775 3.17K Jun 9, 2023, 00:38 UTC

Forwarded from Private Shizo

Exploiting Errors in Windows Error Reporting in 2022.pdf2.6 MB

💥Exploiting Errors in Windows Error Reporting in 2022

🤩 10
❤ 2
👍 1

Post #773 3.05K Jun 9, 2023, 00:37 UTC

Forwarded from Private Shizo

💥CVE-2023-28252(Windows CLFS OOB R/W➡️EoP, 0-day, may have been actively exploited/ITW)
An OOB read and write vulnerability exists in CClfsBaseFilePersisted::ExtendMetadataBlock and CClfsBaseFilePersisted::WriteMetadataBlock when parsing a malformed BLF file. The OOB read leads to one byte increment of the rgContainers[0] value, that results pointing to a fake CONTAINER_CONTEXT with a user space address 0x5000000 treated as an object's vftable pointer, detonating the placed gadgets and escalating privilege to SYSTEM.

🦠Exploit sample

⚠️The gadgets are same as the ITW exploit of CVE-2023-23376, the code layout has overlaps with the ITW exploit of CVE-2022-37969.
⚠️Exploiting the vulnerability will give a local unprivileged attacker SYSTEM level privileges.
⚠️Any authenticated local user can exploit the vulnerability and an exploit is trivial to produce.

🔥 13
👍 5
😍 4

Older posts →