TGViewer
Channel Public Channel
Security Analysis

Security Analysis

@securation

- Offensive Security (Red Teaming / PenTesting)
-AI Security
- BlueTeam (OperationSec, TreatHunting, DFIR)
- Reverse Engineering / Malware Analysis
- Web Security
- Cryptography
- Steganography
- Forensics
@DrPwner
Open in Telegram
Subscribers
12.6K
Photos
369
Videos
54
Links
931

Showing posts older than #1073 · Back to latest

Older Posts 19 shown
Post #1069 2.19K
⭕️ Privilege Escalation to SYSTEM in AWS VPN Client

The AWS VPN Client application is affected by an arbitrary file write as SYSTEM, which can lead to privilege escalation.

https://rhinosecuritylabs.com/aws/cve-2022-25165-aws-vpn-client
#aws #PE
@securation
Rhino Security Labs CVE-2022-25165: Privilege Escalation to SYSTEM in AWS VPN Client The AWS VPN Client application is affected by an arbitrary file write as SYSTEM, which can lead to privilege escalation.
Post #1059 3.86K
⭕️ تحلیل آسیب پذیری Bypass Authentication via misconfiguration

نقص در مکانیزم Oauth که منجر به دور زدن احراز هویت و تصاحب اکانت میشه.
در این سناریو اگر قربانی از طریق Oauth Google توی اپ لاگین کنه و سپس لاگ اوت کنه ( از اپ یا گوگل اکانت ) ، بعدش هرشخصی میتونه به حسابش دسترسی پیدا کنه از طریق لاگین Oauth ( از طریق همون دستگاه )
دلیل: منقضی نشدن Access Token

https://infosecwriteups.com/bypass-authentication-1bfab09332fe
#web #Oauth #token
@securation
Medium How I found the Authentication Bypass bug and Earn $$$$ Hi all,
Post #1056 9.37K
⭕️ دور زدن CSRF Tokens

1- حذف کردن CSRF Token
2- تعویض متد درخواست از POST به GET
3- استفاده از CSRF Token کاربر دیگر
4- ترکیب کردن Session Fixation و استفاده از یک توکن جعل شده معتبر در مواقعی که مکانیزم به کار رفته Double submit cookie هست.

https://systemweakness.com/introduction-to-csrf-stepwise-guide-to-bypass-csrf-tokens-2-2-1375b30d479e
#web #cookie #CsrfToken
@securation
Medium Introduction to CSRF: Stepwise Guide to bypass CSRF Tokens (2/2) In the first part of this blog series, we talked about the CSRF attack and CSRF tokens. In an ideal world, CSRF tokens would be a great…
Post #1048 2.05K
⭕️ تشریح حمله log poisoning ، اتک وکتور های حمله ،‌ چندتا مثال از حمله ، بعلاوه ابزار معرفی شده برای حمله

https://infosecwriteups.com/log-poisoning-inject-payloads-in-logs-e7f1fa338f2f
#web #bugbounty
@securation
Medium Log Poisoning — Inject payloads in logs Logs… These are the files, in which all the activities on a server are stored. These are used for monitoring, troubleshooting, fixing bugs…
Post #1047 2.3K
⭕️ بایپس مکانیزم ها سرور ساید و کلاینت ساید در فانکشن وریفای کردن OTP و رسیدن به تصاحب حساب کاربری
https://gowtham-naidu.medium.com/p1-vulnerability-how-i-chained-logical-error-to-account-takeover-vulnerability-that-no-one-59aa88a9cae8
#web #bugbounty
@securation
Medium P1 Vulnerability: How I chained Logical-Error to Account-Takeover Vulnerability 😈🧑‍💻that No-One… * Introduction *
Post #1045 2.8K
⭕️ Authentication Bypass
ارسال کردن credit به صورت آرایه در قالب json و وارد شدن به پنل ادمین
در این مثال اسم آرایه root بوده و برای تست از عبارات بیشتری مثل admin ، user ، administrator میشه استفاده کرد
https://infosecwriteups.com/authentication-bypass-using-root-array-4a179242b9f7
#web #bugbounty
@securation
Medium Authentication bypass using root array Authentication bypass by using root array at the login process.
Post #1040 2.78K
⭕️ Advanced Windows exploit development resources

00 - Windows Rootkits
01 - Windows kernel mitigations
02 - Windows kernel shellcode
03 - Windows kernel exploitation
04 -Windows kernel GDI exploitation
05 - Windows kernel Win32k.sys research
06 - Windows Kernel logic bugs
07 - Windows kernel driver development
08 - Windows internals
09 - Advanced Windows debugging
10 - 0days - APT advanced malware research
11 - Video game cheating (kernel mode stuff sometimes)
12 - Hyper-V and VM / sandbox escape
13 - Fuzzing
14 - Windows browser exploitation
15 - books, certifications and courses

https://github.com/FULLSHADE/WindowsExploitationResources
#exploit #pwn #windows
@securation
GitHub GitHub - FULLSHADE/WindowsExploitationResources: Resources for Windows exploit development Resources for Windows exploit development. Contribute to FULLSHADE/WindowsExploitationResources development by creating an account on GitHub.
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →