#tools
#Blue_Team_Techniques
1. Simple Bash IOC Scanner
https://github.com/Neo23x0/Fenrir
2. Firewalls under the hood - UFW
https://blog.kanbach.org/post/firewalls-under-the-hood-ufw

#Offensive_security
1. A collection of various and sundry code snippets that leverage .NET dynamic tradecraft
https://github.com/bohops/DynamicDotNet
2. Payload generator to exfiltrate user cookies through the PHP info page bypassing the HttpOnly flag during XSS exploitation
https://github.com/HackCommander/PHP-info-cookie-stealer
3. From SQL Injection to RCE on Intel DCM (CVE-2022-21225)
https://www.rcesecurity.com/2022/12/from-zero-to-hero-part-2-intel-dcm-sql-injection-to-rce-cve-2022-21225

#tools
#Threat_Research
1. Return Address Spoofing on x64
https://offensivecraft.wordpress.com/2022/12/08/the-stack-series-return-address-spoofing-on-x64
2. Detecting heap memory pitfalls
https://antonio-cooler.gitbook.io/coolervoid-tavern/detecting-heap-memory-pitfalls
]-> https://github.com/CoolerVoid/heap_detective

#exploit
1. ThinkPHP latest RCE reproduction and analysis
https://xz.aliyun.com/t/11940

2. Folina, Shadow Credentials, and WSUS exploitation
https://0xdf.gitlab.io/2022/12/10/htb-outdated.html

3. CVE-2022-1361:
Improper Neutralization of Special Elements Used In a SQL Command: New Technique Discovered To Bypass WAF Of Several Vendors
https://gbhackers.com/bypass-web-application-firewalls/amp

#Malware_analysis
1. Drokbk Malware
https://www.secureworks.com/blog/drokbk-malware-uses-github-as-dead-drop-resolver
2. Typosquat/Ransomware Campaign in PyPI and NPM
https://blog.phylum.io/phylum-detects-active-typosquatting-campaign-in-pypi

#Malware_analysis
1. Invisbile npm malware evading security checks
https://jfrog.com/blog/invisible-npm-malware-evading-security-checks-with-crafted-versions
2. Azov Ransomware: Polymorphic Wiper
https://research.checkpoint.com/2022/pulling-the-curtains-on-azov-ransomware-not-a-skidsware-but-polymorphic-wiper

#exploit
1. CVE-2022-45025:
Command injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)
https://github.com/yuriisanin/CVE-2022-45025

2. Exploring Chrome’s CVE-2020-6418
https://blog.haboob.sa/blog/exploring-chromes-cve-2020-6418-part1

3. CVE-2022-39066:
SQL Injection Vulnerability in ZTE MF286R
https://github.com/v0lp3/CVE-2022-39066

#Infosec_Standards
"PCI Software Security Framework - Secure Software Requirements and Assessment Procedures", Version 1.2, Dec. 2022.

#Offensive_security
1. AV Evasion Methodology
https://book.hacktricks.xyz/windows-hardening/av-bypass
2. Bypassing MacOS Privacy Controls
https://blog.xpnsec.com/bypassing-macos-privacy-controls

#reversing
#Research
BlackHat Europe 2022:
"Exploring a New Class of Kernel Exploit Primitive".

#Threat_Research
1. Exploitable memory corruption using CVE-2020-25669 and Linux Kernel
https://www.synopsys.com/blogs/software-security/cyrc-case-study-linux-kernel-vulnerability
2. Zeek-Formatted Threat Intelligence Feeds
https://github.com/CriticalPathSecurity/Zeek-Intelligence-Feeds

#Infographics
#Infosec_Standards
Types of VPN

]-> RFC4026: "Provider Provisioned VPN Terminology", 2018.
https://datatracker.ietf.org/doc/rfc4026

#Red_Team_Tactics
BlackHat Europe 2022:
"Dirty Vanity: A New Approach to Code injection & EDR bypass".

]-> A PoC for the new injection technique, abusing windows fork API to evade EDRs:
https://github.com/deepinstinct/Dirty-Vanity

#Whitepaper
"Routing Security: BGP Incidents, Mitigation Techniques and Policy Actions", 2022.

🇮🇷 Iranian rap about corrupt actors who are in the position of spies

Based on observations in Iran, there are actors who are willing to sell their homeland for money and spy for other countries.
This issue has made the people of Iran very angry with some famous actors.
It is expected that the Iranian government will take care of the request of its people and deal seriously with these spies.

via "shabzadeh".

#Celebrity_2zari #Green_card #Iranian_rap

@YourJiniNews

I Can Help You To Clear & Give the training & exam solutions on the below certifications
1_CEH.
2_CEH Practical.
3_eJPT.
4_eCCPTv2.
5_eWPT.
6_eWPTxv2.
7_CRTP.
8_CRTO.
9_OSCP.
10_OSWE.
11_OSEP.
12_OSWP.
13_CPENT
14_CHFI
15_eCPTxv2
16_PNPT
17_Burpsuite exam
Remote Exam Support possible.
If anyone needs message me.
Lower prices & passing guaranteed!
Follow: https://t.me/alexserviceez
Ping @examsolutionz

We have added new exam of burpsuite solutions