New mini shell :)
⚠️ Bypass All waf
📌 Non Encoded :::)))

💥MacDirtyCowDemo

#macOS #XNU #vulnerability #exploitation #security #DirtyCOW #MacDirtyCow #root #su

💉linux_injector is a simple ptrace-less shared library injector for x64 Linux(Most Linuxes that use glibc should be supported).

For control flow hijacking, this program needs a hijacking candidate. The code presented here uses malloc(), this can be changed by editing FUN_NAME and recompiling. Make sure the hooked function can run under 100ms, so that it won't be overwritten while it executes. This means calls like sleep or wait are bad candidates for the initial shellcode. The function in question also needs to be more than 0x50 long for the shellcode not to overwrite other functions.

Usage:
linux_injector <pid> <module>
Where pid is target process id & module is a module to inject, will be dlopened in the remote process

⚠️The code expects that the target uses the same libc as available to us. If it does not, then the remote symbols won't be found. This could be fixed by reading the remote libraries and scanning for our symbols in them.

Linux Hacking Tools

Nessus– this tool can be used for Ubuntu hack, scan configuration settings, patches, and networks etc. it can be found at https://www.tenable.com/products/nessus

NMap. This tool can be used to monitor hosts that are running on the server and the services that they are utilizing. It can also be used to scan for ports. It can be found at https://nmap.org/

SARA – SARA is the acronym for Security Auditor’s Research Assistant. As the name implies, this tool can be used to audit networks against threats such as SQL Injection, XSS etc. it can be found at http://www-arc.com/sara/sara.html

The above list is not exhaustive; it gives you an idea of the tools available for Ubuntu hacking and hacking Linux systems.

#Malware_analysis
1. VidarStealer analysis
https://github.com/m4now4r/VidarStealer
2. Monster Libra (TA551/Shathak) pushes IcedID (Bokbot) with Dark VNC/Cobalt Strike
https://isc.sans.edu/diary/Monster+Libra+TA551Shathak+pushes+IcedID+Bokbot+with+Dark+VNC+and+Cobalt+Strike/28934

#Research
"First, Do No Harm: Studying the manipulation of security headers in browser extensions", 2021.

]-> Fast JavaScript parser: https://github.com/acornjs/acorn

#Red_Team_Tactics
1. {JS-ON: Security-OFF}: Abusing JSON-Based SQL to Bypass WAF
https://claroty.com/team82/research/js-on-security-off-abusing-json-based-sql-to-bypass-waf
2. How To Exploit File Inclusion Vulnerabilities
https://infosecwriteups.com/how-to-exploit-file-inclusion-vulnerabilities-a-beginners-introduction-stackzero-a55267b5fafb

#Threat_Research
"Operation MaRS: Masscan Ransomware Threat Analysis Report", 2022.

#exploit
1. CVE-2022-41050:
A vulnerability in the MS Windows' User-Mode Printer Drivers
https://ssd-disclosure.com/win32k-user-mode-printer-drivers-startdoc-uaf

2. CVE-2022-46689:
macOS Dirty Cow bug
https://github.com/zhuowei/MacDirtyCowDemo

#tools
#Offensive_security
1. A simple ptrace-less shared library injector for x64 Linux
https://github.com/namazso/linux_injector
2. EDRs Hooked APIs
https://github.com/vysecurity/EDRs

#Malware_analysis
1. Munin - Online hash checker for Virustotal and other services
https://github.com/Neo23x0/munin
2. Hunting for Attestation Signed Malware
https://www.mandiant.com/resources/blog/hunting-attestation-signed-malware

#tools
#OSINT
OctoSuite - A framework fro gathering OSINT on GitHub users, repositories and organizations
https://github.com/bellingcat/octosuite

#Hardware_Security
"Security Closure of IC Layouts Against Hardware Trojans", 2022.

]-> Repo: https://drive.google.com/drive/u/0/mobile/folders/1A_Cy6w2n31_wuPKVayz50R-1lfXfC4vH?usp=sharing
]-> OMLA attack: https://github.com/DfX-NYUAD/OMLA
]-> MuxLink attack: https://github.com/lilasrahis/MuxLink

#tools
#Offensive_security
1. Venom - library that meant to perform evasive communication using stolen browser socket
https://github.com/Idov31/Venom
2. Pingoor - Linux Backdoor based on ICMP protocol
https://github.com/MrEmpy/Pingoor

#exploit
CVE-2022-42823:
1. Apple Safari JavaScriptCore Inspector Type Confusion
https://ssd-disclosure.com/apple-safari-javascriptcore-inspector-type-confusion

2. CVE-2021-22015:
VMware vCenter vScalation Privilege Escalation
https://packetstormsecurity.com/files/170116/VMware-vCenter-vScalation-Privilege-Escalation.html