CrackCodes 🇮🇳

CVE-2023-23560 flaw exposes 100 Lexmark printer models to hack

https://securityaffairs.com/141428/hacking/lexmark-cve-2023-23560-rce.html

Security Affairs

CVE-2023-23560 flaw exposes 100 Lexmark printer models to hack

Lexmark released a firmware update to fix a remote code execution flaw, tracked as CVE-2023-23560, that impacts more than 100 printer models.

607 viewsBiała Bł, 16:59

CrackCodes 🇮🇳

OSINT tool to investigate GitHub profiles
https://github.com/mxrch/gitfive
Receive your WhatsApp messages on Telegram
https://github.com/subinps/TG-WhatsApp
Detecting Windows x86 API hooking and modification
https://github.com/ytk2128/api-monitor32
Sharing directory and files from cli to ios and android devices without need of an extra clien app
https://github.com/parvardegr/sharingl

🏆1

626 viewsBiała Bł, 16:59

CrackCodes 🇮🇳

The shortest payload for a tiny php reverse shell written in 19 bytes using only non-alphanumeric characters. Hex values inside ⛶ indicate raw bytes.
This will help to bypass WAF and execute PHP reverse shell for RCE.

Download: https://system32.ink/news-feed/p/198/

979 views卩ro 爪Cracker, 07:17

CrackCodes 🇮🇳

CVE-2022-26485 exploit(UAF in XSLT parameter processing, bugzilla )

Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. Mozilla have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0.

⚠️Tested against Firefox 78.0 (Windows)

Download: https://system32.ink/news-feed/p/199/

👍3

660 views卩ro 爪Cracker, edited 09:55

CrackCodes 🇮🇳

PoC of CVE-2021-34514(Windows Kernel EoP vuln, ALPC OOB)

Download: https://system32.ink/news-feed/p/201/

902 views卩ro 爪Cracker, 11:43

CrackCodes 🇮🇳

🔥🔥🔥VMware vRealize Log Insight VMSA-2023-0001 Technical Deep Dive
This vulnerability is exploitable in the default configuration for VMware vRealize Log Insight. We have successfully reproduced this exploit and would like to provide the technical details about how this vulnerability works.

💥PoC for VMSA-2023-0001 affecting VMware vRealize Log Insight which includes the following CVEs:
💾 VMware vRealize Log Insight Directory Traversal Vulnerability
(CVE-2022-31706)
💾 VMware vRealize Log Insight broken access control Vulnerability
(CVE-2022-31704)
💾 VMware vRealize Log Insight contains an Information Disclosure Vulnerability
(CVE-2022-31711)

Download:https://system32.ink/news-feed/p/205/

956 views卩ro 爪Cracker, edited 13:12

CrackCodes 🇮🇳

http://fullhunt.io

fullhunt.io

FullHunt | External Attack Surface Management (EASM)

Discover, monitor, and secure your external attack surface. FullHunt unifies internet-scale discovery, continuous validation, and vulnerability intelligence.

455 viewsBiała Bł, 09:40

CrackCodes 🇮🇳

Tracr: Compiled Transformers as a Laboratory for Interpretability

git clone https://github.com/deepmind/tracr
cd tracr6
pip3 install .7

https://github.com/deepmind/tracr
https://arxiv.org/abs/2301.05062v1

GitHub

GitHub - google-deepmind/tracr

Contribute to google-deepmind/tracr development by creating an account on GitHub.

466 viewsBiała Bł, 09:40

CrackCodes 🇮🇳

https://system32.ink/http-header-blind-sql-injection-example/

🤩2👍1

839 views卩ro 爪Cracker, 09:50

CrackCodes 🇮🇳

https://system32.ink/web-stories/tools-to-detect-malicious-ip-address/

👍3

937 views卩ro 爪Cracker, 10:33

CrackCodes 🇮🇳

Forwarded from CYBER TRICKS ZONE 🇮🇳🚩 (𝙋𝙧𝙤𝙩𝙤𝙘𝙤𝙡 𝙉𝙞𝙘𝙠)

👍3

421 views𝙋𝙧𝙤𝙩𝙤𝙘𝙤𝙡 𝙉𝙞𝙘𝙠, 12:33

CrackCodes 🇮🇳

https://hacklido.com/blog/262-proxy-my-love-part-1

By:@hacklathon

HACKLIDO

Proxy My Love: Part 1

A proxy server is a computer or a software system located between a client and an actual server that acts as an intermediary for client requests. It enhanc...

❤4

656 views卩ro 爪Cracker, 04:56

CrackCodes 🇮🇳

https://hacklido.com/blog/271-windows-forensics-the-art-of-investigating-part-1

By: @hacklathon

HACKLIDO

Windows Forensics: The Art Of Investigating Part 1

Hello Everyone, Let us start today’s topic but before that let me introduce you to some terms or concepts that you must know for better understanding of th...

⚡2

428 views卩ro 爪Cracker, 04:57

CrackCodes 🇮🇳

https://anubism3333.blogspot.com/2022/06/how-to-stay-motivated.html
https://anubism3333.blogspot.com/2022/06/at-which-time-you-should-feel-that-you.html
https://anubism3333.blogspot.com/2022/06/the-human-way-of-thinking.html
https://anubism3333.blogspot.com/2022/06/being-alone.html
https://anubism3333.blogspot.com/2022/07/the-quotations-that-reveal-reality.html
https://anubism3333.blogspot.com/2022/07/the-definition-of-love.html

https://hacklido.com/blog/271-windows-forensics-the-art-of-investigating-part-1
https://hacklido.com/d/56-windows-file-system-investigation-part-1introduction
https://hacklido.com/d/51-information-about-windows-registry
https://hacklido.com/d/55-windows-registry-investigation-cheatsheet-part-1
https://lonewarriorco.blogspot.com/2022/10/ram-forensics-using-volatility.html
https://hacklido.com/d/66-yara-language
https://hacklido.com/blog/251-securing-your-linux-server-with-host-based-firewall-protection-using-iptables
https://hacklido.com/blog/252-steps-to-set-up-a-firewall-with-ufw
https://hacklido.com/blog/258-honeypots-the-game-of-traps
https://hacklido.com/blog/262-proxy-my-love-part-1
https://www.codelivly.com/osint/

All my Motivational And Infosec Blogs.

🔥3

519 viewsCyber Crime And OSINT researcher., 05:04

CrackCodes 🇮🇳

📲Enzyme is an jailbreak-free iOS modding framework that allows you to statically patch and hook iOS apps.
This repository contains an example using Enzyme. For modifying this, check out the CMakeLists.txt file, the patcher/main.py file, the patcher/bootstrap.asm file, and the src folder.

Download:- https://system32.ink/news-feed/p/213/

892 views卩ro 爪Cracker, edited 09:23

CrackCodes 🇮🇳

RedTeam-Tools-main.zip

40.1 KB

#RedTeam #hack #tools

Collection of 100+ tools and resources that can be useful for red teaming activities.

https://github.com/A-poc/RedTeam-Tools

👍1

578 views卩ro 爪Cracker, 09:48

CrackCodes 🇮🇳

Exploit for CVE-2022-25765 command injection in pdfkit < 0.8.6

download: https://system32.ink/news-feed/p/209/

🏆3

534 views卩ro 爪Cracker, 10:01

CrackCodes 🇮🇳

https://system32.ink/mssql-injection-advanced-tricks/

955 views卩ro 爪Cracker, 11:45

CrackCodes 🇮🇳

https://hacklido.com/blog/273-windows-forensics-the-art-of-investigating-part-2

HACKLIDO

Windows Forensics: The Art Of Investigating Part 2

Collecting The Volatile Data As in the last blog i had mentioned about different types of data classification and the Methodology of windows forensics now...

⚡2

544 viewsCyber Crime And OSINT researcher., 18:45

CrackCodes 🇮🇳

🔥Brave browser 1 day exploit.
This is a remote crash that triggers in brave browser due to how the rss XML parsing happens by reading an item's title that contains the < (less than) character.

Download: https://system32.ink/news-feed/p/211/

👍1

941 views卩ro 爪Cracker, edited 22:42

CrackCodes 🇮🇳

Forwarded from 卩ro 爪Cracker

🔥Chrome heap buffer overflow in validating command decoder(CVE-2022-4135)
Heap BoF/OOB access in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a SBX via a crafted HTML page.

🛡Patch CL

Exploit strategy:
The vulnerability immediately provides an attacker with an extremely powerful exploitation primitive -- a non-linear BoF with a controlled offset.

Exploit flow:
The exploit abuses the command buffer and GLES2 APIs for memory manipulation. A corrupted memory bucket is used to first leak data from the GPU process and break ASLR, and then, when the ROP chain is ready, hijack the control flow.

reproduce:

<script>
    canvas = document.createElement("canvas");
    document.documentElement.appendChild(canvas);
    context = canvas.getContext("webgl2");
    context.blendColor(0, 0, 0, 0);
</script>

⚠️Part of an exploit chain: CVE-2022-4135 + CVE-2022-3723

498 views卩ro 爪Cracker, 22:49

About

Blog

Apps

Platform