http://luxuryguideps.com, Hotel Supplier Luxury Guide - News, Products and Services for the Hospitality Industry!

http://old.humanasia.org, 사단법인 휴먼아시아에 오신것을 환영합니다.

1500 Members Special :-
Direct Access To Private Group
Link Valid Only 24 Hours

Only 50 Members Allowed (Members Full)
Link Expired
https://t.me/+5rgE1-1OG981ZDc1

https://www.youtube.com/watch?v=J2rBq5gc_mk

Channel Owner:- @f3exe

Hello friends, I am going to be offline for 7-8 days because I am going on a spiritual journey (himachal). So my friends, now it is the job of all of you to take care of this channel.

EyeRat: A tool for building remote access trojan

Whenever the user has an instruction to send to RAT, the user's application sends a special command to RAT such as: Tpict (to take a photo from the camera).

📖 Read

#infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #opensource #linux #rat #trojan #tools #kali

@YourJiniNews

Windows Kernel Exploits
miniPack + bonus (HEVD-HackSys Extreme Vulnerable Driver)

​CVE-2022-24500 RCE Exploit

Windows SMB Remote Code Execution Vulnerability

Vulnerability: Windows 7 - Windows 2022
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24500

#cve #smb #exploit #rce

​CVE-2022-26809 RCE Exploit

Weakness in a core Windows component (RPC) earned a CVSS score of 9.8 not without a reason, as the attack does not require authentication and can be executed remotely over a network, and can result in remote code execution (RCE) with the privileges of the RPC service, which depends on the process hosting the RPC runtime.

That critcal bug, with a bit of luck, allows to gain access to unpatched Windows host running SMB. The vulnerability can be exploited both from outside the network in order to breach it as well as between machines in the network.

https://github.com/rkxxz/CVE-2022-26809

Vendor Information:
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26809
https://www.pwndefend.com/2022/04/14/cve-2022-26809/

#cve #poc #exploit

CVE-2022-26717

Safari WebGL XFB Use After Free Vulnerability

https://github.com/theori-io/CVE-2022-26717-Safari-WebGL-Exploit

#cve #exploit

An Interesting IDOR Story 😎 -
https://quip.com/Uks4AzL33oAu

Shared by @Indianshunters

API Unhooking

An article about a new method of avoiding AV/EDR by creating a process in a suspended state and getting a copy of the ntdll from the new process before it is hijacked by AV/EDR.

Research:
https://dosxuz.gitlab.io/post/perunsfart/

PoC:
https://github.com/dosxuz/PerunsFart