棱角社区 – Telegram

#bountytip Hacking IIS
https://drive.google.com/file/d/1O0IARjqP4Pwa-ae1nAP8Nr9qb0ai2XPu/view

43 views05:08

#漏洞最近的一些漏洞预警/PoC

43 views07:53

#漏洞 exchange_proxylogon_rce.rb
https://github.com/rapid7/metasploit-framework/blob/e5c76bfe13acddc4220d7735fdc3434d9c64736e/modules/exploits/windows/http/exchange_proxylogon_rce.rb

GitHub

metasploit-framework/modules/exploits/windows/http/exchange_proxylogon_rce.rb at e5c76bfe13acddc4220d7735fdc3434d9c64736e · rapid7/metasploit…

Metasploit Framework. Contribute to rapid7/metasploit-framework development by creating an account on GitHub.

45 views08:59

棱角社区

#bountytip Canvas CPU漏洞武器化工具大揭秘

https://security.tencent.com/index.php/blog/msg/184

Tencent

Canvas CPU漏洞武器化工具大揭秘 - 博客 - 腾讯安全应急响应中心

腾讯安全应急响应中心,Tencent Security Response Center,TSRC

44 views10:37

棱角社区

#bountytip Hacking the Cloud 攻击性/战术/技术百科全书
访问地址：https://hackingthe.cloud/

hackingthe.cloud

Hacking The Cloud

The encyclopedia for offensive security in the cloud

45 views10:39

棱角社区

#漏洞 Gitlab 敏感信息泄露漏洞 (CVE-2021-22188)
https://gitlab.com/gitlab-org/gitlab/-/issues/227040

GitLab

Confidential issue titles are exposed (#227040) · Issues · GitLab.org / GitLab

HackerOne report #916340 by aemirercin on 2020-07-06, assigned to @cmaxim: ...

47 views01:12

棱角社区

#bountytip Windows & Active Directory Exploitation Cheat Sheet and Command Reference
https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/

Cas van Cooten

Windows & Active Directory Exploitation Cheat Sheet and Command Reference

Last update: November 3rd, 2021
Updated November 3rd, 2021: Included several fixes and actualized some techniques. Changes made to the Defender evasion, RBCD, Domain Enumeration, Rubeus, and Mimikatz sections. Fixed some whoopsies as well 🙃.
Updated June…

49 views01:14

棱角社区

#漏洞更新了近期的一些漏洞：
https://github.com/EdgeSecurityTeam/Vulnerability

44 views02:29

棱角社区

#漏洞 VoIPmonitor advisories: buffer overflow leading to RCE + XSS vulnerabilities
https://www.rtcsec.com/post/2021/03/voipmonitor-advisories-buffer-overflow-leading-to-rce-xss-vulnerabilities/

40 views08:33

棱角社区

#漏洞蓝队防守必须排查的57个安全漏洞与解决方案
https://mp.weixin.qq.com/s/eMh0TjhhXk0dov-KP7edrg

Weixin Official Accounts Platform

蓝队防守必须排查的57个安全漏洞与解决方案

近日安全漏洞频发，小编在此收集了近期大家会比较关注的漏洞，做个总结，供大家查漏补缺，若有缺失，欢迎留言补充。

40 views11:41

棱角社区

#工具 Lending a hand to the community – Covenant v0.7 Updates
https://research.nccgroup.com/2021/03/16/lending-a-hand-to-the-community-covenant-v0-7-updates/

NCC Group Research Blog

Lending a hand to the community – Covenant v0.7 Updates

Introduction Covenant [1] is an open source .NET command and control framework to support Red Team operations, similar in many ways to the well-known Cobalt Strike threat emulation software. Covena…

39 views12:33

棱角社区

#工具 Powerful Telegram Members Scraping and Adding Toolkit

https://github.com/Cryptonian007/Genisys

39 views12:36

棱角社区

#工具 HAFNIUM-Microsoft-Exchange-0day
https://github.com/SCS-Labs/HAFNIUM-Microsoft-Exchange-0day

GitHub

GitHub - SCS-Labs/HAFNIUM-Microsoft-Exchange-0day: CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065

CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065 - SCS-Labs/HAFNIUM-Microsoft-Exchange-0day

39 views12:37

棱角社区

#漏洞智慧校园管理系统前台任意文件上传漏洞
https://mp.weixin.qq.com/s?__biz=Mzg3NDU2MTg0Ng==&mid=2247484103&idx=1&sn=b23f257cb763f972e8803f3fd7712632

Weixin Official Accounts Platform

智慧校园管理系统前台任意文件上传漏洞

40 views12:38

棱角社区

#漏洞 MagpieRSS 0.72代码执行/服务器端请求伪造
https://packetstormsecurity.com/files/161772

Packetstormsecurity

MagpieRSS 0.72 Code Execution / Server-Side Request Forgery ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

44 views12:40

棱角社区

#漏洞 rConfig 3.9.6 本地文件包含
https://packetstormsecurity.com/files/161775

Packetstormsecurity

rConfig 3.9.6 Local File Inclusion ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

45 views12:41

棱角社区

#漏洞 ExpressionEngine 6.0.2 PHP代码注入CVE-2021-27230
https://packetstormsecurity.com/files/161805

Packetstormsecurity

ExpressionEngine 6.0.2 PHP Code Injection ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

46 views12:41

棱角社区

#漏洞 BIG-IP/ BIG-IQ iControl REST 未经身份验证的RCE (CVE-2021-22986)
https://attackerkb.com/topics/J6pWeg5saG/k03009991-icontrol-rest-unauthenticated-remote-command-execution-vulnerability-cve-2021-22986

AttackerKB

K03009991: iControl REST unauthenticated remote command execution vulnerability CVE-2021-22986 | AttackerKB

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd BIG-IQ 7.1.0.x …

44 views12:03

棱角社区

#bountytip 隐写术-往推特PNG图片内写入3MB数据的方法
https://github.com/DavidBuchanan314/tweetable-polyglot-png

GitHub

GitHub - DavidBuchanan314/tweetable-polyglot-png: Pack up to 3MB of data into a tweetable PNG polyglot file.

Pack up to 3MB of data into a tweetable PNG polyglot file. - DavidBuchanan314/tweetable-polyglot-png

42 views12:03

棱角社区

#bountytip Chrome sandbox escape
https://securitylab.github.com/research/one_day_short_of_a_fullchain_sbx

49 views12:06

棱角社区

#工具

49 views12:20

About

Blog

Apps

Platform