棱角社区 – Telegram

棱角社区

#漏洞 VoIPmonitor advisories: buffer overflow leading to RCE + XSS vulnerabilities
https://www.rtcsec.com/post/2021/03/voipmonitor-advisories-buffer-overflow-leading-to-rce-xss-vulnerabilities/

40 views08:33

棱角社区

#漏洞蓝队防守必须排查的57个安全漏洞与解决方案
https://mp.weixin.qq.com/s/eMh0TjhhXk0dov-KP7edrg

Weixin Official Accounts Platform

蓝队防守必须排查的57个安全漏洞与解决方案

近日安全漏洞频发，小编在此收集了近期大家会比较关注的漏洞，做个总结，供大家查漏补缺，若有缺失，欢迎留言补充。

40 views11:41

棱角社区

#工具 Lending a hand to the community – Covenant v0.7 Updates
https://research.nccgroup.com/2021/03/16/lending-a-hand-to-the-community-covenant-v0-7-updates/

NCC Group Research Blog

Lending a hand to the community – Covenant v0.7 Updates

Introduction Covenant [1] is an open source .NET command and control framework to support Red Team operations, similar in many ways to the well-known Cobalt Strike threat emulation software. Covena…

39 views12:33

棱角社区

#工具 Powerful Telegram Members Scraping and Adding Toolkit

https://github.com/Cryptonian007/Genisys

39 views12:36

棱角社区

#工具 HAFNIUM-Microsoft-Exchange-0day
https://github.com/SCS-Labs/HAFNIUM-Microsoft-Exchange-0day

GitHub

GitHub - SCS-Labs/HAFNIUM-Microsoft-Exchange-0day: CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065

CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065 - SCS-Labs/HAFNIUM-Microsoft-Exchange-0day

39 views12:37

棱角社区

#漏洞智慧校园管理系统前台任意文件上传漏洞
https://mp.weixin.qq.com/s?__biz=Mzg3NDU2MTg0Ng==&mid=2247484103&idx=1&sn=b23f257cb763f972e8803f3fd7712632

Weixin Official Accounts Platform

智慧校园管理系统前台任意文件上传漏洞

40 views12:38

棱角社区

#漏洞 MagpieRSS 0.72代码执行/服务器端请求伪造
https://packetstormsecurity.com/files/161772

Packetstormsecurity

MagpieRSS 0.72 Code Execution / Server-Side Request Forgery ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

44 views12:40

棱角社区

#漏洞 rConfig 3.9.6 本地文件包含
https://packetstormsecurity.com/files/161775

Packetstormsecurity

rConfig 3.9.6 Local File Inclusion ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

45 views12:41

棱角社区

#漏洞 ExpressionEngine 6.0.2 PHP代码注入CVE-2021-27230
https://packetstormsecurity.com/files/161805

Packetstormsecurity

ExpressionEngine 6.0.2 PHP Code Injection ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

46 views12:41

棱角社区

#漏洞 BIG-IP/ BIG-IQ iControl REST 未经身份验证的RCE (CVE-2021-22986)
https://attackerkb.com/topics/J6pWeg5saG/k03009991-icontrol-rest-unauthenticated-remote-command-execution-vulnerability-cve-2021-22986

AttackerKB

K03009991: iControl REST unauthenticated remote command execution vulnerability CVE-2021-22986 | AttackerKB

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd BIG-IQ 7.1.0.x …

44 views12:03

棱角社区

#bountytip 隐写术-往推特PNG图片内写入3MB数据的方法
https://github.com/DavidBuchanan314/tweetable-polyglot-png

GitHub

GitHub - DavidBuchanan314/tweetable-polyglot-png: Pack up to 3MB of data into a tweetable PNG polyglot file.

Pack up to 3MB of data into a tweetable PNG polyglot file. - DavidBuchanan314/tweetable-polyglot-png

42 views12:03

棱角社区

#bountytip Chrome sandbox escape
https://securitylab.github.com/research/one_day_short_of_a_fullchain_sbx

49 views12:06

棱角社区

#工具

49 views12:20

棱角社区

#工具 go-dork - 用go写的一个Dork扫描工具
https://github.com/dwisiswant0/go-dork

GitHub

GitHub - dwisiswant0/go-dork: The fastest dork scanner written in Go.

The fastest dork scanner written in Go. Contribute to dwisiswant0/go-dork development by creating an account on GitHub.

49 views13:05

棱角社区

#漏洞 Apache Solr 组件安全概览
https://mp.weixin.qq.com/s/3WuWUGO61gM0dBpwqTfenQ

Weixin Official Accounts Platform

Apache Solr 组件安全概览

48 views14:18

棱角社区

#漏洞 TikTok for Android 1-Click RCE
https://medium.com/@dPhoeniixx/tiktok-for-android-1-click-rce-240266e78105

Medium

TikTok for Android 1-Click RCE

Chaining multiple bugs on TikTok for Android to achieving Remote code execution in the application’s context.

50 views04:01

棱角社区

#漏洞 Solr最新版任意文件读取0day
https://mp.weixin.qq.com/s/HMtAz6_unM1PrjfAzfwCUQ

Weixin Official Accounts Platform

公布某Solr最新版任意文件读取0day

0x00 前言skay之前在审计solr的时候发现了一个任意文件读取的漏洞，不过报给官方后官方拒绝修复，认为

53 views04:01

棱角社区

#漏洞 CVE-2021-27076: A REPLAY-STYLE DESERIALIZATION ATTACK AGAINST SHAREPOINT
https://www.thezdi.com/blog/2021/3/17/cve-2021-27076-a-replay-style-deserialization-attack-against-sharepoint

Zero Day Initiative

Zero Day Initiative — CVE-2021-27076: A Replay-Style Deserialization Attack Against SharePoint

An attacker is frequently in the position of having to find a technique to evade some data integrity measure implemented by a target. One instructive example of a data integrity measure is a message authentication check. Generally, message authentication…

51 views04:16

棱角社区

#漏洞 Fuzzing: FastStone Image Viewer & CVE-2021-26236
https://voidsec.com/fuzzing-faststone-image-viewer-cve-2021-26236/

VoidSec

Fuzzing: FastStone Image Viewer & CVE-2021-26236 - VoidSec

Fuzzing FastStone Image Viewer v.7.5; CVE-2021-26236 Arbitrary Code Execution exploit & root cause analysis.

50 views04:17

棱角社区

#bountytip Hunting in the Sysmon Call Trace
https://www.lares.com/blog/hunting-in-the-sysmon-call-trace/

Lares

Hunting in the Sysmon Call Trace

Intro The Sysmon ProcessAccess event has been used in threat hunting and detection efforts in order to alert on techniques such as process injection and credential access. According to the…

52 views05:40

棱角社区

#漏洞 Ability To Delete User(s) Account Without User Interaction
https://hackerone.com/reports/928255

HackerOne

GitLab disclosed on HackerOne: Ability To Delete User(s) Account...

Research Paper: https://hx01.me/Abusing_Data_Protection_Laws_For_D0xing_and_Account_Takeovers.pdf

54 views07:42

About

Blog

Apps

Platform