棱角社区 – Telegram

棱角社区

83 subscribers

12 photos

444 links

网络安全事件推送.

Download Telegram

About

Blog

Apps

Platform

#漏洞 Apache Solr 组件安全概览
https://mp.weixin.qq.com/s/3WuWUGO61gM0dBpwqTfenQ

Weixin Official Accounts Platform

Apache Solr 组件安全概览

48 views14:18

#漏洞 TikTok for Android 1-Click RCE
https://medium.com/@dPhoeniixx/tiktok-for-android-1-click-rce-240266e78105

TikTok for Android 1-Click RCE

Chaining multiple bugs on TikTok for Android to achieving Remote code execution in the application’s context.

50 views04:01

#漏洞 Solr最新版任意文件读取0day
https://mp.weixin.qq.com/s/HMtAz6_unM1PrjfAzfwCUQ

Weixin Official Accounts Platform

公布某Solr最新版任意文件读取0day

0x00 前言skay之前在审计solr的时候发现了一个任意文件读取的漏洞，不过报给官方后官方拒绝修复，认为

53 views04:01

#漏洞 CVE-2021-27076: A REPLAY-STYLE DESERIALIZATION ATTACK AGAINST SHAREPOINT
https://www.thezdi.com/blog/2021/3/17/cve-2021-27076-a-replay-style-deserialization-attack-against-sharepoint

Zero Day Initiative

Zero Day Initiative — CVE-2021-27076: A Replay-Style Deserialization Attack Against SharePoint

An attacker is frequently in the position of having to find a technique to evade some data integrity measure implemented by a target. One instructive example of a data integrity measure is a message authentication check. Generally, message authentication…

51 views04:16

#漏洞 Fuzzing: FastStone Image Viewer & CVE-2021-26236
https://voidsec.com/fuzzing-faststone-image-viewer-cve-2021-26236/

Fuzzing: FastStone Image Viewer & CVE-2021-26236 - VoidSec

Fuzzing FastStone Image Viewer v.7.5; CVE-2021-26236 Arbitrary Code Execution exploit & root cause analysis.

50 views04:17

#bountytip Hunting in the Sysmon Call Trace
https://www.lares.com/blog/hunting-in-the-sysmon-call-trace/

Hunting in the Sysmon Call Trace

Intro The Sysmon ProcessAccess event has been used in threat hunting and detection efforts in order to alert on techniques such as process injection and credential access. According to the…

52 views05:40

#漏洞 Ability To Delete User(s) Account Without User Interaction
https://hackerone.com/reports/928255

GitLab disclosed on HackerOne: Ability To Delete User(s) Account...

Research Paper: https://hx01.me/Abusing_Data_Protection_Laws_For_D0xing_and_Account_Takeovers.pdf

54 views07:42

#bountytip 在线的文件下载快捷命令生成网站
https://file-downloads.com/

84 views10:34

#漏洞 MyBB Remote Code Execution Chain (CVE-2021-27889, CVE-2021-27890)
https://blog.sonarsource.com/mybb-remote-code-execution-chain

MyBB Remote Code Execution Chain

Today SonarSource is pleased to share a guest contribution to our Code Security blog series about learnings from a chain of serious vulnerabilities in MyBB.

55 views07:00

#漏洞 F5从认证绕过到远程代码执行漏洞分析
https://blog.riskivy.com/f5%e4%bb%8e%e8%ae%a4%e8%af%81%e7%bb%95%e8%bf%87%e5%88%b0%e8%bf%9c%e7%a8%8b%e4%bb%a3%e7%a0%81%e6%89%a7%e8%a1%8c%e6%bc%8f%e6%b4%9e%e5%88%86%e6%9e%90/

F5从认证绕过到远程代码执行漏洞分析 - 斗象能力中心

斗象智能安全，以IT资产为核心的全息安全监控与分析，为企业建立全新模式的安全服务体系

56 views07:10

#漏洞 Browser logic vulnerabilities
https://github.com/Metnew/uxss-db

GitHub - Metnew/uxss-db: 🔪Browser logic vulnerabilities :skull_and_crossbones:

🔪Browser logic vulnerabilities :skull_and_crossbones: - Metnew/uxss-db

57 views07:16

#漏洞 Eclipse Jetty 拒绝服务 (CVE-2020-27223)
https://github.com/motikan2010/CVE-2020-27223

GitHub - motikan2010/CVE-2020-27223: CVE-2020-27223 Vulnerability App & PoC

CVE-2020-27223 Vulnerability App & PoC. Contribute to motikan2010/CVE-2020-27223 development by creating an account on GitHub.

56 views07:36

#bountytip 负载均衡下的 WebShell 连接
https://mp.weixin.qq.com/s/4Bmz_fuu0yrLMK1oBKKtRA

Weixin Official Accounts Platform

负载均衡下的 WebShell 连接

负载均衡的场景大家遇到的不是一两回了，很多人遇到能出外网的可以轻松搞定，遇到那种节点机器不出网的就人傻了，今天咱们拿捏一下。

55 views16:12

#漏洞 CVE-2021-1732 msf:
https://github.com/rapid7/metasploit-framework/pull/14907

Add exploit for CVE-2021-1732 by zeroSteiner · Pull Request #14907 · rapid7/metasploit-framework

This adds an exploit for CVE-2021-1732 which is a vulnerability in win32k. By calling NtUserConsoleControl in a callback function and passing the window that is currently being created, a field can...

59 views16:15

#bountytip 免费的一些逆向工程相关的资料课程
https://github.com/mytechnotalent/Reverse-Engineering-Tutorial

GitHub - mytechnotalent/Reverse-Engineering: A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit…

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures. - mytechnotalent/Reverse-Engineering

55 views08:48

#漏洞 RCE Exploit in BIG-IP.
CVE-2021-22986, CVE-2021-22987

python f5_rce.py -u https://ip_target
python f5_rce.py -f ip_list.txt
python f5_rce.py -c "$commend"
https://github.com/h4x0r-dz/RCE-Exploit-in-BIG-IP

GitHub - h4x0r-dz/RCE-Exploit-in-BIG-IP

Contribute to h4x0r-dz/RCE-Exploit-in-BIG-IP development by creating an account on GitHub.

55 views12:50

#漏洞帆软报表 v8.0 任意文件读取漏洞 CNVD-2018-04757
https://mp.weixin.qq.com/s/ae8A8PGJCtr6uS11dRpzcw

Weixin Official Accounts Platform

帆软报表 v8.0 任意文件读取漏洞 CNVD-2018-04757

54 views13:34

#工具 Lazyrecon是一个子域发现工具，可发现并解析有效的子域并执行SSRF / LFI / SQLi模糊测试。它具有简单的模块化体系结构，并针对与Wayback机器一起使用时的速度进行了优化。

https://github.com/storenth/lazyrecon/

GitHub - storenth/lazyrecon: Wicked sick v2.0 script is intended to automate your reconnaissance process in an organized fashion.

Wicked sick v2.0 script is intended to automate your reconnaissance process in an organized fashion. - storenth/lazyrecon

56 views13:43

一些在线工具：https://forum.ywhack.com/bountytips.php?tools

[~]#棱角 ::Edge.Forum*

52 views02:01

#bountytip 华为系列设备默认密码：https://forum.ywhack.com/bountytips.php?huawei
其它安全设备默认密码：https://forum.ywhack.com/bountytips.php?password

常用的一些字典：https://forum.ywhack.com/wordlists.php

[~]#棱角 ::Edge.Forum*

54 views05:57

#漏洞 MessageSolution 企业邮件归档管理系统信息泄露漏洞 CNVD-2021-10543
https://mp.weixin.qq.com/s/jehAIIYWrpkLtGvGN-LtFA

Weixin Official Accounts Platform

（CNVD-2021-10543）｜MessageSolution 企业邮件归档管理系统 EEA 存在信息泄露漏洞

0x01 漏洞说明MessageSolution企业邮件归档管理系统 EEA是北京易讯思达科技开发有限公司开

52 views06:30