TL;DR: Two command injection vulnerabilities exist in the Windows Explorer “Open PowerShell window here” context menu due to improper quoting and command injection through user-controlled folder paths. By creating folders with crafted names (e.g., folder; calc), an attacker can trigger arbitrary PowerShell command execution when a user uses Shift + Right-Click → Open PowerShell window here. One variant affects modern Windows 11 builds, while another existed since Windows 10 1703 (2017).
You can find the scenarios and the slides of the Insomni’hack 2026 talk in https://github.com/p0dalirius/Shift-Happens-Uncovering-to-builtin-command-injection-in-Windows-context-menus
👍2
Malware, Cats and Cryptography
2026-cocomelonc-bsideslux.pdf
Let me keep it short… use uncommon stuff for static
(here is my conference ┐( ∵ )┌)
chain things smart to get past behavior detection.
SentinelInstaller_windows_64bit_v25_1_4_434.msi
57.9 MB
Token:
eyJ1cmwiOiAiaHR0cHM6Ly9ldWNlMS0xMDkuc2VudGluZWxvbmUubmV0IiwgInNpdGVfa2V5IjogImNkZWIxMGEwYmM4ZGUwMTU3ZjliZGRmNjdkMDJmOTE2NzE0NjMwNzEyNGIxNTlhYzcwZGRmYWI2OGZiYzEzNGEifQ==
#EDR
eyJ1cmwiOiAiaHR0cHM6Ly9ldWNlMS0xMDkuc2VudGluZWxvbmUubmV0IiwgInNpdGVfa2V5IjogImNkZWIxMGEwYmM4ZGUwMTU3ZjliZGRmNjdkMDJmOTE2NzE0NjMwNzEyNGIxNTlhYzcwZGRmYWI2OGZiYzEzNGEifQ==
#EDR
1👾5🔥3
Forwarded from Life-Hack - Хакер
OPSEC-провалы
#opsec #полезное #redteam
Подборка случаев, от неприятных ошибок до громких провалов, заканчивавшихся утечками данных, деанонимизацией и раскрытием целых групп. Внутри статьи, видео и материалы судов. Полезно для изучения, чтобы не наступить на те же грабли и понять, где искать зацепки в своих расследованиях.
Ссылка на GitHub
LH | News | OSINT | AI
#opsec #полезное #redteam
Подборка случаев, от неприятных ошибок до громких провалов, заканчивавшихся утечками данных, деанонимизацией и раскрытием целых групп. Внутри статьи, видео и материалы судов. Полезно для изучения, чтобы не наступить на те же грабли и понять, где искать зацепки в своих расследованиях.
Ссылка на GitHub
LH | News | OSINT | AI
👍3
Adversarial Tradecraft:
Interactive slide deck covering operational security principles for authorized red team operations and penetration testing engagements.
Live site: hackinglz.github.io/tradecraft-training Repo: github.com/HackingLZ/tradecraft-training
Interactive slide deck covering operational security principles for authorized red team operations and penetration testing engagements.
Live site: hackinglz.github.io/tradecraft-training Repo: github.com/HackingLZ/tradecraft-training
👾5
Deeeeeeeep ETW Internals: Architecture, Hooking, Tampering, and Detection
#ETW #internals
Kernullist published his Obsidian research notes.
#ETW #internals
X (formerly Twitter)
kernullist (@kernullist) on X
Security and anti-cheat researcher focused on Windows internals.
Advancing reliable detection and stronger system integrity.
https://t.co/1hoZxnzccW
Advancing reliable detection and stronger system integrity.
https://t.co/1hoZxnzccW
👾4🔥3
Bring Your Own RWX Region DLL (BYORWXDLL)
There are a lot of places in OneDrive and .NET stuff, also browsers but they have some protection...
👾6🔥5
Forwarded from Order of Six Angles
Парочка интересных моделей попалось:
The fast, uncensored llama.cpp build of the strongest SuperGemma text line
Для багхантинга веб
The fast, uncensored llama.cpp build of the strongest SuperGemma text line
Для багхантинга веб
🔥6
Forwarded from Order of Six Angles
YouTube
Introduction to VM-Based Loaders
A practical introduction to VM-based loader architecture for offensive security practitioners. This talk covers the core concepts behind bytecode-interpreted loaders: why they matter in the current EDR landscape, how they work under the hood, and what they…
2👾4🔥2
Soheil Hashemi's Certified Azure Red Team Expert (CARTE) Review
A look at his journey to earning the CARTE certification.
https://www.soheilsec.com/certified-azure-red-team-expert-carte-review/
A look at his journey to earning the CARTE certification.
https://www.soheilsec.com/certified-azure-red-team-expert-carte-review/
🔥12👍3
Greedeks/GTweak: Portable Tool for an Ideal Windows Setup 😁
What it does:
What it does:
- Activating Windows using HWID and KMS methods;
- Disabling Windows Defender, SmartScreen, Antimalware, VBS, and UAC;
- Disabling/pausing Windows updates and removing temporary update files;
- Disabling unused and unnecessary system services;
- Disabling keyloggers and telemetry for Windows, NVIDIA, and Intel;
- Disabling services and events related to the collection of user data;
- Disabling data collection tasks in the Windows Task Scheduler;
- Disabling unnecessary network protocols: Teredo, ISATAP, and IPv6;
- Disabling built-in Windows diagnostic tools and disk defragmentation;
- Disabling personalized ads and system banners in Windows, including SCOOBE;
- Disabling system notifications, recommendations, and tips in Windows;
- Blocking Microsoft's shadow domains that collect data via hosts and firewall;
- Uninstalling OneDrive and Microsoft Edge along with clearing all associated data and WebView2;
- Removing standard pre-installed UWP apps in Windows 10/11;
- Removing and disabling AI assistants: Cortana, Copilot, and Recall;
- Customizing the interface: changing themes, window settings, taskbar layout, and icons;
- Configuring keyboard and mouse settings: disabling key filtering, sticky keys, and pointer acceleration;
- Adjusting Windows settings and applying the ultimate performance power plan;
- Adjusting power settings for Realtek High Definition Audio drivers to fix sound delay;
- Viewing the hardware configuration and monitoring system components;
- Compressing and decompressing files and directories using NTFS to save space;
- Clearing RAM, temporary files, icon caches, and securely deleting the Windows.old folder;
- Executing custom scripts (.ps1, .cmd, .bat, .reg) with TrustedInstaller privileges.
😁3👍2