Almost full list of all desktop web #browsers

https://github.com/nerdyslacker/desktop-web-browsers

Monitor changes in Active Directory with replication metadata

https://github.com/DrunkF0x/ADSpider

Collection of #BloodHound queries for #Azure (100+ New Azure Queries for Bloodhound):

https://github.com/emiliensocchi/azurehound-queries

#GPT4o Captcha Bypass
This project is a CLI tool for testing various types of captchas including puzzle, text, complicated text, and reCAPTCHA using Python and Selenium. The tool also uses OpenAI GPT-4 to help solve the captchas.

https://github.com/aydinnyunus/gpt4-captcha-bypass

Blocks #EDR Telemetry

Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination IP addresses are parsed based on the server name in TLS Client Hello packet and the provided blocked server name (or blocked string) list in the file.

https://github.com/TierZeroSecurity/edr_blocker

Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to #bypass User-Land #EDR hooks in #Windows.

ThX #1N73LL1G3NC3

https://github.com/WKL-Sec/LayeredSyscall

Deadly Android Rat..

#Android #malware (.apk) can be spread through a fake PDF document by manipulating the file extension in the #WhatsApp application.

https://github.com/0x6rss/WhatsApp-extension-manipulation-PoC

CVE-2024-38077: Windows Remote Desktop Licensing Service RCE

https://github.com/CloudCrowSec001/CVE-2024-38077-POC

Запатчено 9 июля

#exploit #ad #rce #pentest #redteam

#WLAN_Security
"Untangling the Knot: Breaking Access Control in Home Wireless Mesh Networks", 2024.
]-> https://github.com/seclab-ucr/CCS24Mesh

MeTube

MeTube is a web interface for yt-dlp, a fork of youtube-dl, that allows users to download videos from YouTube and many other sites.

It supports playlists and can be run using Docker or docker-compose.

Notably, MeTube includes special configurations for iOS compatibility and extensions for Chrome and Firefox browsers, making it easy to integrate and download videos directly from the browser.

https://github.com/alexta69/metube

How to decrypt Chrome password with Python?

https://ohyicong.medium.com/how-to-hack-chrome-password-with-python-1bedc167be3d

https://github.com/ohyicong/decrypt-chrome-passwords

An Android NFC app for reading, writing, analyzing, etc. MIFARE Classic RFID tags.

https://github.com/ikarus23/MifareClassicTool

"MaLDAPtive: Diving Deep Into LDAP Obfuscation, Deobfuscation & Detection", 2024.
]-> https://github.com/MaLDAPtive/Invoke-Maldaptive

Shwmae (shuh-my) is a Windows Hello abuse tool that was released during DEF CON 32 as part of the Abusing Windows Hello Without a Severed Hand talk. The purpose of the tool is to abuse Windows Hello from a privileged user context.

https://github.com/CCob/Shwmae

👻 Ghost in the PPL: BYOVDLL

This blog post explores bypassing LSA Protection in Userland through the "Bring Your Own Vulnerable DLL" (BYOVDLL) technique. It also delves into the successful exploitation of vulnerabilities in the CNG Key Isolation service and the methods employed to load vulnerable DLLs within protected processes.

🔗 Source:
https://itm4n.github.io/ghost-in-the-ppl-part-1/

#lsa #lsass #ppl #dll #maldev

🖼️ Manipulating Shim and Office for Code Injection

Office Injector - Invokes an RPC method in OfficeClickToRun service that will inject a DLL into a suspended process running as NT AUTHORITY\SYSTEM launched by the task scheduler service, thus achieving privilege escalation from administrator to SYSTEM.

Shim Injector - Writes an undocumented shim data structure into the memory of another process that causes apphelp.dll to apply the “Inject Dll” fix on the process without registering a new SDB file on the system, or even writing such file to disk.

DefCon Presentation

🔗 Source:
https://github.com/deepinstinct/ShimMe

#windows #office #rpc #inject #lpe

WiFi Exploitation Framework

Поддерживаемые атаки:

  -  Deauthentication attack
  -  WIDS Confusion attack
  -  Authentication attack
  -  Beacon Flood attack
  -  TKIP attack (Michael Shutdown Exploitation)
  -  Pixie Dust attack
  -  Null Pin attack
  -  PIN Bruteforce attack
  -  ARP Replay attack
  -  HIRTE attack
  -  Caffe Latte attack
  -  Fake Authentication attack
  -  WPA/WPA2 handshake capture attack
  -  PMKID attack
  -  EvilTwin attack

🥔 https://github.com/D3Ext/WEF