Hacking on Medium
CVE 2022–33082 Practical Exploitation

https://cdn-images-1.medium.com/max/640/1*CX4iXfhXJtv3C-yiiApriA.jpeg
I have developed the first known practical exploit for CVE 2022–33082, “an issue in the AST parser (ast/compile.go) of Open Policy Agent…

Continue reading on Medium »

Hacking on Medium
Cracking PicoCTF: ‘Hurry Up! Wait!’ With Ghidra — StackZero

https://cdn-images-1.medium.com/max/1200/1*tDMQ8fdVndQw7spo2yKdKw.jpeg
Discover how to solve the PicoCTF Hurry up! Wait! challenge using Ghidra’s scripting capabilities. Step-by-step walkthrough.

Continue reading on InfoSec Write-ups »

Hacking on Medium
HackTheBox Writeup — PC

https://cdn-images-1.medium.com/max/1400/1*D0waX_O2gjWUVQ6UI8asIQ.png
This box was presented at the Hack The Box in May 2023 by sau123.

Continue reading on Medium »

Hacking on Medium
Mr. Robot — Hidden Easter Egg Found — Presented by AI eve — Eels — LAST STOP: THIS TOWN!

https://cdn-images-1.medium.com/max/2560/0*3o5oJ3gk-nvp6Ief.jpg
LAST STOP! THIS TOWN! EASTER EGG FOUND! The Hidden AI Metaphors in Mr. Robot: An Insightful Look from an AI POV.

Continue reading on Medium »

Hacking on Medium
Unique Exploit: CVE-2022–22733 Privilege Escalation & RCE

https://cdn-images-1.medium.com/max/1817/0*OKxbnbj6SESzO5-3.png
Introduction

Continue reading on Medium »

Hacking on Medium
CVE-2022–41544 — Unauthenticated RCE in Get-Simple

https://cdn-images-1.medium.com/max/1080/0*wZpiorGrnoWCgih6.png
Introduction

Continue reading on Medium »

Hacking on Medium
Protecting Wi-Fi: Defending Against Evil Twin Attacks and Password Theft

https://cdn-images-1.medium.com/max/2600/0*rkLNfjMqmMKHfZaB
With the increasing reliance on Wi-Fi networks for internet connectivity, securing our wireless connections has become more critical than…

Continue reading on Medium »

CVE 2022–33082 Practical Exploitation
https://cyberqueenmeg.medium.com/cve-2022-33082-practical-exploitation-c78b0cec69aa?source=rss------bug_bounty-5

I have developed the first known practical exploit for CVE 2022–33082, “an issue in the AST parser (ast/compile.go) of Open Policy Agent…Continue reading on Medium » (https://cyberqueenmeg.medium.com/cve-2022-33082-practical-exploitation-c78b0cec69aa?source=rss------bug_bounty-5)

From Enumeration to Domain Admin in One Repository
https://www.reddit.com/r/redteamsec/comments/14gl55p/from_enumeration_to_domain_admin_in_one_repository/


[link] (https://github.com/RoseSecurity/Red-Teaming-TTPs) [comments] (https://www.reddit.com/r/redteamsec/comments/14gl55p/from_enumeration_to_domain_admin_in_one_repository/)

Dark Reading: Attacks/Breaches
Job Seekers, Look Out for Job Scams

Scammers are setting out lures for people looking for work. If a position sounds too good to be true, it probably is.

Dark Reading: Attacks/Breaches
LockBit Developing Ransomware for Apple M1 Chips, Embedded Systems

Under construction: The world's leading ransomware gang is workshopping ransomware for less obvious systems beyond Windows environments. Experts weigh in on how worried we should be.

Dark Reading: Attacks/Breaches
Growing SaaS Usage Means Larger Attack Surface

Software-as-a-service has its benefits, but abandoned SaaS integrations and idle data sharing introduce risk to the enterprise.

Dark Reading: Attacks/Breaches
CISA, FBI Offer $10M for Cl0p Ransomware Gang Information

The announcement was posted on Twitter via the Rewards for Justice Twitter account, alongside encrypted messaging system options for anyone to get into contact should they have viable information.

Dark Reading: Attacks/Breaches
Airgap Networks Acquires NetSpyGlass

Acquisition of NetSpyGlass extends Airgap Zero Trust Firewall™ innovation leadership with advanced network and asset intelligence for business-critical networks.