Exploit Collector
WebKit WebCore::FrameLoader::PolicyChecker::checkNavigationPolicy Heap Use-After-Free

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WebKit Element::dispatchMouseEvent Heap Use-After-Free

https://4.bp.blogspot.com/-dyIqvjR3K84/WWlvfXt5NkI/AAAAAAAAIQA/Fvmwfk3J4TgcxqdY3USv0_rN_ZW9VtW1ACLcBGAs/s1600/h85.png
WebKit suffers from a heap use-after-free vulnerability in Element::dispatchMouseEvent.

MD5 | 00ae9f727423a384d7b2d0f6cc4fee8d

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
JavaScriptCore Crash Proof Of Concept

https://1.bp.blogspot.com/-HlvbbOwsdTc/WWlvV_wSsQI/AAAAAAAAIOA/psrlTyexNtUDdre2JEY7YvqsGP1V8LJKQCLcBGAs/s1600/h47.png
JavaScriptCore suffers from a crash condition due to an uninitialized register in slow_path_profile_catch. Proof of concept that affects Safari is included.

MD5 | e71c83e4865ffd73fb78888a127c18ef

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Altus Sistemas de Automacao Products CSRF / Command Injection / Hardcoded Credentials

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
CVE-2021-36798 Cobalt Strike < 4.3 dos

https://github.com/M-Kings/CVE-2021-36798

"Versions 4.2 and 4.3 of Cobalt Strike’s server contain multiple Denial of Service vulnerabilities (CVE-2021-36798).

The vulnerabilities can render existing Beacons unable to communicate with their C2 server, prevent new beacons from being installed, and have the potential to interfere with ongoing operations."

HackThePlanet

submitted by /u/losthuman42
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
My Methodology In Recon And Find Bugs & My Methodology In Hunting Using Phone

https://cdn-images-1.medium.com/max/1267/1*70HlGcRKNtrd-IMCCiF0KQ.png
#Dears Hunters

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe Write-up: 0day

https://cdn-images-1.medium.com/max/1920/1*Bqs5vVHgtobE4wBg1lPeDg.png
Dificultad: Media

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
This Stinks

https://cdn-images-1.medium.com/max/2600/0*UCyEDcbpXfoJHfD9
But I Can’t Smell It

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Así funciona el último truco para robar tus contraseñas sin ser detectado

https://cdn-images-1.medium.com/max/1037/0*jczAoBI7m75SZmRC
POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

https://preview.redd.it/83424aikodi71.jpg?width=640&crop=smart&auto=webp&s=6ac767d9ffd53b521a8ee663e287da0e8f6a9b12 submitted by /u/jadaczkauc
[link] [comments]

REW-sploit - Emulate And Dissect MSF And *Other* Attacks
http://www.kitploit.com/2021/08/rew-sploit-emulate-and-dissect-msf-and.html

___________________________
@hacking_Attack
@Hacking_Video

REW-sploit
The tool has been presented at Black-Hat Arsenal USA 2021 https://www.blackhat.com/us-21/arsenal/schedule/index.html#rew-sploit-dissecting-metasploit-attacks-24086 Slides of presentation are available at https://github.com/REW-sploit/REW-sploit_docs
Need help in analyzing Windows shellcode or attack coming from Metasploit Framework or Cobalt Strike (or may be also other malicious or obfuscated code)? Do you need to automate tasks with simple scripting? Do you want help to decrypt MSF generated traffic by extracting keys from payloads? REW-sploit is here to help Blue Teams! Here a quick demo:

___________________________
@hacking_Attack
@Hacking_Video