Red Team Security
The difference between Powershell only & process specific AMSI bypasses

submitted by /u/S3cur3Th1sSh1t
[link] [comments]

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Red Team Security
Writing a Custom Bootloader

submitted by /u/Kondencuotaspienas
[link] [comments]

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Red Team Security
CertWatcher — Automating Certificate Transparency OSINT with Apps Script

submitted by /u/cyberbutler
[link] [comments]

Red Team Security
Window Privilege Escalation: Automated Script

https://www.hackingarticles.in/window-privilege-escalation-automated-script
@ahmedm0hamed101

submitted by /u/ahmedm0hamed007
[link] [comments]

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Red Team Security
All OWASP API Top 10 for Explained Interactively (In-browser experience).

submitted by /u/ahmedm0hamed007
[link] [comments]

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Red Team Security
ScareCrow - Payload Creation Framework Designed Around EDR Bypass

https://github.com/optiv/ScareCrow

submitted by /u/ahmedm0hamed007
[link] [comments]

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Red Team Security
Elevate Arbitrary WRMSR To Kernel Execution

https://githacks.org/_xeroxz/msrexec

submitted by /u/ahmedm0hamed007
[link] [comments]

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Red Team Security
Attacking MS Exchange Web Interfaces

submitted by /u/ahmedm0hamed007
[link] [comments]

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Red Team Security
Exploring a New Detection Evasion Technique on Linux

https://codemuch.tech/2021/02/25/exploring-linux-evasion/

submitted by /u/ahmedm0hamed007
[link] [comments]

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Red Team Security
Detection and Hunting of Golden SAML Attack

submitted by /u/ahmedm0hamed007
[link] [comments]

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Red Team Security
How to export LAPS password with Powershell

submitted by /u/ahmedm0hamed007
[link] [comments]

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Red Team Security
Powershell+VBScript Post-Exploitation Tool w/ Persistence

https://github.com/jeffjbowie/Weaponry/blob/master/SlimLOLC2.ps1

After learning about concepts of "living off the land" as well as researching various threat feeds, I wanted to make a minimal tool for running commands from a URL, with added persistence.

* Check for "mutex" file in $env:temp
* If mutex doesn't exist, drops VBScript payload to $env:temp
* Clones an existing scheduled task label, appending random characters to end , being mindful of 255 character limitation.
* Upon execution of scheduled task , connects to C2 URL, running desired command in either Powershell or Windows Command Processor.

submitted by /u/jeff-j-bowie
[link] [comments]

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Red Team Security
Dump lsass with Windows OS native tools

submitted by /u/cx-4
[link] [comments]

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Red Team Security
One thousand and one ways to copy your shellcode to memory (VBA Macros)

submitted by /u/NoUseForANick
[link] [comments]

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Red Team Security
IronNetInjector: Turla’s New Malware Loading Tool

submitted by /u/malware_bender
[link] [comments]

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Red Team Security
First example of malicious code that natively targets Apple Silicon (M1)

submitted by /u/malware_bender
[link] [comments]

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Red Team Security
Masslogger campaigns exfiltrates user credentials

submitted by /u/malware_bender
[link] [comments]

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Bug Bounty on Medium
Exposed Unsafe ActiveX Method [CWE-618] — The Hacktivists

https://cdn-images-1.medium.com/max/2600/1*4ZaQXs_vH6lIlM6jvuFR9Q.jpeg
Exposed Unsafe ActiveX Method weakness describes exposure of dangerous ActiveX methods that perform actions outside the browser’s security…

Continue reading on Medium »

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Bug Bounty on Medium
IDOR Vulenebility with empty response still exposing sensitive details of customers!

Hello there👋!
For many days I was thinking of sharing my bug bounty experience with the community and finally writing my first write-up.

Continue reading on Medium »

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Bug Bounty on Medium
NULL Pointer Dereference [CWE-476] — The Hacktivists

https://cdn-images-1.medium.com/max/2600/1*QC2szUXNDa3JsW7LEeQ0YA.jpeg
NULL Pointer Dereference weakness occurs where software dereferences a pointer with a value of NULL instead of a valid address.

Continue reading on Medium »

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Exploiting XML External Entity (XXE) via image file upload

This lab lets users attach avatars to comments and uses the Apache Batik library to process avatar image files.Continue reading on The Startup »
Read more...

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭