CVE-2024-4577:
Make PHP-CGI Argument Injection
https://devco.re/blog/2024/06/06/security-alert-cve-2024-4577-php-cgi-argument-injection-vulnerability
]-> https://github.com/watchtowrlabs/CVE-2024-4577

CVE-2024-5171:
libaom Video Codec Library Vulnerability
https://issues.chromium.org/issues/332382766

Network Pentesting Mindmap, v.1.0.

☢️ https://github.com/casterbyte/NetworkNightmare/tree/main

CVE-2024-26229: Windows LPE

PATCHADO: 9 de abril de 2024

https://github.com/RalfHacker/CVE-2024-26229-exploit

P.S. Corrigida ligeiramente a exploração original

Assembly for Hackers

"Assembly Unleashed: A Hacker's Handbook" is a definitive resource tailored specifically for hackers and security researchers seeking to master the art of assembly programming language. Authored by seasoned practitioners in the field, this book offers a comprehensive journey into the depths of assembly, unraveling its complexities and exposing its potential for exploitation and defense.

Source:
https://redteamrecipe.com/assembly-for-hackers

CVE-2024-28995: High-Severity Directory Traversal Vulnerability affecting SolarWinds Serv-U.

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.

POC: https://github.com/rapid7/metasploit-framework/pull/19255

Query:
Hunter: protocol.banner="Serv-U FTP"
FOFA: app="SolarWinds-Serv-U-FTP"
SHODAN: product:"Serv-U ftpd"

The art of Fuzzing: Introduction

https://bushido-sec.com/index.php/2023/06/19/the-art-of-fuzzing/

Black Hat Purple Teaming

Download : https://teraboxapp.com/s/12HJlVI2zVCaW4gi-J2YADw

@hackingbra

INE | eCPPT Penetration Testing Professional (NEW - 2024)

Download : https://1024terabox.com/s/1cVvLsmUf-Jb81Rawna24LQ

More info :https://security.ine.com/certifications/ecppt-certification/

pcap-did-what: Analyze pcaps with Zeek and a Grafana Dashboard https://github.com/hackertarget/pcap-did-what

duck.ai

Uma ferramenta de comunicação com chatbots feita pela DuckDuckGo. Gratuito, não requer cadastro (posiciona-se como anônimo e não coleta esses usuários) e muito rápido:

Turbo GPT-3.5
Claude 4 Haiku
Liama ​​​​3 70B
Mixtral 8x78

Fascinating C code: TCP sockets & HTTP file downloads using only ntdll exports (NtCreateFile & NtDeviceIoControlFile syscalls). Bypasses Winsock for low-level Windows networking.


https://www.x86matthew.com/view_post?id=ntsockets

😈 RedTeam Story #1: XSS, LFI, Logrotate.

• MITRE ATT&CK Techniques and Tactics;
• Attack Context;
• Methodology;
• Evasion Mechanism;
• Goal;

• Exploitation of Website;
• Privilege Escalation and Lateral Movement;
• Post-Exploitation;
• Automation and Scripting;
• Persistence;
- MITRE ATT&CK Techniques and Tactics Sorted by Tactics;
- Attack Context;
• Scripting;
- Creating and Testing a Bash Reverse Shell;
- Verifying the Reverse Shell;
- Establishing a Reverse Shell Connection;
- Analyzing Root Crontab and Persistence Mechanisms;
— Reviewing Crontab;
— Root Reset Script;
— Log Rotation Configuration;
— Automated Root Login Script;
— Database Cleanup Script;
• Privilege Escalation;