Tool to automatically exploit AD privilege escalation paths shown by BloodHound
https://github.com/CravateRouge/autobloody

Default Credentials Cheat Sheet
https://github.com/ihebski/DefaultCreds-cheat-sheet

Root shell exploit for several Xiaomi routers:
4A Gigabit, 4A 100M, 4C, 3Gv2, 4Q, miWifi 3C...
https://github.com/acecilia/OpenWRTInvasion

vMass Bot
vMass Bot automates the exploitation of remote hosts by trying to find environment files (.env) in target hosts and extract tools and info insde, then the bot detects the target host CMS and tries to auto exploit and upload shell payload using the vMass vulnerability set ( 108 exploits in the current version 1.2)
https://github.com/c99tn/vMass

#Conti #sources

CVE-2022-36804:
A critical vulnerability in Atlassian Bitbucket Server/Data Center
https://github.com/CEOrbey/CVE-2022-36804-MASS-RCE

How Malicious Actors Abuse Native Linux Tools in Attacks
https://www.trendmicro.com/en_us/research/22/i/how-malicious-actors-abuse-native-linux-tools-in-their-attacks.html

Joern - Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs
https://github.com/joernio/joern

CVE-2022-37706:
A reliable exploit + write-up to elevate privileges to root (Ubuntu 22.04)
https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit

Analyzing Golang Executables
https://www.pnfsoftware.com/blog/analyzing-golang-executables

Raccoon Stealer
Malware Analysis
https://d01a.github.io/raccoon-stealer/

CVE-2022-37706:
A reliable exploit + write-up to elevate privileges to root (Ubuntu 22.04)
https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit

From Leaking TheHole to Chrome Renderer RCE
https://medium.com/numen-cyber-labs/from-leaking-thehole-to-chrome-renderer-rce-183dcb6f3078

CrackMapExec - A swiss army knife for pentesting networks
https://github.com/Porchetta-Industries/CrackMapExec

Static analysis tool based on clang, which detects source-to-binary information leaks in C/C++ projects
https://github.com/ergrelet/cpplumber

Erbium Stealer Malware
https://www.cyfirma.com/outofband/erbium-stealer-malware-report

Android Hardening Guide
https://infosecwriteups.com/android-hardening-guide-2439a77f7e83

#malware #Sources #xss_is

JuicyPotato

https://github.com/antonioCoco/JuicyPotatoNG

research: https://decoder.cloud/2022/09/21/giving-juicypotato-a-second-chance-juicypotatong/

Sacrificing Suspended Processes
https://www.optiv.com/insights/source-zero/blog/sacrificing-suspended-processes
payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods:
https://github.com/optiv/Freeze

How To Attack Admin Panels Successfully
https://infosecwriteups.com/how-to-attack-admin-panels-successfully-72c90eeb818c