A Azure Exploitation Toolkit for Red Team & Pentesters
https://github.com/SikretaLabs/BlueMap

Empire - PowerShell/Python 3.x post-exploitation/adversary emulation framework
https://github.com/BC-SECURITY/Empire

EvilnoVNC is a Ready to go Phishing Platform.
https://github.com/JoelGMSec/EvilnoVNC

Vulnerabilities in BMC Firmware Affect OT/IoT Device Security
https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1

CVE and PoC SearchBot

@pocfather_bot

Bot helps to keep up to date with new CVEs and search new POC's

Updated 0.3.5 - 2022-11-22

Added
▪️ More flexibility in operating mode:
- ▪️ User can now combine up to 4 operating modes: CVE/Keywords, CVE/Level, PoCs/Keywords, PoCs/Vendor or Products.
- ▪️ Default operating mode is CVE/Level.
- ▪️ Corresponding options can be set in main menu by choosing operating mode.
▪️ Can now set exclusion words for CVE|PoC search.
▪️ By tapping "Delete all CVE" button user is now asked to confirm his intentions.

Changed
▪️ Help information.
▪️ Adjusting user's search request. If user's search request is not matching CVE template then "CVE description" search mode with corresponding PoCs will be initialized. If any PoCs are found user will receive an archive file. In case archive size exceeds 50 Mb it will be spilt into parts.
▪️ Data base structure.
▪️ If user doesn't have any CVE/Keywords/Products he will not get "Show all" suggestion.

Fixed
▪️ Error message will not be shown when user starts bot for the first time.

subzuf is a subdomain brute-force fuzzer coupled with an immensly simple but effective DNS reponse-guided algorithm.
https://github.com/elceef/subzuf

Guide to Reversing and Exploiting iOS binaries

Part 1 - How to Reverse Engineer and Patch an iOS Application for Beginners
https://www.inversecos.com/2022/06/how-to-reverse-engineer-and-patch-ios.html
Part 2 - ARM64 ROP Chains
https://www.inversecos.com/2022/06/guide-to-reversing-and-exploiting-ios.html
Part 3 - Heap Overflows on iOS ARM64: Spraying, UAF
https://www.inversecos.com/2022/07/heap-overflows-on-ios-arm64-heap.html

Coercer
A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods.
https://github.com/p0dalirius/Coercer

CVE-2022-23093:
FreeBSD Ping RCE
https://www.freebsd.org/security/advisories/FreeBSD-SA-22:15.ping.asc

"VLC: Integer overflow in vnc module <= 3.0.18 (CVE-2022-41325): Security advisory".

"SSH Penetration Testing", 2022.

Shells is a script for generating common reverse shells fast and easy.

Debugging Protected Processes
https://itm4n.github.io/debugging-protected-processes
Controlling Windows PP(L)s:
https://github.com/itm4n/PPLcontrol

Anti-Reversing Techniques
Part 1: https://infosecwriteups.com/anti-reversing-techniques-part-1-3200db42f1e3
Part 2: https://infosecwriteups.com/anti-reversing-techniques-part-2-bd5e0d3cd7aa

Kubeshark - API traffic viewer for Kubernetes providing deep visibility into all API traffic/payloads going in, out and across containers and pods inside a Kubernetes cluster
https://github.com/kubeshark/kubeshark

Loading unsigned Windows drivers without reboot
https://v1k1ngfr.github.io/loading-windows-unsigned-driver

Python Based Crypter That Can Bypass Any Kinds Of Antivirus Products
https://github.com/machine1337/pycrypt

BlackHat Europe 2022:
Shoggoth - Asmjit Based Polymorphic Shellcode Encryptor
https://github.com/frkngksl/Shoggoth

StealthHook - A method for hooking a function without modifying memory protection
https://www.x86matthew.com/view_post?id=stealth_hook