Pentester

BlackHat Europe 2022:
Shoggoth - Asmjit Based Polymorphic Shellcode Encryptor
https://github.com/frkngksl/Shoggoth

GitHub - frkngksl/Shoggoth: Shoggoth: Asmjit Based Polymorphic Encryptor

Shoggoth: Asmjit Based Polymorphic Encryptor. Contribute to frkngksl/Shoggoth development by creating an account on GitHub.

644 views10:22

Pentester

StealthHook - A method for hooking a function without modifying memory protection
https://www.x86matthew.com/view_post?id=stealth_hook

606 views05:42

Pentester

Frida script to bypass common methods of sslpining Android
https://gist.github.com/incogbyte/1e0e2f38b5602e72b1380f21ba04b15e

Gist

Frida script to bypass common methods of sslpining Android

Frida script to bypass common methods of sslpining Android - mixunpin.js

❤1

643 views05:42

Pentester

Dirty-Vanity
A POC for the new injection technique, abusing windows fork API to evade EDRs.
https://github.com/deepinstinct/Dirty-Vanity

GitHub

GitHub - deepinstinct/Dirty-Vanity: A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www…

A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vanity-a-new-approach-to-code-injection--edr-bypass...

577 views16:28

Pentester

Routing_security.pdf

3.3 MB

"Routing Security: BGP Incidents, Mitigation Techniques and Policy Actions", 2022.

597 viewsedited 05:50

Pentester

Folina, Shadow Credentials, and WSUS exploitation
https://0xdf.gitlab.io/2022/12/10/htb-outdated.html

0xdf hacks stuff

HTB: Outdated

Outdated has three steps that are all really interesting. First, I’ll exploit Folina by sending a link to an email address collected via recon over SMB. Then I’ll exploit shadow credentials to move laterally to the next user. Finally, I’ll exploit the Windows…

589 views05:51

Pentester

Coercer
A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods
https://github.com/p0dalirius/Coercer

GitHub

GitHub - p0dalirius/Coercer: A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through…

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods. - p0dalirius/Coercer

538 views09:56

Pentester

OWASP Secure Code Review Guide
https://github.com/OWASP/www-project-code-review-guide

GitHub

GitHub - OWASP/www-project-code-review-guide: OWASP Code Review Guide Web Repository

OWASP Code Review Guide Web Repository. Contribute to OWASP/www-project-code-review-guide development by creating an account on GitHub.

573 views09:57

Pentester

A Custom Python Backdoor for VMWare ESXi Servers
https://blogs.juniper.net/en-us/threat-research/a-custom-python-backdoor-for-vmware-esxi-servers

Juniper Networks

A Custom Python Backdoor for VMWare ESXi Servers

Juniper Threat Labs analyzes a backdoor installed on a compromised VMware ESXi server that can execute arbitrary commands and launch reverse shells.

623 views10:01

Pentester

The Most Popular & Fastest Growing Open Source Security Projects on GitHub
https://opensourcesecurityindex.io

opensourcesecurityindex.io

Open Source Security Index

605 views11:34

Pentester

apk.sh is a Bash script that makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK

https://github.com/ax/apk.sh

GitHub

GitHub - ax/apk.sh: Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding…

Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK. - ax/apk.sh

658 views13:34

Pentester

BEE·bot - OSINT automation for hackers.
https://github.com/blacklanternsecurity/bbot

GitHub

GitHub - blacklanternsecurity/bbot: The recursive internet scanner for hackers. 🧡

The recursive internet scanner for hackers. 🧡. Contribute to blacklanternsecurity/bbot development by creating an account on GitHub.

👍1

641 views13:37

Pentester

Shennina - Automating Host Exploitation with AI
https://github.com/mazen160/shennina

GitHub

GitHub - mazen160/shennina: Automating Host Exploitation with AI

Automating Host Exploitation with AI. Contribute to mazen160/shennina development by creating an account on GitHub.

623 views04:23

Pentester

#Acunetix 15.1 #docker

https://hub.docker.com/r/hypnguyen1209/acunetix

621 views04:26

Pentester

Incident Response Methodologies 2022
https://github.com/certsocietegenerale/IRM

// EN/ES/FR/RU Versions

GitHub

GitHub - certsocietegenerale/IRM: Incident Response Methodologies 2022

Incident Response Methodologies 2022. Contribute to certsocietegenerale/IRM development by creating an account on GitHub.

620 views10:05

Pentester

Linux Kernel: Exploiting a Netfilter Use-after-Free in kmalloc-cg
https://blog.exodusintel.com/2022/12/19/linux-kernel-exploiting-a-netfilter-use-after-free-in-kmalloc-cg

Exodus Intelligence

Linux Kernel: Exploiting a Netfilter Use-after-Free in kmalloc-cg - Exodus Intelligence

By Sergi Martinez Overview It’s been a while since our last technical blogpost, so here’s one right on time for the Christmas holidays. We describe a method to exploit a use-after-free in the Linux kernel when objects are allocated in a specific slab cache…

623 views10:07

Pentester

Web Attack Cheat Sheet
https://github.com/riramar/Web-Attack-Cheat-Sheet

GitHub

GitHub - riramar/Web-Attack-Cheat-Sheet: Web Attack Cheat Sheet

Web Attack Cheat Sheet. Contribute to riramar/Web-Attack-Cheat-Sheet development by creating an account on GitHub.

👍1

644 views06:50

Pentester

XLLing in Excel - Evolution of malicious XLLs
https://blog.talosintelligence.com/xlling-in-excel-malicious-add-ins

Cisco Talos Blog

Threat Spotlight: XLLing in Excel - threat actors using malicious add-ins

As more and more users adopt new versions of Microsoft Office, it is likely that threat actors will turn away from VBA-based malicious documents to other formats such as XLLs or rely on exploiting newly discovered vulnerabilities to launch malicious code.

667 views07:28

Pentester

CVE and PoC SearchBot - 0.5.0

@pocfather_bot

Bot helps to keep up to date with new CVEs and search new POC's

Added
▪️ New sources of information about CVE vendor/products: nvd.nist.gov and cve.org;
▪️ Feedback answer option.

Changed
▪️ App's architecture;
▪️ APIv2 from nvd.nist.gov is now used;
▪️ Changed message-broker software;
▪️ Default level now is set to ALL;
▪️ PoC search based on CVE description and vendor/product;
▪️ The manual query PoCs now uses the logical AND.

Fixed
▪️ Vendor/products duplication issue;
▪️ Settings menu errors;
▪️ Number of minor bugs.

🔥3

691 viewsedited 13:48

Pentester

Evading Detection: A Beginner's Guide to Obfuscation - 2022

https://www.youtube.com/watch?v=wvKwk1wcXvM

YouTube

Evading Detection: A Beginner's Guide to Obfuscation - 2022

Have you wanted to learn some more advanced Windows evasion techniques? Here is your chance to learn from the experts. This 2-hour long webinar will cover the basics of Windows Defenses such as Event and Script Block Logging, Anti-Malware Scan Interface (AMSI)…

712 views10:51

Pentester