Microsoft SharePoint Server Elevation of Privilege Vulnerability - Chocapikk/CVE-2023-29357

A flexible tool for redirecting a given program's TCP traffic to SOCKS5 or HTTP proxy. - hmgle/graftcp

Exploit for CVE-2023-29360 targeting MSKSSRV.SYS driver - Nero22k/cve-2023-29360

Contribute to 1N73LL1G3NC3x/Nightmangle development by creating an account on GitHub.

Contribute to hackvens/CoercedPotato development by creating an account on GitHub.

CVE-2023-22515: Confluence Broken Access Control Exploit - Chocapikk/CVE-2023-22515

A repository of telemetry domains and URLs used by mobile location tracking, user profiling, targeted marketing and aggressive ads libraries. - craiu/mobiletrackers

In this post I describe a somewhat unique Android kernel exploit, which utilizes the TrustZone in order to compromise the kernel.

Disengaging Loader Lock to do anything directly from DLLMain...

Microsoft addressed our LocalPotato vulnerability in the SMB scenario with CVE-2023-21746 during the January 2023 Patch Tuesday. However, the HTTP scenario remains unpatched, as per Microsoft&#8217…

What is NTLM? What common attacks exist against it? NTLM is an extremely deprecated authentication protocol introduced by Microsoft in 1993. It is a challenge-response protocol: the server keeps a secret called an “NTLM hash” derived from the user’s password…

Contribute to nathan31337/Splunk-RCE-poc development by creating an account on GitHub.

Proof-of-concept (PoC) exploit code has been published for a Microsoft Exchange Server vulnerability tracked as CVE-2023-36745

VSS Hardware Hacking Wiki and Blog Entries

(S6:E57) Secret Handshake A Mutual TLS Based C2 Communication Channel - John Conwell - CypherCon 6.0 - Wisconsin

Secret Handshake A Mutual TLS Based C2 Communication Channel

One of the goals of malware command & control (C2) communication is to blend into…

In this series of posts, I will try to cover all the common knowledge you would need to create your PE bin2bin obfuscator. This year I saw a rise of interest in the topics of software obfuscation and deobfuscation, yet I didn’t see any new open-source projects…

Manual identification, decryption and fixing of encrypted strings using Ghidra and x32dbg.

0x00 前言