Pentester

CVE-2023-7028: Gitlab Account Takeover via Password Reset

PoC 1: https://github.com/RandomRobbieBF/CVE-2023-7028
PoC 2: https://github.com/Vozec/CVE-2023-7028

* 16.1 prior to 16.1.5
* 16.2 prior to 16.2.8
* 16.3 prior to 16.3.6
* 16.4 prior to 16.4.4
* 16.5 prior to 16.5.6
* 16.6 prior to 16.6.4
* 16.7 prior to 16.7.2

GitHub

GitHub - RandomRobbieBF/CVE-2023-7028: CVE-2023-7028

CVE-2023-7028. Contribute to RandomRobbieBF/CVE-2023-7028 development by creating an account on GitHub.

👍3🔥1

1.14K views07:12

Pentester

tRPC Security Research: Hunting for Vulnerabilities in Modern APIs

https://medium.com/@LogicalHunter/trpc-security-research-hunting-for-vulnerabilities-in-modern-apis-b0d38e06fa71

Medium

tRPC Security Research: Hunting for Vulnerabilities in Modern APIs

In this write-up, I want to discuss my research on tRPC. Initially, we will review the concepts of tRPC before proceeding to analyse the…

🔥1

1.08K views15:26

Pentester

How to retrive all information about Windows Extended Rights via LDAP
https://github.com/YuryStrozhevsky/extendedRights

GitHub

GitHub - YuryStrozhevsky/extendedRights: How to retrive all information about Windows Extended Rights via LDAP

How to retrive all information about Windows Extended Rights via LDAP - YuryStrozhevsky/extendedRights

🔥2

1.16K views08:26

Pentester

Outlook Vulnerability Discovery and New Ways to Leak NTLM Hashes
https://www.varonis.com/blog/outlook-vulnerability-new-ways-to-leak-ntlm-hashes

Varonis

Outlook Vulnerability Discovery and New Ways to Leak NTLM Hashes

Varonis Threat Labs discovered a new Outlook exploit and three new ways to access NTLM v2 hashed passwords.

🔥4

949 views04:33

Pentester

CVE-2024-0517: Google Chrome V8 Out-of-Bounds Write Code Execution

PoC: https://blog.exodusintel.com/2024/01/19/google-chrome-v8-cve-2024-0517-out-of-bounds-write-code-execution/

Exodus Intelligence

Google Chrome V8 CVE-2024-0517 Out-of-Bounds Write Code Execution - Exodus Intelligence

By Javier Jimenez and Vignesh Rao Overview In this blog post we take a look at a vulnerability that we found in Google Chrome’s V8 JavaScript engine a few months ago. This vulnerability was patched in a Chrome update on 16 January 2024 and assigned CVE-2024…

🔥1

861 views17:11

Pentester

Exploiting 0-click Android Bluetooth vulnerability to inject keystrokes without pairing - Mobile Hacker

https://www.mobile-hacker.com/2024/01/23/exploiting-0-click-android-bluetooth-vulnerability-to-inject-keystrokes-without-pairing/

Mobile Hacker

Exploiting 0-click Android Bluetooth vulnerability to inject keystrokes without pairing Mobile Hacker

[update 2024-02-19] This vulnerability can be even used to remotely wipe data of targeted Android smartphone. Using this vulnerability it is possible to guess user lock screen PIN. After five incorrect PINs device is locked out for 30 seconds. This operation…

🔥3

853 views19:02

Pentester

An introduction to reverse engineering .NET AOT applications

https://harfanglab.io/en/insidethelab/reverse-engineering-ida-pro-aot-net/

🔥2

835 views19:10

Pentester

I Tried 100+ Hacking Tools. These Are The Best!

https://www.youtube.com/watch?v=4WqymtvuWZQ

YouTube

I Tried 100+ Hacking Tools. These Are The Best!

📚 Purchase my Bug Bounty Course here 👉🏼 bugbounty.nahamsec.training

💵 Support the Channel:
You can support the channel by becoming a member and get access exclusive content, behind the scenes, live hacking session and more!
☕️ Buy Me Coffee:
https://ww…

🔥3❤1

921 views19:12

Pentester

CVE-2024-0204: Authentication Bypass in GoAnywhere MFT
Script to create a new admin user in GoAnywhere MFT.

https://github.com/horizon3ai/CVE-2024-0204

https://www.horizon3.ai/cve-2024-0204-fortra-goanywhere-mft-authentication-bypass-deep-

GitHub

GitHub - horizon3ai/CVE-2024-0204: Authentication Bypass in GoAnywhere MFT

Authentication Bypass in GoAnywhere MFT. Contribute to horizon3ai/CVE-2024-0204 development by creating an account on GitHub.

🔥2

966 views18:50

Pentester

Linux Kernel GSM Multiplexing Race Condition Local Privilege Escalation Vulnerability (CVE-2023-6546)

https://github.com/Nassim-Asrir/ZDI-24-020/

GitHub

GitHub - zerozenxlabs/ZDI-24-020

Contribute to zerozenxlabs/ZDI-24-020 development by creating an account on GitHub.

🔥2

941 views07:29

Pentester

Android-based PAX POS vulnerabilities (Part 1) - STM Cyber Blog

https://blog.stmcyber.com/pax-pos-cves-2023/

STM Cyber Blog

Android-based PAX POS vulnerabilities (Part 1) - STM Cyber Blog

In this article, we present details of 6 vulnerabilities on the Android POS devices made by the worldwide known company PAX Technology.

825 views10:07

Pentester

CVE-2024-23897: Jenkins RCE

https://github.com/binganao/CVE-2024-23897

GitHub

GitHub - binganao/CVE-2024-23897

Contribute to binganao/CVE-2024-23897 development by creating an account on GitHub.

👍2

867 views10:07

Pentester

Windows CLFS Driver Privilege Escalation

This vulnerability targets the Common Log File System (CLFS) and allows attackers to escalate privileges and potentially fully compromise an organization’s Windows systems. In April 2023, Microsoft released a patch for this vulnerability and the CNA CVE-2023-28252 was assigned.

Affects version:
— Windows 11 21H2 (clfs.sys version 10.0.22000.1574);
— Windows 11 22H2;
— Windows 10 21H2;
— Windows 10 22H2;
— Windows Server 2022.

Research: https://www.coresecurity.com/core-labs/articles/analysis-cve-2023-28252-clfs-vulnerability

Exploit: https://github.com/duck-sec/CVE-2023-28252-Compiled-exe

Coresecurity

Analysis of CVE-2023-28252 CLFS Vulnerability | Core Security

The CVE-2023-28252 vulnerability targets the Common Log File System (CLFS) and allows attackers to escalate privileges and potentially fully compromise an organization’s Windows systems. This blog will provide a detailed analysis and proof of concept for…

👍1

1.14K views20:23

Pentester

How to detect android malware using Random Forest Classifier and explain it use linearsvc

https://github.com/liansecurityOS/android-malware-detection

GitHub

GitHub - liansecurityOS/android-malware-detection: This is a opensource repo about how to detect android malware using Random Forest…

This is a opensource repo about how to detect android malware using Random Forest Classifier and explain it use linearsvc. - liansecurityOS/android-malware-detection

🔥3

1.06K views07:55

Pentester

How to protect Evilginx using Cloudflare and HTML Obfuscation
https://www.jackphilipbutton.com/post/how-to-protect-evilginx-using-cloudflare-and-html-obfuscation

Jack Button

How to protect Evilginx using Cloudflare and HTML Obfuscation

Using a combination of Cloudflare and HTML Obfuscation, it is possible to protect your Evilginx server from being flagged as deceptive and so increase your chances of success on Red Team and Social Engineering engagements. Anyone who has tried to run a Social…

🔥2

1.25K views15:50