An introduction to reverse engineering .NET AOT applications

https://harfanglab.io/en/insidethelab/reverse-engineering-ida-pro-aot-net/

I Tried 100+ Hacking Tools. These Are The Best!

https://www.youtube.com/watch?v=4WqymtvuWZQ

CVE-2024-0204: Authentication Bypass in GoAnywhere MFT
Script to create a new admin user in GoAnywhere MFT.

https://github.com/horizon3ai/CVE-2024-0204

https://www.horizon3.ai/cve-2024-0204-fortra-goanywhere-mft-authentication-bypass-deep-

Linux Kernel GSM Multiplexing Race Condition Local Privilege Escalation Vulnerability (CVE-2023-6546)

https://github.com/Nassim-Asrir/ZDI-24-020/

Android-based PAX POS vulnerabilities (Part 1) - STM Cyber Blog

https://blog.stmcyber.com/pax-pos-cves-2023/

CVE-2024-23897: Jenkins RCE

https://github.com/binganao/CVE-2024-23897

Windows CLFS Driver Privilege Escalation

This vulnerability targets the Common Log File System (CLFS) and allows attackers to escalate privileges and potentially fully compromise an organization’s Windows systems. In April 2023, Microsoft released a patch for this vulnerability and the CNA CVE-2023-28252 was assigned.

Affects version:
— Windows 11 21H2 (clfs.sys version 10.0.22000.1574);
— Windows 11 22H2;
— Windows 10 21H2;
— Windows 10 22H2;
— Windows Server 2022.

Research: https://www.coresecurity.com/core-labs/articles/analysis-cve-2023-28252-clfs-vulnerability

Exploit: https://github.com/duck-sec/CVE-2023-28252-Compiled-exe

How to detect android malware using Random Forest Classifier and explain it use linearsvc

https://github.com/liansecurityOS/android-malware-detection

How to protect Evilginx using Cloudflare and HTML Obfuscation
https://www.jackphilipbutton.com/post/how-to-protect-evilginx-using-cloudflare-and-html-obfuscation

ThievingFox - Remotely retrieving credentials from password managers and Windows utilities
https://blog.slowerzs.net/posts/thievingfox/

https://github.com/Slowerzs/ThievingFox/

Disable Windows Defender (+ UAC Bypass, + Upgrade to SYSTEM)

https://github.com/EvilGreys/Disable-Windows-Defender-

Skrapa is a zero dependency and customizable Python library for scanning Windows and Linux process memory.

https://research.nccgroup.com/2024/01/25/memory-scanning-for-the-masses/

https://github.com/fox-it/skrapa

Send phishing messages and attachments to Microsoft Teams users

https://github.com/Octoberfest7/TeamsPhisher

A Deep Dive Into Exploiting Windows Thread Pools

https://urien.gitbook.io/diago-lima/a-deep-dive-into-exploiting-windows-thread-pools

Bypassing EDRs With EDR-Preloading
https://malwaretech.com/2024/02/bypassing-edrs-with-edr-preload.html

Active Directory Enumeration for Red Teams
https://www.mdsec.co.uk/2024/02/active-directory-enumeration-for-red-teams/

Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).
https://github.com/wh0amitz/SharpADWS

Automation for Juniper CVE:2023-36845
https://github.com/ak1t4/CVE-2023-36845

KernelGPT: Enhanced Kernel Fuzzing via Large Language Models

https://arxiv.org/pdf/2401.00563.pdf

CVE-2024-21413: Microsoft Outlook Leak Hash

https://github.com/duy-31/CVE-2024-21413

This Proof-Of-Concept demonstrates the exploitation of CVE-2023-22098 against VirtualBox 7.0.10 r158379

https://github.com/google/security-research/tree/master/pocs/oracle/virtualbox/cve-2023-22098