Windows CLFS Driver Privilege Escalation

This vulnerability targets the Common Log File System (CLFS) and allows attackers to escalate privileges and potentially fully compromise an organization’s Windows systems. In April 2023, Microsoft released a patch for this vulnerability and the CNA CVE-2023-28252 was assigned.

Affects version:
— Windows 11 21H2 (clfs.sys version 10.0.22000.1574);
— Windows 11 22H2;
— Windows 10 21H2;
— Windows 10 22H2;
— Windows Server 2022.

Research: https://www.coresecurity.com/core-labs/articles/analysis-cve-2023-28252-clfs-vulnerability

Exploit: https://github.com/duck-sec/CVE-2023-28252-Compiled-exe

How to detect android malware using Random Forest Classifier and explain it use linearsvc

https://github.com/liansecurityOS/android-malware-detection

How to protect Evilginx using Cloudflare and HTML Obfuscation
https://www.jackphilipbutton.com/post/how-to-protect-evilginx-using-cloudflare-and-html-obfuscation

ThievingFox - Remotely retrieving credentials from password managers and Windows utilities
https://blog.slowerzs.net/posts/thievingfox/

https://github.com/Slowerzs/ThievingFox/

Disable Windows Defender (+ UAC Bypass, + Upgrade to SYSTEM)

https://github.com/EvilGreys/Disable-Windows-Defender-

Skrapa is a zero dependency and customizable Python library for scanning Windows and Linux process memory.

https://research.nccgroup.com/2024/01/25/memory-scanning-for-the-masses/

https://github.com/fox-it/skrapa

Send phishing messages and attachments to Microsoft Teams users

https://github.com/Octoberfest7/TeamsPhisher

A Deep Dive Into Exploiting Windows Thread Pools

https://urien.gitbook.io/diago-lima/a-deep-dive-into-exploiting-windows-thread-pools

Bypassing EDRs With EDR-Preloading
https://malwaretech.com/2024/02/bypassing-edrs-with-edr-preload.html

Active Directory Enumeration for Red Teams
https://www.mdsec.co.uk/2024/02/active-directory-enumeration-for-red-teams/

Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).
https://github.com/wh0amitz/SharpADWS

Automation for Juniper CVE:2023-36845
https://github.com/ak1t4/CVE-2023-36845

KernelGPT: Enhanced Kernel Fuzzing via Large Language Models

https://arxiv.org/pdf/2401.00563.pdf

CVE-2024-21413: Microsoft Outlook Leak Hash

https://github.com/duy-31/CVE-2024-21413

This Proof-Of-Concept demonstrates the exploitation of CVE-2023-22098 against VirtualBox 7.0.10 r158379

https://github.com/google/security-research/tree/master/pocs/oracle/virtualbox/cve-2023-22098

Pivoting from Microsoft Cloud to On-Premise Machines
https://whiteknightlabs.com/2024/02/21/pivoting-from-microsoft-cloud-to-on-premise-machines/

GitHub - xhzeem/toxicache: Go scanner to find web cache poisoning vulnerabilities in a list of URLs

https://github.com/xhzeem/toxicache

Windows Kernel Exploitation Tutorial Part 1: Setting up the Environment

https://rootkits.xyz/blog/2017/06/kernel-setting-up/

Kali Linux 2024.1 Release (Micro Mirror) | Kali Linux Blog

https://www.kali.org/blog/kali-linux-2024-1-release

Apache Solr Backup/Restore APIs RCE Poc (CVE-2023-50386)

https://github.com/vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC

Nice blog about #Recon Automation using tools like #Subfinder, #Chaos, #Nuclei, #Httpx, Notify, and Anew to find bugs and vulnerabilities.

https://dhiyaneshgeek.github.io/bug/bounty/2020/02/06/recon-with-me/