Pentester

Xiaomi URL spoofing w/ SSL vulnerability or, CVE-2019-10875 - Was it intentionally kept in the global versions by Xiaomi? - Andmp | A blog about infosec, bug hunting and more!
https://www.andmp.com/2019/04/xiaomi-url-spoofing-w-ssl-vulnerability.html?m=1

Andmp | A blog about infosec, bug hunting and more!

Xiaomi URL Address Bar spoofing w/ SSL vulnerability or, CVE-2019-10875 - Was it intentionally kept in the global versions by Xiaomi?

Writeup and PoC for Xiaomi URL spoofing w/ SSL vulnerability or, CVE-2019-10875

53 views14:51

Pentester

Wordpress cve 2019 8942 · Issue #11587 · rapid7/metasploit-framework · GitHub
https://github.com/rapid7/metasploit-framework/pull/11587

55 views20:34

Pentester

Bypassing Network Restrictions Through RDP Tunneling « Bypassing Network Restrictions Through RDP Tunneling | FireEye Inc
https://www.fireeye.com/blog/threat-research/2019/01/bypassing-network-restrictions-through-rdp-tunneling.html

Google Cloud Blog

Bypassing Network Restrictions Through RDP Tunneling | Mandiant | Google Cloud Blog

48 views20:36

Pentester

GitHub - sailay1996/eternal-pulsar: Eternalblue-Doublepulsar without Metasploit or python
https://github.com/sailay1996/eternal-pulsar

GitHub

GitHub - sailay1996/eternal-pulsar: Eternalblue-Doublepulsar without Metasploit or python

Eternalblue-Doublepulsar without Metasploit or python - GitHub - sailay1996/eternal-pulsar: Eternalblue-Doublepulsar without Metasploit or python

45 views20:37

Pentester

Mimikatz C# Wrapper
https://t.co/amYFILWWCh

Mimikatz in XSL
https://t.co/TRotg1HPgr

If it can run .NET, or JScript, or VBScript, or ... it can run Mimikatz...

Gist

Updated Katz.cs - Latest Mimikatz, I mean honestly it is 2018...

Updated Katz.cs - Latest Mimikatz, I mean honestly it is 2018... - katz.cs

50 views04:50

Pentester

Lynis : Security auditing tool for Linux, macOS, and UNIX-based systems (Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional ) : https://t.co/JKnJuZXJ2d

Repo : https://t.co/MBl98ddJ4b

Cisofy

Lynis - Security auditing and hardening tool for Linux/Unix

Lynis is an open source security auditing tool. Part of Lynis Enterprise Suite, its main goal is to audit and harden Unix and Linux based systems.

52 views05:30

Pentester

CVE-2019-0211 Apache Root Privilege Escalation

https://t.co/oxVzvX6BX7

GitHub

exploits/CVE-2019-0211-apache at master · cfreal/exploits

Some of my exploits. Contribute to cfreal/exploits development by creating an account on GitHub.

58 views04:22

Pentester

0day Alert: Bypassing CVE-2019-10875 or, Xiaomi's Mint Browser's URL Spoofing patch: Discovered by Renwa - Andmp | A blog about infosec, bug hunting and more!
https://www.andmp.com/2019/04/bypassing-cve-2019-10875-or-xiaomis.html?m=1

Andmp | A blog about infosec, bug hunting and more!

0day Alert: Bypassing CVE-2019-10875 or, Xiaomi's Mint Browser's URL Spoofing patch: Discovered by Renwa

Infosec ramblings. Bug Bounty, vulnerability research and random things.

70 views04:58

Pentester

A Pentester’s Guide – Part 1 (OSINT – Passive Recon and Discovery of Assets) : https://t.co/JrGxbI6Wew

Part 2 : (OSINT – LinkedIn is Not Just for Jobs) : https://t.co/llKKseBYV4

Sequoia

A Pentester's Guide - Part 1 (OSINT - Passive Recon and Discovery of Assets) | Sequoia

Sequoia Cyber Solutions is now known as NaviSec. Technical articles like this have been moved to delta.navisec.io https://delta.navisec.io/osint-for-p...

66 views05:28

Pentester

https://rhinosecuritylabs.com/application-security/cve-2019-0227-expired-domain-rce-apache-axis/

Rhino Security Labs

CVE-2019-0227: Expired Domain to RCE in Apache Axis

CVE-2019-0227, a vulnerability where an insecure HTTP request or an expired hard coded domain can be used to achieve RCE in Apache Axis 1.4

54 views18:52

Pentester

How regular expression and fuzzing change my approach for finding vulnerabilities (Series part 1.)
http://securityviacode.in/view_article/How%20regular%20expression%20and%20fuzzing%20change%20my%20approach%20for%20finding%20vulnerabilities%20(Series%20part%201.)