#Caixa #RCE #Exploit

Remote Command Execution on Jboss - Banking hacking - Caixa

Basicamente a vulnerabilidade é um RCE que se encontra no sistema GRF Recursal da Caixa, onde é possivel executar códigos maliciosos de forma remota dentro do servidor. GRF ou Guia de Recolhimento do FGTS é a guia de recolhimento com código de barras para recolhimento regular do FGTS, sendo gerada logo após a transmissão do arquivo SEFIP.

http://lab.insightsecurity.com.br/remote-command-execution-on-jboss-banking-hacking-caixa/

🌐 @PR1V8

#samba #pr1v8 #old #exploit

7-Year-Old Samba Flaw Lets Hackers Access Thousands of Linux PCs Remotely

> http://thehackernews.com/2017/05/samba-rce-exploit.html

Exploit: https://www.exploit-db.com/exploits/42060/


🌐 @PR1V8

#Exploit #Windows #RDP #EsteemAudit

WannaCry novamente? Exploit Windows RDP 'EsteemAudit' ainda sem patch

Com mais de 24.000 PCs ainda vulneráveis:

EsteemAudit desenvolvimento-NSA é outra perigosa ferramenta de hacking do Windows vazado pelo Shadow Brokers que explora o serviço RDP (porta 3389) em máquinas Microsoft Windows Server 2003 / Windows XP.

» http://thehackernews.com/2017/05/esteemaudit-windows-hacking.html

🌐 @PR1V8

#exploit #hacking
Executando powershell no rundll32

http://www.hacking.land/2017/06/powershdll-ejecuta-powershell-con.html?utm_source=dlvr.it&utm_medium=facebook&m=1

@PR1V8

#nsa #pr1v8 #shadowbrokers #exploit #windows

🇺🇸 Microsoft Releases Patches for 3 Remaining NSA Windows Exploits

> http://thehackernews.com/2017/06/important-windows-updates.html


🌐 @PR1V8

#Exploit #Dev #From #Scratch

🇺🇸 Escrevendo Exploits para Sistemas Win32 do Zero Introdução

» https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2016/june/writing-exploits-for-win32-systems-from-scratch/

🌐 @PR1V8

#exploit #linux #bsd #vul
🇬🇧 Vulnerabilidade de escalação de privilégios em sistemas gnu /Linux e bsds

http://thehackernews.com/2017/06/linux-root-privilege-escalation.html?m=1
🌐 @PR1V8

#struts #pr1v8 #exploit #db #kopimi

Apache Struts 2.5 - Remote Code Execution

exploit: https://www.exploit-db.com/exploits/42627/
noticia: https://latesthackingnews.com/2017/09/05/critical-remote-code-execution-vulnerability-in-apache/


🌐 @PR1V8

#deserialization #java #pr1v8 #exploit #entendendo #kopimi

Entendendo & praticando java deserialization exploits
// Understanding & practicing java deserialization exploits

https://diablohorn.com/2017/09/09/understanding-practicing-java-deserialization-exploits/amp/


🌐 @PR1V8

#exploit #pr1v8 #dev #pdf #ingles #kopimi

Hacking - The Art of Exploitation
Tamanho: 4mb
Idioma: Inglês

🌐 @PR1V8

#meltdown #pr1v8 #medium #kopimi #exploit #pr1v8

🇺🇸 Time-travelling exploits with Meltdown

https://medium.com/@pwnallthethings/time-travelling-exploits-with-meltdown-1189548f1e1d

🌐 @PR1V8

#reverseng #pr1v8 #vault7 #analysis #exploit #kopimi

Reverse engineering of Mikrotik exploit from Vault 7 CIA Leaks

https://github.com/BigNerd95/Chimay-Red


🌐 @PR1V8

#exploit #pr1v8 #write #youtube #kopimi

Become a Hacker: How to Create Your First Exploit

https://youtube.com/watch?v=U2mpUQTWRhI


🌐 @PR1V8

#ssrf #php #pr1v8 #exploit #kopimi

PHP SSRF Techniques
How to bypass filter_var(), preg_match() and parse_url()

https://medium.com/secjuice/php-ssrf-techniques-9d422cb28d51

🌐 @PR1V8

#flash #pr1v8 #flaw #exploit #kopimi #swf

Find vulnerabilities in Flash SWF

http://10degres.net/testing-flash-swf/


🌐 @PR1V8

#cisco #exploit #pr1v8 #learn #development #kopimi

1-day exploit development for Cisco IOS

https://media.ccc.de/v/34c3-8936-1-day_exploit_development_for_cisco_ios


🌐 @PR1V8

#openssh #exploit #enum #kopimi #ssh #cve

a new exploit for CVE-2018-15473 OpenSSH Username Enumeration

https://github.com/Rhynorater/CVE-2018-15473-Exploit

🌐 @PR1V8

#exploit #database #search #hacking #infosec #kopimi #tools #toolist

Sploitus | Exploits & Tools Search Engine

https://sploitus.com/

🌐 @PR1V8

#exploit #osint #bruteforce #inteligence #operations #OWASP

OWASP D4N155 - It's an information security audit tool that creates intelligent wordlists based on the content of the target page and Google hacking attack

https://github.com/OWASP/D4N155

#exploitation #heap #exploit #learn #intro #hacking

Heap Exploitation - Into

https://heap-exploitation.dhavalkapil.com/introduction.html