Instagram SSL pinning bypass: Frida okay = Module.getBaseAddress("FBSharedFramework").add(0x0a8b1c); patchsize=4; Memory.patchCode(okay,patchsize, code => {con st cw = new Arm64Writer(code, { pc: ayy });cw.putBytes([0x60,0x0D,0x00,0x54])}) *find the correct…

How can we run arbitrary code without allocating/overwriting executable memory? We "borrow" (abuse) instructions from ntdll.dll! x86matthew.com/view_post?id=w…

CVE-2022-0435: Linux Kernel Remote Stack Overflow @sam4k1 disclosed remotely and locally reachable stack overflow in Transparent Inter-Process Communication (TIPC). openwall.com/lists/oss-secu… [1/3]

CVE-2021-40443: oob write of NULL bytes and 1 QWORD (0xffffffff00000000) => LPE in clfs.sys

Mimikatz in JS Dropper. One Liner Should be detected. ymmv. gist.github.com/secdev-01/3edc…

CVE-2021-41773 POC 127.0.0.1/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd

CVE-2021-40444 simple demonstration PoC Exploit: github.com/lockedbyte/CVE…

Found RCE Apache Druid(CVE-2021-25646) Nuclei Templates goes here @pdnuclei 🔥 Poc: gist.github.com/pikpikcu/d208f…

Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE) - ly4k/SpoolFool

SpoolFool: Windows Print Spooler Privilege Escalation (CVE-2022-21999) PoC research.ifcr.dk/spoolfool-wind…

Introduction I played Hayyim CTF 2022 with keymoon, st98, and theoremoon. We solved all pwn tasks there and stood the 3rd place. *1 There was a pwn challenge to…

added PrintProcessor Persistence/LPE for @0xthirteen's SharpStay project: github.com/tothi/SharpStay have stolen the original idea from here: stmxcsr.com/persistence/pr…

root@PandorasBox:~#

A curated list of awesome resources related to executable packing - packing-box/awesome-executable-packing

HijackFileHandle - Hijack a file in a remote process without code injection : x86matthew.com/view_post?id=h… credits @x86matthew

### Summary
Log4j 2.15.0 was released to address the widely reported JNDI Remote Code Execution (RCE) (CVE-2021-44228) vulnerability in Log4j. Shortly thereafter, 2.16.0 was released to address a ...

Providing security research and red team techniques