lateral movement techniques that can be used during red team exercises - Mr-Un1k0d3r/PoisonHandler

Sonar's blogs showcase our solutions and products: SonarQube Cloud, SonarQube Server, and SonarQube for IDE - trusted by 400k+ organizations globally.

I spent some time learning about blockdlls and parent process spoofing from @_RastaMouse and @_xpn_ . Using a recent sample from SubTee, I modified it to spoof the parent process and inject x64 shellcode from a dll on UNC into hidden iexplore.exe. https:…

The most common type of XSS (Cross-Site Scripting) is source-based. It means that injected JavaScript code comes from server side to execute in client side.
But there’s another main type, the DOM-based one, where injected malicious input does not come from…

Remote Desktop Gateway (RDG), previously known as Terminal Services Gateway, is a Windows Server component that provides routing for Remote Desktop (RDP). Rather then users connecting directly to an RDP Server, users instead connect and authenticate to the…

The HTML5 Herald

Ease your pain of searching in searchsploit >> nmap -A -Pn -sV -p443,111,5038,878,22,3306,143,993,25 10.10.10.7 -oX result.xml >> searchsploit -x --nmap result.xml result.xml is the key

A list of checks/test cases you can run on API endpoints to discover security weaknesses. Talk presented at null Bangalore January 2020.

Application Security for the AI Era | Veracode

To discover the best tool to run powershell script and malicious command line without using powershell.exe

A browser extension for OSINT search. Contribute to ninoseki/mitaka development by creating an account on GitHub.

Toxic combination of WebDav, donut, Covenant and TikiSpawn

Hide yo mailing lists, Hide yo Slack

Android Unpacking Automation using Corellium Devices - corellium/corellium-android-unpacking

Netgear TLS Private Key Disclosure through Device Firmware Images - netgear-private-key-disclosure.md

In Windows environments every file extensions are associated with a default program. This allows Windows to identify which program needs to be used in order to open a specific file. The association…

A Collection of Chrome Sandbox Escape POCs/Exploits for learning - allpaca/chrome-sbx-db

NTLMv1 Multitool. Contribute to evilmog/ntlmv1-multi development by creating an account on GitHub.