Information Security
408 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
An interesting way to use https://lolbas-project.github.io/lolbas/Libraries/Advpack/

a dropped INF, loading your local dll without it being shown in the rundll32.exe command line

then deleting the INF.

Demo:

https://pastebin.com/3De4bNQR
Use "X-Forwarded-Host" for host header poisoning, sometimes it's work if only host header is not working.
#BugBounty
Find mailboxes that have auto-reply enabled:

Get-Mailbox |
Get-MailboxAutoReplyConfiguration |
Where-Object {$_.AutoReplyState -EQ 'Enabled' -or $_.AutoreplyState -EQ 'Scheduled'} |
Select-Object -Property Identity,AutoreplyState,StartTime,EndTime