exploitation notes for CVE-2018-17456 (.gitmodules RCE)

CVE-2018-17456

https://gist.github.com/joernchen/38dd6400199a542bc9660ea563dcf2b6

Abusing the COM Registry Structure: CLSID, LocalServer32, & InprocServer32

https://bohops.com/2018/06/28/abusing-com-registry-structure-clsid-localserver32-inprocserver32/

Abusing the COM Registry Structure (Part 2): Hijacking & Loading Techniques

https://bohops.com/2018/08/18/abusing-the-com-registry-structure-part-2-loading-techniques-for-evasion-and-persistence/

Undetectable C# & C++ Reverse Shells

https://medium.com/@Bank_Security/undetectable-c-c-reverse-shells-fab4c0ec4f15

Useful resources for #iOS #pentesting / pwning http://file.allitebooks.com/20170130/iOS%20Penetration%20Testing.pdf

Portable car hacking box

Invisi-Shell

Hide your powershell script in plain sight! Invisi-Shell bypasses all of Powershell security features (ScriptBlock logging, Module logging, Transcription, AMSI) by hooking .Net assemblies. The hook is performed via CLR Profiler API.

https://github.com/OmerYa/Invisi-Shell

We disclosed two sets of vulnerabilities this week. Live Networks LIVE555 streaming media RTSPServer code execution: http://cs.co/6015D730W

Linksys E Series routers: http://cs.co/6019D730S