D-Link Routers - Directory Traversal. CVE-2018-10822 . webapps exploit for Hardware platform

D-Link Routers - Command Injection. CVE-2018-10823 . webapps exploit for Hardware platform

Recently I was interested in exploring the PE headers and writing simple programs to manipulate different headers. There are thousands of applications and code to be found on this topic. I started …

TL;DR An Office XML (.xml) document can call a remote XSL stylesheet over SMB.  If this occurs against an attacker controlled server, the net-NTLM authentication hash (challenge/response) of t…

Report by Belgian prosecutors believed to support allegations made by Edward Snowden

TL;DR @FoxIT made a rad tool, and I integrated it into Empire with one additional feature (pending pull request approval) This post started when I viewed a tweet by @FoxIT where they were showcasing their awesome work on creating a phishing Powershell script.…

Hey all, In the previous post we discussed using Responder with Snarf, this post will be doing the same but through a pivot.  To pivot in we’ll be using Simpletun and a layer 2 pivoting clien…

Process injection is a widespread defense evasion technique employed often within malware and fileless adversary tradecraft, and entails running custom code within the address space of another process...

Recently i had to perform some comparative tests on a couple of whitelisting solutions. One of the crucial step of the test was the proper functioning of memory monitoring feature, useful in case o…

In order to inject shellcode into a remote process, we’re going to have to interact with the Windows API, and it’s actually going to be fairly simple to do.  To start off, you need to check that yo…

InjectProc - Process Injection Techniques [This project is not maintained anymore] - secrary/InjectProc

Python toolkit for injecting DLL files into running processes on Windows - infodox/python-dll-injection

🔥 Learn How To Manually Map a DLL Like a Pro & Bypass Anticheats
👨‍💻 Buy Our Courses: https://guidedhacking.com/register/
💰 Donate on Patreon: https://patreon.com/guidedhacking
❤️ Follow us on Social Media: https://linktr.ee/guidedhacking

🔗 Article Link:…

PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls. - ustayready/CasperStager

Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap. - RhinoSecurityLabs/SleuthQL

Windows RID Hijacking persistence technique. Contribute to r4wd3r/RID-Hijacking development by creating an account on GitHub.