PoC 2019-2215 exploit for S8/S8 active with DAC + SELinux + Knox/RKP bypass - chompie1337/s8_2019_2215_poc

APT 与 HW

This post is Part III in a series about my experiences attacking FreeIPA. In Part I of this series, we reviewed some of the background and…

A curated list of awesome reversing resources. Contribute to tylerha97/awesome-reversing development by creating an account on GitHub.

#DOCX #XXE #LFI #RCE #pwn #BOF #ROP #ret2libc

A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids) - GitHub - whitel1st/docem: A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xx...

Hey,

I have recently passed JavaScript for Pentesters exam from Pentester Academy

Found a service running as SYSTEM from the public folder. This by default grants permissions to everyone. Makes it trivial to use for privesc and persistence. May want to check, will show MS FW rules also. reg query HKLM\SYSTEM\CurrentControlSet\services…

Greetings,

Change monitoring app that checks the content of web pages in different periods. - al-sultani/url-tracker

Reflected Cross-Site Scripting happens when you provide a malicious javascript code to some input parsing functionality and due to lack of…

Metasploit’s Development Diaries series sheds light on how Rapid7’s offensive research team analyzes vulnerabilities as potential candidates for inclusion in Metasploit Framework.

During many Red Team Assessment, we use multiple agents to connect to our target network infrastructure. These agents connect to different…

Apache Kylin is an open source, distributed Analytical Data Warehouse for Big Data written in Java. It was originally developed by eBay and is used by global enterprises such as Cisco, Baidu and Xiaomi to analyze extremely large datasets. After a SQL injection…