Zer0day Lab

ELITEWOLF is on the hunt! NSA released a repository of signatures and analytics to secure Operational Technology https://github.com/nsacyber/ELITEWOLF #security #nsacyber

Visual Studio 1-click RCE: A New Exploitation Technique for Visual Studio Projects https://github.com/cjm00n/EvilSln #initial #fishing #redteam #pentest #git

BOFRYPTOR: ENCRYPTING YOUR BEACON DURING BOF EXECUTION TO AVOID MEMORY SCANNERS https://www.securify.nl/blog/bofryptor-encrypting-your-beacon-during-bof-execution-to-avoid-memory-scanners/ POC: https://github.com/securifybv/BOFRyptor

MSIFortune - Local Privilege Escalation with MSI Installers The repair function often triggers CustomActions, which can lead to several potential issues: — Visible conhost.exe via a cmd.exe or other console binaries — Visible PowerShell — Directly actions from the installer with SYSTEM privileges — Executing binaries from user writable paths — DLL sideloading / search path abusing — Missing PowerShell parameters, mostly -NoProfile — Execution of other tools in an unsafe manner Details: https://badoption.eu/blog/2023/10/03/MSIFortune.html #windows #msi #lpe

Local Privilege Escalation in the glibc's ld.so (CVE-2023-4911) https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt POC: https://github.com/leesh3288/CVE-2023-4911 #expdev #linux #lpe #Alexs3y