Pentester
Open in Telegram
- Offensive Security (Red Teaming / PenTesting) - BlueTeam (OperationSec, TreatHunting, DFIR) - Reverse Engineering / Malware Analisys - Web Security
Show more2 644
Subscribers
No data24 hours
+77 days
+3030 days
Posts Archive
2 644
A public secret : Research on the CVE-2024-30051 privilege escalation vulnerability in the wild
https://ti.qianxin.com/blog/articles/public-secret-research-on-the-cve-2024-30051-privilege-escalation-vulnerability-in-the-wild-en/
2 644
CVE-2024-37084: #Spring Cloud Remote Code Execution
https://blog.securelayer7.net/spring-cloud-skipper-vulnerability/
2 644
Analysis of CVE-2024-43044 — From file read to RCE in #Jenkins through agents
https://blog.convisoappsec.com/en/analysis-of-cve-2024-43044/
2 644
CVE-2024-38063 - Remotely Exploiting The Kernel Via IPv6
https://malwaretech.com/2024/08/exploiting-CVE-2024-38063.html
2 644
Back to School - Exploiting a Remote Code Execution Vulnerability in Moodle
https://blog.redteam-pentesting.de/2024/moodle-rce/
2 644
iSniff GPS - Passive sniffing tool for capturing and visualising WiFi location data disclosed by iOS devices
https://github.com/hubert3/iSniff-GPS
2 644
Post-Quantum Cryptography: Standards and Progress
http://security.googleblog.com/2024/08/post-quantum-cryptography-standards.html
2 644
#redteam
Cobalt Strike - CDN / Reverse Proxy Setup
https://redops.at/en/blog/cobalt-strike-cdn-reverse-proxy-setup
2 644
How to root an #Android device for analysis and vulnerability assessment
https://www.pentestpartners.com/security-blog/how-to-root-an-android-device-for-analysis-and-vulnerability-assessment/
2 644
#Mobile_Security
"Android App Usage and Cell Tower Location: Private. Sensitive. Available to Anyone?", 2024.
2 644
Exploiting Bluetooth: From your car to the bank account
Defcon slides: https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/DEF%20CON%2032%20-%20Vladyslav%20Zubkov%20Martin%20Strohmeier%20-%20Exploiting%20Bluetooth%20-%20from%20your%20car%20to%20the%20bank%20account%24%24.pdf
2 644
The Abuse of ITarian RMM by Dolphin Loader
https://russianpanda95.github.io/The-Abuse-of-ITarian-RMM-by-Dolphin-Loader
2 644
Mixing watering hole attacks with history leak via CSS
https://adepts.of0x.cc/css-history-leaks/
2 644
#SCCMSecrets.py aims at exploiting #SCCM policies distribution for credentials harvesting, initial access and lateral movement.
https://github.com/synacktiv/SCCMSecrets
2 644
Black Hat USA 2024 slides
https://github.com/onhexgroup/Conferences/tree/main/Black%20Hat%20USA%202024%20slides
2 644
#malware
A command and control framework written in rust.
https://github.com/Teach2Breach/Tempest
