Pentester

CVE-2023-26818 - Bypass TCC with Telegram in macOS https://danrevah.github.io/2023/05/15/CVE-2023-26818-Bypass-TCC-with-Telegram/

PEASS-ng - Privilege Escalation Awesome Scripts Suite https://github.com/carlospolop/PEASS-ng

Writing a Sliver C2 Powershell Stager with Shellcode Compression and AES Encryption https://medium.com/@youcef.s.kelouaz/writing-a-sliver-c2-powershell-stager-with-shellcode-compression-and-aes-encryption-9725c0201ea8

Go shellcode loader https://github.com/f1zm0/hades

ApkHack-BackDoor - shell script that simplifies the process of adding a backdoor to any Android APK file https://github.com/BitWalls-ops/ApkHack-BackDoor

Babuk Source Code Sparks 9 Different Ransomware Strains Targeting VMware ESXi Systems https://thehackernews.com/2023/05/babuk-source-code-sparks-9-new.html

From One Vulnerability to Another: Outlook Patch Analysis Reveals Important Flaw in Windows API https://www.akamai.com/blog/security-research/important-outlook-vulnerability-bypass-windows-api

decentralising the Ai Industry, just some language model api's... https://github.com/xtekky/gpt4free

burpgpt - Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities, and enables running traffic-based analysis of any type https://github.com/aress31/burpgpt

OWASP Web Application Pentesting Checklist https://github.com/Hari-prasaanth/Web-App-Pentest-Checklist

DJI Mavic 3 Drone Research Part 1: Firmware Analysis https://www.nozominetworks.com/blog/dji-mavic-3-drone-research-part-1-firmware-analysis/

XSS automation tool helps hackers identify and exploit cross-site scripting vulnerabilities in web apps. Tests for reflected/persistent XSS https://github.com/EmperialX/XSS-Automation-Tool

Potato privilege escalation in Windows Server 2012 - 2022, Windows 8 - 11 https://github.com/BeichenDream/GodPotato

WinRAR SFX archives can run PowerShell without being detected https://www.crowdstrike.com/blog/self-extracting-archives-decoy-files-and-their-hidden-payloads/