Pentester

AtlasLdr Reflective x64 PE/DLL Loader implemented using Dynamic Indirect Syscalls https://github.com/Krypteria/AtlasLdr

A useful resource containing information about all the CVEs that Microsoft patches in its monthly updates. https://patchapalooza.com/

pandora A red team tool that assists into extracting/dumping master credentials and/or entries from different password managers: - Chromium - 1Password - Firefox - Dashlane - Keeper - LastPass - Roboform - Bitwarden - Norton - Bitdefender - Ironvest - Passwarden - Avira - Passwordboss https://github.com/efchatz/pandora

Mapping Virtual to Physical Adresses Using Superfetch https://www.outflank.nl/blog/2023/12/14/mapping-virtual-to-physical-adresses-using-superfetch/

Whatsapp Exploit to spoofing impersonate of reply message https://github.com/lichti/whats-spoofing

Powershell Tips & Tricks(RTC0024) https://redteamrecipe.com/powershell-tips-tricks/

CVE-2023-30547 Exploit for VM2 Sandbox Escape Vulnerability https://github.com/rvizx/CVE-2023-30547

#BlackHat Europe 2023 slides https://github.com/onhexgroup/Conferences

Reverse engineering Android 2FA OTP application https://marcoguerri.github.io/2023/09/09/android-home-banking.html

Bypassing UAC via COM component IARPUninstallStringLauncher https://3gstudent.github.io/通过COM组件IARPUninstallStringLauncher绕过UAC

Ghidra Basics - Identifying, Decoding and Fixing Encrypted Strings https://embee-research.ghost.io/ghidra-basics-identifying-and-decoding-encrypted-strings/

Obfuscating native code for fun: Part 1 - Introduction https://blog.es3n1n.eu/posts/obfuscator-pt-1/ https://github.com/es3n1n/obfuscator

Secret Handshake A Mutual TLS Based C2 Communication Channel - John Conwell | CypherCon 6.0 https://www.youtube.com/watch?v=AOWFM-JhW3g&list=PLUC_sTnMl8NxZqs4b2Rt8VygLaquV5vY_

Beginners Guide to Building a Hardware Hacking Lab https://voidstarsec.com/hw-hacking-lab/vss-lab-guide

CVE-2023-36745: Microsoft Exchange Server RCE https://securityonline.info/microsoft-exchange-server-rce-cve-2023-36745-flaw-gets-poc-exploit/ PoC: https://github.com/N1k0la-T/CVE-2023-36745

CVE-2023-46214: Splunk RCE https://github.com/nathan31337/Splunk-RCE-poc #git #exploit #pentest #redteam

Abusing microsoft access “LINKED TABLE” feature to perform NTLM forced authentication attacks https://research.checkpoint.com/2023/abusing-microsoft-access-linked-table-feature-to-perform-ntlm-forced-authentication-attacks/

LocalPotato HTTP edition https://decoder.cloud/2023/11/03/localpotato-http-edition/ https://github.com/decoder-it/LocalPotato

Perfect DLL Hijacking https://elliotonsecurity.com/perfect-dll-hijacking/

Advanced Frida Usage Part 1 – iOS Encryption Libraries https://8ksec.io/advanced-frida-usage-part-1-ios-encryption-libraries-8ksec-blogs/