Pentester

Attacking the Android kernel using the Qualcomm TrustZone https://tamirzb.com/attacking-android-kernel-using-qualcomm-trustzone

A repository of telemetry domains and URLs used by mobile location tracking and analytics libraries. https://github.com/craiu/mobiletrackers

CVE-2023-22515: Confluence Broken Access Control https://github.com/Chocapikk/CVE-2023-22515

Coerced Potato New tool for local privilege escalation on a Windows machine, from a service account to NT SYSTEM. Should work on any recent versions of Windows. https://github.com/hackvens/CoercedPotato Research: https://blog.hackvens.fr/articles/CoercedPotato.html

Nightmangle is post-exploitation Telegram Command and Control (C2/C&C) Agent https://github.com/1N73LL1G3NC3x/Nightmangle

CVE-2023-29360 #Exploit for CVE-2023-29360 targeting MSKSSRV.SYS driver https://github.com/Nero22k/cve-2023-29360

CVE-2023-20209: Cisco RCE (Auth) https://github.com/0x41-Researcher/CVE-2023-20209 #exploit

A flexible tool for redirecting a given program's TCP traffic to SOCKS5 or HTTP proxy. graftcp can redirect the TCP connection made by the given program [application, script, shell, etc.] to SOCKS5 or HTTP proxy. https://github.com/hmgle/graftcp #tools

A Deep Dive into Brute Ratel C4 payloads – Part 2 https://cybergeeks.tech/a-deep-dive-into-brute-ratel-c4-payloads-part-2/

CVE-2023-29357 Microsoft SharePoint Server Elevation of Privilege Vulnerability https://github.com/Chocapikk/CVE-2023-29357

BinDiff is now open source https://github.com/google/bindiff

An all-in-one hacking tool written in Python to remotely exploit Android devices using #ADB (Android Debug Bridge) and #Metasploit-Framework. https://github.com/AzeemIdrisi/PhoneSploit-Pro

Reversing Windows Container, episode I: Silo https://blog.quarkslab.com/reversing-windows-container-episode-i-silo.html

Cracking the final frontier: Reverse engineering and exploiting low-earth orbit satellites https://cfp.recon.cx/2023/talk/3NU9DB/

Bypassing UAC with SSPI Datagram Contexts https://splintercod3.blogspot.com/p/bypassing-uac-with-sspi-datagram.html

#PHP 8.1.0-dev then try #RCE & SQLi Try : User-Agentt: zerodiumsleep(5); Try : User-Agentt: zerodiumsystem('id');

Geolocating a Traveler via OSINT techniques https://medium.com/@ronkaminskyy/geolocating-a-traveler-via-osint-techniques-ed34ed120a00