ZeroDay UZ (lab)

Happy new year 🎉

Burp Suite Professional v2023.11.1.2 + BurpBounty_Pro 2.7.0 + JDK 18 NOTE - Run this version With Java SE JDK 18 Released Monday, 4 December 2023 @zero_day_uz #pentest #security

🧩 A huge number of cheat sheets that will help you during the pentest. 🧷 https://ired.team/offensive-security-experiments/offensive-security-cheetsheets

Visual Studio 1-click RCE: A New Exploitation Technique for Visual Studio Projects https://github.com/cjm00n/EvilSln #initial #fishing #redteam #pentest #git

https://github.com/chompie1337/Windows_MSKSSRV_LPE_CVE-2023-36802 Poc

MSIFortune - Local Privilege Escalation with MSI Installers The repair function often triggers CustomActions, which can lead to several potential issues: — Visible conhost.exe via a cmd.exe or other console binaries — Visible PowerShell — Directly actions from the installer with SYSTEM privileges — Executing binaries from user writable paths — DLL sideloading / search path abusing — Missing PowerShell parameters, mostly -NoProfile — Execution of other tools in an unsafe manner Details: https://badoption.eu/blog/2023/10/03/MSIFortune.html #windows #msi #lpe

we will launch an attack on Israeli systems in the current situation We are muslims army

⚠ Two unauthenticated RCE vulns in Microsoft Remote Desktop. Exploitation likely, says Microsoft. Affects Win 10, Win 7, Win 8.1, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2. Updates are available and they should be applied immediately, especially for those systems acessible through the internet. Severity: 🔶 High More Information: https://yt.gl/20191181 and https://yt.gl/20191182 #alert #vulnberability #severityhigh #microsoft #remotedesktopservice #terminalservice #update ✉

CVE-2023-29360 Exploit for MSKSSRV.SYS driver POC exploit #lpe #win

CVE-2023-29357: Microsoft SharePoint Server Elevation of Privilege https://github.com/Chocapikk/CVE-2023-29357/tree/main #exploit #pentest #redteam #git