ZeroDay UZ (lab)
Open in Telegram
292
Subscribers
No data24 hours
No data7 days
No data30 days
Posts Archive
Burp Suite Professional v2023.2.1
NOTE - Run this version With Java SE JDK 18
Early Adopter, Released Wednesday, 15 February 2023
@zero_day_uz #pentest #securityWindows LPE via StorSvc service
PoC: https://github.com/blackarrowsec/redteam-research/tree/master/LPE%20via%20StorSvc
#lpe #pentest #redteam
![Intelligence-X API Keys - 192 Info - https://github.com/IntelligenceX/SDK enddomain - https://2.intelx.io/ [+] 63eafd0f-8817-](https://cdn.tlmtr.io/_next/static/media/empty-channel.35ed232f.svg)
Intelligence-X API Keys - 192
Info - https://github.com/IntelligenceX/SDK
enddomain - https://2.intelx.io/
[+] 63eafd0f-8817-4c25-af72-826996acce7f
[+] 1cf89c7b-7cc7-46d6-bc88-85d3f75e97d8
[+] 11b00754-7c6c-4be0-9555-bf1e7951e1ab
[+] 224cefb5-ff8c-4f7a-ba9a-e8a8a101f809+1thanks to anon users for Urlscan Pro. We upload all Urlscan Pro data to DarkSide And DarkMatter Groups & We will share 10k
Burp Suite Professional v2023.2 + BurpBounty Pro 2.6.2
Early Adopter, Released Thursday, 9 February 2023
@zero_day_uz #pentest #security
Burp Suite Professional v2023.1.2 + Crack
Early Adopter, Released Thursday, 9 February 2023
https://www.virustotal.com/gui/file/c3f28f484c273c84cbd4f916c55844fb2ba3fc3793d2e5dddc12aacdb1a56c75
@zero_day_uz #pentest #securityBurp Suite Professional v2023.1.1 + Crack
Early Adopter, Released Wednesday, 25 January 2023
@zero_day_uz #pentest #security
Burp Suite Professional v2023.1 + BurpBounty Pro 2.6.1
Early Adopter, Released Thursday, 12 January 2023
@zero_day_uz #pentest #security
CVE-2022-38627: A journey through SQLite Injection to compromise the whole enterprise building
https://omar0x01.medium.com/cve-2022-38627-a-journey-through-sqlite-injection-to-compromise-the-whole-enterprise-building-15cebd072ed6
Microsoft Exchange: OWASSRF + TabShell
(CVE-2022-41076)
The TabShell vulnerability its a form of Privilege Escalation which allows breaking out of the restricted Powershell Sandbox after you have successfully gained access through OWASSRF.
For a detailed write see research:
https://blog.viettelcybersecurity.com/tabshell-owassrf/
PoC:
https://gist.github.com/testanull/518871a2e2057caa2bc9c6ae6634103e
#owa #ssrf #tabshell #poc
Intelligence-X API Keys - 174
Info - https://github.com/IntelligenceX/SDK
end_domain - https://2.intelx.io/
•
574de5e8-e9ad-48d4-8c34-700ccf0c4fd8
• 3ff63a02-bfdd-4180-83f1-14c8f44e7888
• 29b7fac0-175d-447c-b232-f2e9af43a279
• a5272d1b-4435-49a7-b7aa-6020ddb6f96c