Hacker tricks

Nuking Weak Shellcode Hacker Hashes https://karma-x.io/blog/post/30

Offensive IoT for Red Team Implants (Part 3) https://www.blackhillsinfosec.com/offensive-iot-for-red-team-implants-part-3

Format String Exploitation: A Hands-On Exploration for Linux https://blog.nviso.eu/2024/05/23/format-string-exploitation-a-hands-on-exploration-for-linux

Official writeups for Business CTF 2024: The Vault Of Hope https://github.com/hackthebox/business-ctf-2024

TrollAMSI: This new technique is called "Reflection with method swapping" https://github.com/cybersectroll/TrollAMSI

2. PoC: https://github.com/W01fh4cker/CVE-2024-21683-RCE

LetMeowIn – Analysis of a Credential Dumper https://www.binarydefense.com/resources/blog/letmeowin-analysis-of-a-credential-dumper

Java (JSP) - Bring Your Own Jar https://red.0xbad53c.com/red-team-operations/initial-access/webshells/java-jsp-bring-your-own-jar

ANSI Escape Injection Vulnerability in WinRAR https://sdushantha.medium.com/ansi-escape-injection-vulnerability-in-winrar-a2cbfac4b983

Linguistic Lumberjack: Attacking Cloud Services via Logging Endpoints (Fluent Bit - CVE-2024-4323) https://www.tenable.com/blog/linguistic-lumberjack-attacking-cloud-services-via-logging-endpoints-fluent-bit-cve-2024-4323