Exploit Service

Smoke and Mirrors — Driver Signatures Are Optional ItsNotASecurityBoundary is an exploit that leverages False File Immutability assumptions in Windows Code Integrity (ci.dll) to trick it into accepting an improperly-signed security catalog containing fraudulent authentihashes. With attacker-controlled authentihashes loaded and trusted by CI, the kernel will load any driver of the attacker's choosing, even unsigned ones. https://github.com/gabriellandau/ItsNotASecurityBoundary Project: @ExploitService Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks

Private channel from @ExploitService (@ExploitAlert) By subscribing, you get access to the private channel where you will find: - Exploit packs - Manuals and courses on exploit development - Daily publications of new vulnerabilities and instructions on how to use them - Macros - Silent vulnerabilities for PDF, DOC, XLS, PPT Office - Link exploit builder - Multi-exploit builder - SS7 attacks - Modified and custom versions, POC - Exploit development for Windows, Linux, and more - Binary exploits with Python - Daily video demonstrations on exploiting new vulnerabilities - And much more interesting and useful for exploiting vulnerabilities Subscription cost to the private channel: - Weekly: $649 - Monthly: $1299 - Lifetime: $1990 Accepted cryptocurrencies: Bitcoin, Ethereum, Litecoin, Monero, Dash, Zcash, and Tether USDT (bep20, trc20, erc20, ton). You can gain access to the private channel through the bot @ExploitServiceBot or by sending a direct message to @malwar

New link🔥 https://t.me/addlist/DRVmhF8Io2YzY2E0

Drainer Market! We offer the most effective and reliable drainers for cryptocurrency transactions. As well as landing pages for their promotion. @DrainerMarketBot 15 % discounts with this promo code https://t.me/DrainerMarketBot?start=promo15

#CVE-2024-26229 #windows #LPE https://github.com/varwara/CVE-2024-26229

Smart Screen Bypass https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21412 Project: @ExploitService Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

#Veeam Backup Enterprise Manager Authentication Bypass (#CVE-2024-29849) https://github.com/sinsinology/CVE-2024-29849 Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

Server pre-authenticated #RCE chain (#CVE-2024-4358/CVE-2024-1800) https://github.com/sinsinology/CVE-2024-4358 Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

#CVE-2024-26238: #WINDOWS 10 PLUGSCHEDULER ELEVATION OF PRIVILEGE

C:\Windows\System32\SprintCSP.dll

https://www.synacktiv.com/advisories/windows-10-plugscheduler-elevation-of-privilege Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

🕊 Обновление 7.07 RU 🇷🇺 1. Интегрирован в панель собственный lnk билдер (доступен только в тарифе Корпоративный) - для точечных атак функционал подойдет идеально. На данный момент разработка на стадии тестирования, иконка файла только PDF 2. Добавлено ограничение для тега билда 3. Исправлена ошибка когда конфиг мог скрывать правила добавленные пользователем 4. Добавлена возможность полностью менять конфиг 5. Чистка Windows Defender 10/11 + Cloud 🕊 Update 7.07 EN 🇬🇧 1. Integrated into the panel own lnk builder (available only in the Corporate plan) - the functionality is ideal for targeted attacks. At the moment the development is at the testing stage, the file icon is only PDF 2. Added restriction for build tag 3. Fixed a bug where the config could hide rules added by the user 4. Added the ability to completely change the config 5. Cleaning Windows Defender 10/11 + Cloud Купить подписку / Buy subscription - @lummaseller126 Полное описание LummaC2 (КЛИК) Full description of LummaC2 (CLICK) Чат / Chat

#CVE-2024-21683: #Confluence Data Center #RCE https://github.com/absholi7ly/-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

#CVE-2024-27130 #QNAP https://github.com/watchtowrlabs/CVE-2024-27130 Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

#Veeam Recovery Orchestrator Authentication #CVE-2024-29855 https://github.com/sinsinology/CVE-2024-29855 Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

CVE-2024-4577 - Yet Another #PHP #RCE: Make PHP-CGI Argument Injection Great Again! https://blog.orange.tw/2024/06/cve-2024-4577-yet-another-php-rce.html https://github.com/TAM-K592/CVE-2024-4577 Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

CVE-2021-31166: HTTP Protocol Stack Remote Code Execution Vulnerability https://github.com/0vercl0k/CVE-2021-31166 Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

Exploit to SYSTEM for CVE-2021-21551 https://github.com/waldo-irc/CVE-2021-21551 Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport