Peneter Tools

Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique https://github.com/D1rkMtr/FilelessRemotePE

Another Windows Local Privilege Escalation from Service Account to System https://github.com/antonioCoco/JuicyPotatoNG https://decoder.cloud/2022/09/21/giving-juicypotato-a-second-chance-juicypotatong/ #LPE #Windows

DrayTek unauthenticated remote code execution vulnerability (CVE-2022-32548) in /cgi-bin/wlogin.cgi via username field https://github.com/rftg1000/CVE-2022-32548-RCE-POC

A critical vulnerability (CVE-2022-36804) in Atlassian Bitbucket Server and Data Center could be exploited by unauthorized attackers to execute malicious code on vulnerable instances. https://github.com/CEOrbey/CVE-2022-36804-MASS-RCE

https://github.com/3xp0rt/LockBit-Black-Builder #ransomware #lockbit

#burpsuite #burpbounty

#nessus #scanner

Teamsniper is a tool for fetching keywords in a Microsoft Teams such as (passwords, emails, database, etc.). https://github.com/xRET2pwn/Teamsniper #Teamsniper #redteaming

Bootkit for Windows Sandbox to disable DSE/PatchGuard. https://github.com/thesecretclub/SandboxBootkit

UAC Bypass by abusing RPC and debug objects https://github.com/Kudaes/Elevator

CVE-2022-32250-Linux-Kernel-LPE demo : https://www.youtube.com/watch?v=YqmwA6fPjKE https://github.com/theori-io/CVE-2022-32250-exploit