Эффект пентестера

#Exploit for #CVE-2024-20767 - #Adobe #ColdFusion https://github.com/yoryio/CVE-2024-20767 https://github.com/Chocapikk/CVE-2024-20767

#CVE-2024-1580 + #PoC https://bugs.chromium.org/p/project-zero/issues/detail?id=2502

#CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in #KernelCTF images. https://github.com/notselwyn/cve-2024-1086

https://zerodayengineering.com/research/pwn2own-2021-vm-escape.html VM Escape Exploit for Parallels Desktop Hypervisor (Pwn2Own 2021) source code + video walkthrough A virtual machine escape exploit will typically require kernel privileges in the guest OS. In this exploit it off-loading the reverse-engineered toolgate protocol implementation to a Python module, while keeping low-level kernel code minimal, just enough to implement the attack interface - a nod to the principle of least privilege in systematic software engineering, which is missed a lot in non-trivial exploit development. ⚜️ Subscribe @pentester3ffect

#FortiClient EMS #CVE-2023-48788 https://github.com/horizon3ai/CVE-2023-48788

Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation. (#CVE-2023-36424) https://github.com/Nassim-Asrir/CVE-2023-36424