fa
Feedback

فریب کلاهبرداران را نخورید! تل‌متریو این کانال‌ها را شناسایی و برچسب‌گذاری می‌کند 👉 برای مشاهده برچسب، اشتراک تهیه کنید

reconcore

reconcore

رفتن به کانال در Telegram

#vulnerability #research #cve #rce #lpe #poc #tools #pentest #blueteam #redteam #technique Educational use only. Content from public sources. Admin holds no liability for misuse. Users are solely responsible for their actions https://t.me/reconcore?direct

نمایش بیشتر
2 553
مشترکین
-324 ساعت
+77 روز
+5030 روز
آرشیو پست ها
IDA PRO 9.5 magnet:?xt=urn:btih:ed810311f1af78b9f9872da12076d2a413bd9ae5&dn=ida95&xl=5820581379&tr=udp%3A%2F%2Ftracker.corpsc
IDA PRO 9.5
magnet:?xt=urn:btih:ed810311f1af78b9f9872da12076d2a413bd9ae5&dn=ida95&xl=5820581379&tr=udp%3A%2F%2Ftracker.corpscorp.online%3A80%2Fannounce&tr=udp%3A%2F%2Ftracker.torrent.eu.org%3A451%2Fannounce&tr=https%3A%2F%2Ftracker.7471.top%3A443%2Fannounce&tr=http%3A%2F%2Ftracker.mywaifu.best%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.nyaa.vc%3A6969%2Fannounce&tr=http%3A%2F%2Ftracker.waaa.moe%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fopen.stealth.si%3A80%2Fannounce
#re @reconcore

BeyondTrust Remote Support File Upload to RCE metasploit module CVE-2026-102764 An anonymous attacker can forge the MRS local
BeyondTrust Remote Support File Upload to RCE metasploit module CVE-2026-102764
An anonymous attacker can forge the MRS local router alias and invoke the appliance-side thin worker's native file-transfer service. This module uploads a PHP payload into the site's public directory and requests its extensionless URL. PHP and Unix command payloads execute as the site user. Tested on Remote Support 24.1.2;
Rapid7 Analysis: Unauthenticated File Upload to RCE in BeyondTrust Remote Support CVE-2026-102764 #rce #php #payload @reconcore

CredGuardRuntimeShutdown Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extract
CredGuardRuntimeShutdown Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2) Blog: https://medium.com/@s12deff/runtime-credential-guard-deactivation-d01cb9eb0062

ReverseShell_2026_10.ps1 A new PowerShell reverse shell in the PSSW100AVB repository. 100% AV bypass (October 2026)
ReverseShell_2026_10.ps1 A new PowerShell reverse shell in the PSSW100AVB repository. 100% AV bypass (October 2026)

ReverseShell_2026_10.ps1 A new PowerShell reverse shell in the PSSW100AVB repository. 100% AV bypass (October 2026)
ReverseShell_2026_10.ps1 A new PowerShell reverse shell in the PSSW100AVB repository. 100% AV bypass (October 2026)

ReverseShell_2026_10.ps1 A new PowerShell reverse shell in the PSSW100AVB repository. 100% AV bypass (October 2026)
ReverseShell_2026_10.ps1 A new PowerShell reverse shell in the PSSW100AVB repository. 100% AV bypass (October 2026)

SyscallRevenant Clean Indirect Syscalls with Syscall Tampering. #evasion #technique #edr @reconcore
SyscallRevenant Clean Indirect Syscalls with Syscall Tampering. #evasion #technique #edr @reconcore

KillerLand Collection of reversed vulnerable drivers weaponized into process killers. PPL won't save you. #byovd #edr #bypass
KillerLand Collection of reversed vulnerable drivers weaponized into process killers. PPL won't save you. #byovd #edr #bypass #redteam @reconcore

honggfuzz Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based) #c #fuzzing #security @reconcore

CVE-2026-106173 The FortiSIEM gRPC QueryResultReq handler processes untrusted metadata without proper path validation. By cra
CVE-2026-106173 The FortiSIEM gRPC QueryResultReq handler processes untrusted metadata without proper path validation. By crafting metadata containing both path traversal sequences (../) and NUL-byte injection within gRPC's HTTP/2 and HPACK encoding layers, an attacker can write arbitrary files to the filesystem. CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE #vulnerability #fortisiem #rce #poc @reconcore

CVE-2026-106173 #rce #exploit #github #fortinet @reconcore

php2shell-bypass-aslr-exp A php2shell exploit that requires no modifications to the official version, and does not require di
+1
php2shell-bypass-aslr-exp
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
PHP2Shell
Version-aware research toolkit for CVE-2026-109618 / CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.
#vulnerability #rce #bypass #php #redteam #poc @reconcore

BLUESPAWN An Active Defense and EDR software to empower Blue Teams #blueteam #av #edr #mitre #security #windows @reconcore
BLUESPAWN An Active Defense and EDR software to empower Blue Teams #blueteam #av #edr #mitre #security #windows @reconcore

whids Open Source EDR for Windows #dfir #edr #ids #sysmon #windows @reconcore
whids Open Source EDR for Windows #dfir #edr #ids #sysmon #windows @reconcore

rustinel Open-source endpoint detection. Three platforms. Your rules. Run Sigma, YARA, and IOC detections on native Windows, Linux, and macOS telemetry. Written in Rust, with local alerts and no cloud account required. #blueteam #ebpf #edr #etw #siem #sigma #rust #yara #sysmon #security #linux #windows @reconcore

Sentinel Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK. #csharp #edr #etw # mitre #security #windows @reconcore