reconcore
رفتن به کانال در Telegram
#vulnerability #research #cve #rce #lpe #poc #tools #pentest #blueteam #redteam #technique Educational use only. Content from public sources. Admin holds no liability for misuse. Users are solely responsible for their actions https://t.me/reconcore?direct
نمایش بیشتر2 553
مشترکین
-324 ساعت
+77 روز
+5030 روز
آرشیو پست ها
2 553
IDA PRO 9.5
magnet:?xt=urn:btih:ed810311f1af78b9f9872da12076d2a413bd9ae5&dn=ida95&xl=5820581379&tr=udp%3A%2F%2Ftracker.corpscorp.online%3A80%2Fannounce&tr=udp%3A%2F%2Ftracker.torrent.eu.org%3A451%2Fannounce&tr=https%3A%2F%2Ftracker.7471.top%3A443%2Fannounce&tr=http%3A%2F%2Ftracker.mywaifu.best%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.nyaa.vc%3A6969%2Fannounce&tr=http%3A%2F%2Ftracker.waaa.moe%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fopen.stealth.si%3A80%2Fannounce
#re @reconcore2 553
BeyondTrust Remote Support File Upload to RCE metasploit module CVE-2026-102764
An anonymous attacker can forge the MRS local router alias and invoke the appliance-side thin worker's native file-transfer service. This module uploads a PHP payload into the site's public directory and requests its extensionless URL. PHP and Unix command payloads execute as the site user. Tested on Remote Support 24.1.2;Rapid7 Analysis: Unauthenticated File Upload to RCE in BeyondTrust Remote Support CVE-2026-102764 #rce #php #payload @reconcore
2 553
CredGuardRuntimeShutdown
Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2)
Blog: https://medium.com/@s12deff/runtime-credential-guard-deactivation-d01cb9eb0062
2 553
ReverseShell_2026_10.ps1
A new PowerShell reverse shell in the PSSW100AVB repository. 100% AV bypass (October 2026)
2 553
ReverseShell_2026_10.ps1
A new PowerShell reverse shell in the PSSW100AVB repository. 100% AV bypass (October 2026)
2 553
ReverseShell_2026_10.ps1
A new PowerShell reverse shell in the PSSW100AVB repository. 100% AV bypass (October 2026)
2 553
SyscallRevenant
Clean Indirect Syscalls with Syscall Tampering.
#evasion #technique #edr @reconcore
2 553
KillerLand
Collection of reversed vulnerable drivers weaponized into process killers. PPL won't save you.
#byovd #edr #bypass #redteam @reconcore
2 553
honggfuzz
Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)
#c #fuzzing #security @reconcore
2 553
CVE-2026-106173
The FortiSIEM gRPC
QueryResultReq handler processes untrusted metadata without proper path validation. By crafting metadata containing both path traversal sequences (../) and NUL-byte injection within gRPC's HTTP/2 and HPACK encoding layers, an attacker can write arbitrary files to the filesystem.
CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE
#vulnerability #fortisiem #rce #poc @reconcore2 553
php2shell-bypass-aslr-exp
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.PHP2Shell
Version-aware research toolkit for CVE-2026-109618 / CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.#vulnerability #rce #bypass #php #redteam #poc @reconcore
2 553
BLUESPAWN
An Active Defense and EDR software to empower Blue Teams
#blueteam #av #edr #mitre #security #windows @reconcore
2 553
rustinel
Open-source endpoint detection. Three platforms. Your rules.
Run Sigma, YARA, and IOC detections on native Windows, Linux, and macOS telemetry.
Written in Rust, with local alerts and no cloud account required.
#blueteam #ebpf #edr #etw #siem #sigma #rust #yara #sysmon #security #linux #windows @reconcore
2 553
Sentinel
Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK.
#csharp #edr #etw # mitre #security #windows @reconcore
