reconcore
Відкрити в Telegram
#vulnerability #research #cve #rce #lpe #poc #tools #pentest #blueteam #redteam #technique Educational use only. Content from public sources. Admin holds no liability for misuse. Users are solely responsible for their actions https://t.me/reconcore?direct
Показати більше2 554
Підписники
+124 години
+107 днів
+4830 днів
Архів дописів
2 554
IDA PRO 9.5
magnet:?xt=urn:btih:ed810311f1af78b9f9872da12076d2a413bd9ae5&dn=ida95&xl=5820581379&tr=udp%3A%2F%2Ftracker.corpscorp.online%3A80%2Fannounce&tr=udp%3A%2F%2Ftracker.torrent.eu.org%3A451%2Fannounce&tr=https%3A%2F%2Ftracker.7471.top%3A443%2Fannounce&tr=http%3A%2F%2Ftracker.mywaifu.best%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.nyaa.vc%3A6969%2Fannounce&tr=http%3A%2F%2Ftracker.waaa.moe%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fopen.stealth.si%3A80%2Fannounce
#re @reconcore2 554
BeyondTrust Remote Support File Upload to RCE metasploit module CVE-2026-102764
An anonymous attacker can forge the MRS local router alias and invoke the appliance-side thin worker's native file-transfer service. This module uploads a PHP payload into the site's public directory and requests its extensionless URL. PHP and Unix command payloads execute as the site user. Tested on Remote Support 24.1.2;Rapid7 Analysis: Unauthenticated File Upload to RCE in BeyondTrust Remote Support CVE-2026-102764 #rce #php #payload @reconcore
2 554
CredGuardRuntimeShutdown
Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2)
Blog: https://medium.com/@s12deff/runtime-credential-guard-deactivation-d01cb9eb0062
2 554
ReverseShell_2026_10.ps1
A new PowerShell reverse shell in the PSSW100AVB repository. 100% AV bypass (October 2026)
2 554
ReverseShell_2026_10.ps1
A new PowerShell reverse shell in the PSSW100AVB repository. 100% AV bypass (October 2026)
2 554
ReverseShell_2026_10.ps1
A new PowerShell reverse shell in the PSSW100AVB repository. 100% AV bypass (October 2026)
2 554
SyscallRevenant
Clean Indirect Syscalls with Syscall Tampering.
#evasion #technique #edr @reconcore
2 554
KillerLand
Collection of reversed vulnerable drivers weaponized into process killers. PPL won't save you.
#byovd #edr #bypass #redteam @reconcore
2 554
honggfuzz
Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)
#c #fuzzing #security @reconcore
2 554
CVE-2026-106173
The FortiSIEM gRPC
QueryResultReq handler processes untrusted metadata without proper path validation. By crafting metadata containing both path traversal sequences (../) and NUL-byte injection within gRPC's HTTP/2 and HPACK encoding layers, an attacker can write arbitrary files to the filesystem.
CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE
#vulnerability #fortisiem #rce #poc @reconcore2 554
php2shell-bypass-aslr-exp
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.PHP2Shell
Version-aware research toolkit for CVE-2026-109618 / CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.#vulnerability #rce #bypass #php #redteam #poc @reconcore
2 554
BLUESPAWN
An Active Defense and EDR software to empower Blue Teams
#blueteam #av #edr #mitre #security #windows @reconcore
2 554
rustinel
Open-source endpoint detection. Three platforms. Your rules.
Run Sigma, YARA, and IOC detections on native Windows, Linux, and macOS telemetry.
Written in Rust, with local alerts and no cloud account required.
#blueteam #ebpf #edr #etw #siem #sigma #rust #yara #sysmon #security #linux #windows @reconcore
2 554
Sentinel
Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK.
#csharp #edr #etw # mitre #security #windows @reconcore
