Workshop SOCMINT - Tools - HackMD
September 1, 2021 at 8:56:25 AM UTC - permalink -

- https://hackmd.io/LFLVY-tPRl-sHofzsLpm7g?view

htmlpurifier.org/live/smoketests/xssAttacks.xml
August 20, 2021 at 4:00:08 PM UTC - permalink -

- http://htmlpurifier.org/live/smoketests/xssAttacks.xml

writeups/Apple-RCE.md at main · httpvoid/writeups
August 19, 2021 at 2:53:11 PM UTC - permalink -

- https://github.com/httpvoid/writeups/blob/main/Apple-RCE.md

Sophos UTM Preauth RCE: A Deep Dive into CVE-2020-25223 — Atredis Partners
August 19, 2021 at 2:10:52 PM UTC - permalink -

- https://www.atredis.com/blog/2021/8/18/sophos-utm-cve-2020-25223

Local file inclusion with tmp files |
August 19, 2021 at 1:56:54 PM UTC - permalink -

- https://truesecdev.wordpress.com/2016/11/09/local-file-inclusion-with-tmp-files/

PHP Supply Chain Attack on Composer
August 19, 2021 at 1:52:02 PM UTC - permalink -

- https://blog.sonarsource.com/php-supply-chain-attack-on-composer

- LFI With PHPInfo Assistance.pdf
August 19, 2021 at 1:49:00 PM UTC - permalink -

- https://insomniasec.com/downloads/publications/LFI%20With%20PHPInfo%20Assistance.pdf

Fortinet FortiWeb OS Command Injection | Rapid7 Blog
August 19, 2021 at 1:48:24 PM UTC - permalink -

- https://www.rapid7.com/blog/post/2021/08/17/fortinet-fortiweb-os-command-injection/

elFinder - A Case Study of Web File Manager Vulnerabilities
August 19, 2021 at 1:47:56 PM UTC - permalink -

- https://blog.sonarsource.com/elfinder-case-study-of-web-file-manager-vulnerabilities

How To Use Traefik v2 as a Reverse Proxy for Docker Containers on Ubuntu 20.04 | DigitalOcean
August 17, 2021 at 9:07:47 AM UTC - permalink -

- https://www.digitalocean.com/community/tutorials/how-to-use-traefik-v2-as-a-reverse-proxy-for-docker-containers-on-ubuntu-20-04

yandex/gixy: Nginx configuration static analyzer
August 11, 2021 at 1:45:57 PM UTC - permalink -

- https://github.com/yandex/gixy

Emkei's Fake Mailer
August 10, 2021 at 4:03:22 PM UTC - permalink -

- https://emkei.cz/

tnpitsecurity/ligolo-ng: An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
August 3, 2021 at 11:16:46 AM UTC - permalink -

- https://github.com/tnpitsecurity/ligolo-ng

Default Passwords for VMware and EMC | Serhad Makbuloglu
July 22, 2021 at 1:34:11 PM UTC - permalink -

- https://www.serhadmakbuloglu.com/default-passwords-vmware-emc.html

PowerShell load .Net Assembly - PsCustom Object - Hitchikers GUID(e) to Automation
July 20, 2021 at 9:50:46 AM UTC - permalink -

- https://pscustomobject.github.io/powershell/howto/PowerShell-Add-Assembly/

File-Upload - Google Slides
July 16, 2021 at 10:50:17 AM UTC - permalink -

- https://docs.google.com/presentation/d/1-YwXl9rhzSvvqVvE_bMZo2ab-0O5wRNTnzoihB9x6jI/mobilepresent#slide=id.gb80cbaa94f_0_0

Exploiting JMX RMI | Optiv
July 13, 2021 at 3:04:49 PM UTC - permalink -

- https://web.archive.org/web/20201027062446/https://www.optiv.com/explore-optiv-insights/blog/exploiting-jmx-rmi

Attacking RMI based JMX services | MOGWAI LABS GmbH
July 13, 2021 at 2:33:30 PM UTC - permalink -

- https://mogwailabs.de/en/blog/2019/04/attacking-rmi-based-jmx-services/

qtc-de/beanshooter: JMX enumeration and attacking tool.
July 13, 2021 at 1:12:53 PM UTC - permalink -

- https://github.com/qtc-de/beanshooter

The Java Soothsayer: A practical application for insecure randomness. (Includes free 0day)
July 13, 2021 at 11:16:14 AM UTC * - permalink -

- https://web.archive.org/web/20180315203404/https://medium.com/@alex91ar/the-java-soothsayer-a-practical-application-for-insecure-randomness-c67b0cd148cd