poc/dwrcs_dwDrvInst_rce.py at master · tenable/poc
December 17, 2020 at 1:25:49 PM UTC * - permalink -

- https://github.com/tenable/poc/blob/master/Solarwinds/Dameware/dwrcs_dwDrvInst_rce.py

PsExec Local Privilege Escalation | by David Wells | Tenable TechBlog | Dec, 2020 | Medium
December 11, 2020 at 9:43:45 AM UTC * - permalink -

- https://medium.com/tenable-techblog/psexec-local-privilege-escalation-2e8069adc9c8

(325) Exploitation of a Samsung Galaxy Note 10+ Zero-Click RCE Bug via MMS - YouTube
December 10, 2020 at 5:08:48 PM UTC - permalink -

- https://www.youtube.com/watch?v=nke8Z3G4jnc&ab_channel=MateuszJurczyk

CloudPentestCheatsheets/AWS.md at master · dafthack/CloudPentestCheatsheets
December 7, 2020 at 2:46:19 PM UTC - permalink -

- https://github.com/dafthack/CloudPentestCheatsheets/blob/master/cheatsheets/AWS.md

endpoints.office.com/endpoints/worldwide?clientrequestid=b10c5ed1-bad1-445f-b386-b919946339a7
December 1, 2020 at 11:29:43 AM UTC - permalink -

- https://endpoints.office.com/endpoints/worldwide?clientrequestid=b10c5ed1-bad1-445f-b386-b919946339a7

blacklanternsecurity/TREVORspray: A featureful round-robin SOCKS proxy and Python O365 sprayer based on MSOLSpray which uses the Microsoft Graph API
November 28, 2020 at 1:26:07 PM UTC - permalink -

- https://github.com/blacklanternsecurity/TREVORspray

proxycannon/proxycannon-ng: A private botnet using multiple cloud environments for pentesters and red teamers. - Built by the community during a hackathon at the WWHF 2018 security conference
November 28, 2020 at 1:13:26 PM UTC - permalink -

- https://github.com/proxycannon/proxycannon-ng

Path to Process Injection — Bypass Userland API Hooking | by Seemant Bisht | Nov, 2020 | Medium
November 27, 2020 at 6:58:26 PM UTC * - permalink -

- https://securitytimes.medium.com/path-to-process-injection-bypass-userland-api-hooking-a8a49ae5def6

moohax/Proof-Pudding: Copy cat model for Proofpoint
November 24, 2020 at 11:27:06 AM UTC - permalink -

- https://github.com/moohax/Proof-Pudding

InsertScript: ImageMagick - Shell injection via PDF password
November 23, 2020 at 2:15:09 PM UTC - permalink -

- https://insert-script.blogspot.com/2020/11/imagemagick-shell-injection-via-pdf.html

shhgit: find secrets in real time across GitHub, GitLab and BitBucket
November 23, 2020 at 2:04:04 PM UTC - permalink -

- https://www.shhgit.com/

(292) 118 Attacking ADFS Endpoints with PowerShell Karl Fosaaen - YouTube
November 22, 2020 at 11:33:41 PM UTC - permalink -

- https://www.youtube.com/watch?v=oTyLdAUjw30&feature=emb_logo

Bypassing LSA Protection (aka Protected Process Light) without Mimikatz on Windows 10 - RED CURSOR
November 20, 2020 at 12:41:31 AM UTC - permalink -

- https://www.redcursor.com.au/blog/bypassing-lsa-protection-aka-protected-process-light-without-mimikatz-on-windows-10

RythmStick/AMSITrigger: The Hunt for Malicious Strings
November 19, 2020 at 9:58:07 PM UTC - permalink -

- https://github.com/RythmStick/AMSITrigger

Constructing Kerberos Attacks with Delegation Primitives - Constructing Kerberos Attacks with Delegation Primitives.pdf
November 19, 2020 at 9:54:57 PM UTC * - permalink -

- https://shenaniganslabs.io/media/Constructing%20Kerberos%20Attacks%20with%20Delegation%20Primitives.pdf

Databases and Clouds: SQL Server as a C2
November 18, 2020 at 5:04:38 PM UTC - permalink -

- https://blog.netspi.com/databases-and-clouds-sql-server-as-a-c2/

CSM_pocs.md
November 18, 2020 at 1:31:54 PM UTC - permalink -

- https://gist.github.com/Frycos/8bf5c125d720b3504b4f28a1126e509e

Advanced MSSQL Injection Tricks – PT SWARM
November 13, 2020 at 3:47:35 PM UTC - permalink -

- https://swarm.ptsecurity.com/advanced-mssql-injection-tricks/

HoangKien1020/CVE-2020-10239: CVE-2020-10239: Incorrect Access Control in com_fields SQL field-RCE- PoC
November 12, 2020 at 9:30:30 AM UTC - permalink -

- https://github.com/HoangKien1020/CVE-2020-10239

The OXID Resolver [Part 1] - Remote enumeration of network interfaces without any authentication - Airbus CyberSecurity
November 11, 2020 at 2:38:47 PM UTC * - permalink -

- https://airbus-cyber-security.com/the-oxid-resolver-part-1-remote-enumeration-of-network-interfaces-without-any-authentication/