A tale of EDR bypass methods | S3cur3Th1sSh1t
February 2, 2021 at 12:58:33 PM UTC - permalink -

- https://s3cur3th1ssh1t.github.io/A-tale-of-EDR-bypass-methods/

The Secret Parameter, LFR, and Potential RCE in NodeJS Apps
February 1, 2021 at 10:59:48 AM UTC - permalink -

- https://blog.shoebpatel.com/2021/01/23/The-Secret-Parameter-LFR-and-Potential-RCE-in-NodeJS-Apps/

WordPress Plugin Security Testing Cheat Sheet · wpscanteam/wpscan Wiki
January 22, 2021 at 4:35:19 PM UTC - permalink -

- https://github.com/wpscanteam/wpscan/wiki/WordPress-Plugin-Security-Testing-Cheat-Sheet

Imperva WAF Bypass | TechAnarchy
January 21, 2021 at 10:49:56 AM UTC - permalink -

- https://techanarchy.net/blog/imperva-waf-bypass

Subdomain Finder
January 15, 2021 at 2:19:44 PM UTC - permalink -

- https://subdomainfinder.c99.nl/

bgp.he.net/jf
January 13, 2021 at 2:21:21 PM UTC - permalink -

- https://bgp.he.net/jf

Subdomain Enumeration: 2019 Workflow
January 7, 2021 at 3:27:19 PM UTC - permalink -

- https://0xpatrik.com/subdomain-enumeration-2019/

poc/dwrcs_dwDrvInst_rce.py at master · tenable/poc
December 17, 2020 at 1:25:49 PM UTC * - permalink -

- https://github.com/tenable/poc/blob/master/Solarwinds/Dameware/dwrcs_dwDrvInst_rce.py

PsExec Local Privilege Escalation | by David Wells | Tenable TechBlog | Dec, 2020 | Medium
December 11, 2020 at 9:43:45 AM UTC * - permalink -

- https://medium.com/tenable-techblog/psexec-local-privilege-escalation-2e8069adc9c8

(325) Exploitation of a Samsung Galaxy Note 10+ Zero-Click RCE Bug via MMS - YouTube
December 10, 2020 at 5:08:48 PM UTC - permalink -

- https://www.youtube.com/watch?v=nke8Z3G4jnc&ab_channel=MateuszJurczyk

CloudPentestCheatsheets/AWS.md at master · dafthack/CloudPentestCheatsheets
December 7, 2020 at 2:46:19 PM UTC - permalink -

- https://github.com/dafthack/CloudPentestCheatsheets/blob/master/cheatsheets/AWS.md

endpoints.office.com/endpoints/worldwide?clientrequestid=b10c5ed1-bad1-445f-b386-b919946339a7
December 1, 2020 at 11:29:43 AM UTC - permalink -

- https://endpoints.office.com/endpoints/worldwide?clientrequestid=b10c5ed1-bad1-445f-b386-b919946339a7

blacklanternsecurity/TREVORspray: A featureful round-robin SOCKS proxy and Python O365 sprayer based on MSOLSpray which uses the Microsoft Graph API
November 28, 2020 at 1:26:07 PM UTC - permalink -

- https://github.com/blacklanternsecurity/TREVORspray

proxycannon/proxycannon-ng: A private botnet using multiple cloud environments for pentesters and red teamers. - Built by the community during a hackathon at the WWHF 2018 security conference
November 28, 2020 at 1:13:26 PM UTC - permalink -

- https://github.com/proxycannon/proxycannon-ng

Path to Process Injection — Bypass Userland API Hooking | by Seemant Bisht | Nov, 2020 | Medium
November 27, 2020 at 6:58:26 PM UTC * - permalink -

- https://securitytimes.medium.com/path-to-process-injection-bypass-userland-api-hooking-a8a49ae5def6

moohax/Proof-Pudding: Copy cat model for Proofpoint
November 24, 2020 at 11:27:06 AM UTC - permalink -

- https://github.com/moohax/Proof-Pudding

InsertScript: ImageMagick - Shell injection via PDF password
November 23, 2020 at 2:15:09 PM UTC - permalink -

- https://insert-script.blogspot.com/2020/11/imagemagick-shell-injection-via-pdf.html

shhgit: find secrets in real time across GitHub, GitLab and BitBucket
November 23, 2020 at 2:04:04 PM UTC - permalink -

- https://www.shhgit.com/

(292) 118 Attacking ADFS Endpoints with PowerShell Karl Fosaaen - YouTube
November 22, 2020 at 11:33:41 PM UTC - permalink -

- https://www.youtube.com/watch?v=oTyLdAUjw30&feature=emb_logo

Bypassing LSA Protection (aka Protected Process Light) without Mimikatz on Windows 10 - RED CURSOR
November 20, 2020 at 12:41:31 AM UTC - permalink -

- https://www.redcursor.com.au/blog/bypassing-lsa-protection-aka-protected-process-light-without-mimikatz-on-windows-10