Shared Bookmarks

784 links

Links per page: 20 50 100

◄Older

page 25 / 40

Newer►

Advanced MSSQL Injection Tricks – PT SWARM
November 13, 2020 at 3:47:35 PM UTC - permalink -

- https://swarm.ptsecurity.com/advanced-mssql-injection-tricks/

sqli sql mssql injection tricks
HoangKien1020/CVE-2020-10239: CVE-2020-10239: Incorrect Access Control in com_fields SQL field-RCE- PoC

3.7.0 to 3.9.15
November 12, 2020 at 9:30:30 AM UTC - permalink -

- https://github.com/HoangKien1020/CVE-2020-10239

joomla sqli rce
The OXID Resolver [Part 1] - Remote enumeration of network interfaces without any authentication - Airbus CyberSecurity
November 11, 2020 at 2:38:47 PM UTC * - permalink -

- https://airbus-cyber-security.com/the-oxid-resolver-part-1-remote-enumeration-of-network-interfaces-without-any-authentication/

oxid resolver dcom impacket iobjectexporter
phra's blog ~ Technical posts about InfoSec
November 11, 2020 at 11:47:49 AM UTC - permalink -

- https://iwantmore.pizza/posts/PEzor.html

pezore av bypass packer donkey
РНР_wrappers.pdf
November 11, 2020 at 11:24:43 AM UTC - permalink -

- https://www.ptsecurity.com/upload/corporate/ru-ru/webinars/ics/%D0%90.%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B8%D0%BD_%D0%9E_%D0%B1%D0%B5%D0%B7%D0%BE%D0%BF_%D0%B8%D1%81%D0%BF_%D0%A0%D0%9D%D0%A0_wrappers.pdf

php wrappers exploitation
Orange: 十月 2018

" OK, by chaining above techniques(session upload progress + race condition + PHP wrappers), we can get the shell back!"
November 10, 2020 at 6:38:26 PM UTC - permalink -

- http://blog.orange.tw/2018/10/

php lfi upload rce sessions
Exploit with PHP Protocols / Wrappers - cdxy
November 10, 2020 at 4:41:29 PM UTC - permalink -

- https://www.cdxy.me/?p=752

php wrapper exploitation filters url include lfi rfi rce
PowerPoint Presentation - us-18-Thomas-It's-A-PHP-Unserialization-Vulnerability-Jim-But-Not-As-We-Know-It.pdf
November 10, 2020 at 12:07:26 PM UTC - permalink -

- https://raw.githubusercontent.com/s-n-t/presentations/master/us-18-Thomas-It%27s-A-PHP-Unserialization-Vulnerability-Jim-But-Not-As-We-Know-It.pdf

php unserialize wrapper phar filter
Heap Overflow.pdf
November 9, 2020 at 11:38:42 AM UTC - permalink -

- http://security.di.unimi.it/sicurezza1920/slides/Heap%20Overflow.pdf

heap overflow pwn houses
HackTheBox – Dream Diary: Chapter 1 – Stack Hound
November 9, 2020 at 11:38:23 AM UTC - permalink -

- https://stackhound.me/hackthebox-dream-diary-chapter-1/

heap overflow writeup dream diary dreamdiary htb goomba
ZoomEye - Cyberspace Search Engine
November 6, 2020 at 9:02:01 AM UTC - permalink -

- https://www.zoomeye.org/

zoomeye public www recon techno fragment
Inbox | Temporary Disposable Gmail
November 5, 2020 at 7:42:10 PM UTC - permalink -

- https://gmailnator.com/

gmail temp redteam
PublicWWW.com
November 2, 2020 at 8:18:12 PM UTC * - permalink -

- https://publicwww.com/

shodan public www publicwww services web databases
jas502n/CVE-2020-14882: CVE-2020–14882、CVE-2020–14883
November 2, 2020 at 2:57:38 PM UTC - permalink -

- https://github.com/jas502n/CVE-2020-14882

rce weblogic oracle
Introducing a new phishing technique for compromising Office 365 accounts

d3590ed6-52b3-4102-aeff-aad2292ab01c (Microsoft Office)
ea5a67f6-b6f3-4338-b240-c655ddc3cc8e (Microsoft Office)
57fb890c-0dab-4253-a5e0-7188c88b2bb4 (Office on the web)
08e18876-6177-487e-b8b5-cf950c1e598c (Office on the web)
bc59ab01-8403-45c6-8796-ac3ef710b3e3 (Outlook on the web)
https://docs.microsoft.com/en-us/office/dev/add-ins/develop/register-sso-add-in-aad-v2
October 29, 2020 at 9:09:26 AM UTC - permalink -

- https://o365blog.com/post/phishing/

phishing red team o365
Stackifier

https://beanstack.io/
October 28, 2020 at 4:52:10 PM UTC - permalink -

- http://www.stackifier.com/

stacktrace java
Process Herpaderping | herpaderping
October 28, 2020 at 4:10:40 PM UTC - permalink -

- https://jxy-s.github.io/herpaderping/

bypass signature kernel process herpaderping windows evasion edr av
Issues · FasterXML/jackson-databind
October 27, 2020 at 1:49:47 PM UTC - permalink -

- https://github.com/FasterXML/jackson-databind/issues?page=1&q=label%3ACVE

jackson deserialization gadgets java fastxml
Hping Tips and Tricks. Hping is a TCP/IP packet forging tool… | by Peter Kacherginsky | Medium
October 27, 2020 at 10:58:42 AM UTC * - permalink -

- https://medium.com/@iphelix/hping-tips-and-tricks-85698751179f

hping3 hping cheatsheet tips network scan stealth backdoor xmas ymas
nccgroup/keimpx: Check for valid credentials across a network over SMB
October 26, 2020 at 2:06:37 PM UTC - permalink -

- https://github.com/nccgroup/keimpx

tool spray ntlm windows

Links per page: 20 50 100

◄Older

page 25 / 40

Newer►