SensePost | Blog | Heap
August 18, 2020 at 4:00:39 PM UTC - permalink -

- https://sensepost.com/blog/heap/

Demo for the 44con "Trusts You Might Have Missed" presentation
August 17, 2020 at 12:56:17 PM UTC - permalink -

- https://gist.github.com/HarmJ0y/5837c037f28d5ee540a944adf8ea35d7

How to Generate Mixed Source and Assembly List from Source Code using GCC - SysTutorials
August 12, 2020 at 2:52:58 PM UTC - permalink -

- https://www.systutorials.com/generate-a-mixed-source-and-assembly-listing-using-gcc/

Flangvik/SharpCollection: Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.
August 11, 2020 at 8:45:27 AM UTC - permalink -

- https://github.com/Flangvik/SharpCollection

Detecting Kerberoasting Activity Part 2 – Creating a Kerberoast Service Account Honeypot – Active Directory Security
July 31, 2020 at 9:28:38 AM UTC - permalink -

- https://adsecurity.org/?p=3513

ayoul3/reflect-pe: Reflectively load PE
July 29, 2020 at 2:03:29 PM UTC - permalink -

- https://github.com/ayoul3/reflect-pe

matterpreter/DefenderCheck: Identifies the bytes that Microsoft Defender flags on.
July 24, 2020 at 8:11:18 AM UTC - permalink -

- https://github.com/matterpreter/DefenderCheck

DissectMalware/XLMMacroDeobfuscator: Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)
July 18, 2020 at 12:29:37 AM UTC - permalink -

- https://github.com/DissectMalware/XLMMacroDeobfuscator

OSINT Framework
July 18, 2020 at 12:23:19 AM UTC - permalink -

- https://osintframework.com/

sevagas/macro_pack: macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.
July 16, 2020 at 9:50:08 AM UTC - permalink -

- https://github.com/sevagas/macro_pack

S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet: A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
July 14, 2020 at 9:24:05 PM UTC - permalink -

- https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet#sid-history-abuse

SYLKin Attack: New Malicious .slk files are bypassing Microsoft 365 Security, Risking 200M+ Users
July 10, 2020 at 9:27:42 AM UTC - permalink -

- https://www.avanan.com/blog/sylkin-attack-bypassing-microsoft-365-security-risking-users

Traduction de Phrack
July 8, 2020 at 8:34:20 AM UTC - permalink -

- https://www.arsouyes.org/phrack-trad/

(87) AWS re:Inforce 2019: The Fundamentals of AWS Cloud Security (FND209-R) - YouTube
July 1, 2020 at 12:22:42 PM UTC - permalink -

- https://www.youtube.com/watch?v=-ObImxw1PmI

Attack Spring Boot Actuator via jolokia Part 2
June 26, 2020 at 1:54:48 PM UTC * - permalink -

- https://paper.seebug.org/851/

Covenant, Donut, TikiTorch
June 26, 2020 at 1:53:08 PM UTC - permalink -

- https://rastamouse.me/2019/08/covenant-donut-tikitorch/

Exploiting ViewState Deserialization using Blacklist3r and YSoSerial.Net - NotSoSecure
June 26, 2020 at 9:26:55 AM UTC - permalink -

- https://www.notsosecure.com/exploiting-viewstate-deserialization-using-blacklist3r-and-ysoserial-net/

SecNiche Security Labs - /root@labs:~#
June 25, 2020 at 2:21:14 PM UTC - permalink -

- http://sparty.secniche.org/

security - Under Linux, is it possible to encrypt a folder/partition in a way that it is not accessible to anyone without the password? - Super User
June 23, 2020 at 6:45:33 PM UTC - permalink -

- https://superuser.com/questions/1051557/under-linux-is-it-possible-to-encrypt-a-folder-partition-in-a-way-that-it-is-no

Create A Windows Service In C#
June 20, 2020 at 2:20:51 PM UTC - permalink -

- https://www.c-sharpcorner.com/article/create-windows-services-in-c-sharp/