LSASS Encrypted Dump

https://sp00ks-git.github.io/posts/LSASS-Encrypted-Dump/

#lsass #dump

Kubernetes Security Checklist and Requirements

https://github.com/Vinum-Security/kubernetes-security-checklist

#kubernetes #checklist

Shellcode Injection Techniques

A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload.

https://github.com/plackyhacker/Shellcode-Injection-Techniques

#inject #shellcode #csharp

ZipExec

Is a Proof-of-Concept (POC) tool to wrap binary-based tools into a password-protected zip file. This zip file is then base64 encoded into a string that is rebuilt on disk. This encoded string is then loaded into a JScript file that when executed, would rebuild the password-protected zip file on disk and execute it. This is done programmatically by using COM objects to access the GUI-based functions in Windows via the generated JScript loader, executing the loader inside the password-protected zip without having to unzip it first. By password protecting the zip file, it protects the binary from EDRs and disk-based or anti-malware scanning mechanisms.

https://github.com/Tylous/ZipExec

#redteam #netsec

LOLBAS WorkFolders.exe

"C:\Windows\System32\WorkFolders.exe" (signed by MS) can be used to run arbitrary executables in the current working directory with the name control.exe. It's like a new rundll32.exe lolbin but for EXEs!

#lolbin #lolbas

Jira Unauthenticated Access to Screens

Exploit:

jira.example.com/rest/api/2/screens 

Note:
Depends on the Program, some accept it and some consider this Informational.

#jira #bugbounty

Utilizing Programmatic Identifiers (ProgIDs) for UAC Bypasses

https://v3ded.github.io/redteam/utilizing-programmatic-identifiers-progids-for-uac-bypasses

#uac #bypass #progid

Advanced Maldoc Techniques

MS Office File Formats — Advanced Malicious Document (Maldoc) Techniques
# https://medium.com/walmartglobaltech/ms-office-file-formats-advanced-malicious-document-maldoc-techniques-b5f948950fdf

Evasive VBA — Advanced Maldoc Techniques
# https://medium.com/walmartglobaltech/evasive-vba-advanced-maldoc-techniques-1365e9373f80

VBA Stomping — Advanced Maldoc Techniques
# https://medium.com/walmartglobaltech/vba-stomping-advanced-maldoc-techniques-612c484ab278

VBA Project Locked — Project is Unviewable
# https://medium.com/walmartglobaltech/vba-project-locked-project-is-unviewable-4d6a0b2e7cac

#vba #maldoc #advanced

OffensiveVBA

This repo covers some code execution and AV Evasion methods for Macros in Office documents

https://github.com/S3cur3Th1sSh1t/OffensiveVBA

#vba #offensive #maldoc

C3

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

https://github.com/FSecureLABS/C3

#c2 #cobaltstrike #redteam

Using Kerberos for Authentication Relay Attacks

https://googleprojectzero.blogspot.com/2021/10/using-kerberos-for-authentication-relay.html

#kerberos #relay

#meme

Sad 🙁

https://hackerone.com/reports/1209098

LFI Bypass

1) /usr/bin/cat /etc/passwd == /???/???/c?t$IFS/?t?/p?s?wd
2) /*/?at$IFS/???/???swd
3)/****/?at$IFS/???/*swd
4)/****/?at$IFS/???/*******swd

(IFS is Internal Field Separator = [space], [tab] or a [newline])

#bugbounty #bugbountytips #lfi

For someone, who didn't notice this link in our posts

https://j00ru.vexillium.org/syscalls/nt/64/

#maldev #call #table #syscall

SharpSystemTriggers

Collection of remote authentication triggers in C#

https://github.com/cube0x0/SharpSystemTriggers

#coerce #authentication #petitpotam #spoolsample #dcom

Blue Team Notes

A collection of one-liners, small scripts, and some useful tips for blue team work.

https://github.com/Purp1eW0lf/Blue-Team-Notes

#blueteam #cheatsheet

Thread Stack Spoofing

A PoC implementation for an advanced in-memory evasion technique that spoofs Thread Call Stack. This technique allows to bypass thread-based memory examination rules and better hide shellcodes while in-process memory.

https://github.com/mgeeky/ThreadStackSpoofer

#stackspoofing #av #evasion #inject #shellcode #bypass #edr