#Offensive_security
"Bypass EDR’s memory protection, introduction to hooking", 2020.

]-> AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence":
https://github.com/hoangprod/AndrewSpecial/tree/master

📰
📚

#Offensive_security
Exploit Persistent XSS And Unsanitized Injection Vectors For Layer 2 Bypass And COOLHANDLUKE Protocol Creation

// demonstrates leveraging cross site scripting and polyglot exploitation in an exploit COOLHANDLUKE to violate network segmentation / L2 VLAN policies while routing and sending a file between isolated, air gapped networks without a router. This issue affects HP Procurve, Aruba Networks, Cisco, Dell, Netgear products
📰
📚

#Offensive_security
Black Hat Asia 2022:
"Bypass Control Flow Guard (CFG) in Chrome".


📚

#Offensive_security
Delegating Kerberos to bypass Kerberos delegation limitation
https://www.thehacker.recipes/ad/movement/kerberos/delegations

📰
📚

#Offensive_security
"BeaconFuzz:
A Journey into Ethereum 2.0 Blockchain Fuzzing and Vulnerability Discovery",.

t.iss.one/Library_Sec

#Offensive_security
Cross-site scripting (XSS) cheat sheet, 2022.
]-> https://portswigger.net/web-security/cross-site-scripting/cheat-sheet#file-upload-attacks

t.iss.one/Library_Sec

#Whitepaper
#Offensive_security
"Building an Intelligent, Automated Tiered Phishing System: Matching the Message Level to User Ability", 2022.

t.iss.one/Library_Sec

PIC Your Malware! (.pdf)
]-> PIC lsass dumper using cloned handles:
https://github.com/codewhitesec/HandleKatz
#malware
#Offensive_security
t.iss.one/library_Sec

"EVIL: Exploiting Software via Natural Language", 2021.
// Approach to automatically generate software exploits in assembly/Python language from descriptions in natural language
]-> https://github.com/dessertlab/EVIL


#Offensive_security
t.iss.one/library_Sec

#PDF
#AWE
#Offensive_Security
#Security
=-=-=-==-=-=-=-==-=-=-=-=-=
📚 t.iss.one/library_Sec