Privilege escalation with polkit: How to get root on Linux with a seven-year-old bug (CVE-2021-3560)

https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/

d0zer
Elf binary infector written in Golang. It can be used for infecting executables of type ET_DYN and ET_EXEC with a payload of your creation. Utilizing the classic elf text segment padding algorithm by Silvio Cesar, your payload (parasite) will run before native functionality of the binary effectively backooring the binary.

https://github.com/sad0p/d0zer

A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.

https://github.com/optiv/Dent

DarkLoadLibrary (Bypassing Image Load Kernel Callbacks)

LoadLibrary for offensive operations.

https://github.com/bats3c/DarkLoadLibrary

Advanced Web Application Penetration Testing JWT Security Issues

https://youtu.be/z1FL0lG_8ds

AutoHarness is a tool that automatically generates fuzzing harnesses for you

https://github.com/parikhakshat/autoharness

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows.

https://github.com/0vercl0k/wtf

Details about four in-the-wild 0-day campaigns targeting four separate vulnerabilities we’ve discovered so far this year: 
• CVE-2021-21166 and CVE-2021-30551 in Chrome,
• CVE-2021-33742 in Internet Explorer, and
• CVE-2021-1879 in WebKit (Safari).

https://blog.google/threat-analysis-group/how-we-protect-users-0-day-attacks/

CVE-2021-31956 Exploiting the Windows Kernel (NTFS with WNF) – Part 1

https://research.nccgroup.com/2021/07/15/cve-2021-31956-exploiting-the-windows-kernel-ntfs-with-wnf-part-1/amp/#click=https://t.co/zfXvokBcHW

OpenSecurityTraining2 public betas of refreshed classes on x86-64 assembly, x86-64 OS internals, and coreboot are now open - https://ost2.fyi

Deep Learning for Network Traffic Monitoring and Analysis (NTMA): A Survey

SAM: Self-Attention based Deep Learning Method for Online Traffic Classification

Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.

https://github.com/lyft/cartography

Neutron: an attention-based neural decompiler

Coda: An End-to-End Neural Program Decompiler

PetitPotam
PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw function.

https://github.com/topotam/PetitPotam

An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.

https://github.com/yardenshafir/PoolViewer