All posts by cK-bot

■■■■□ What’s in a Name? Writing custom DNS tunnelling protocol, exploiting unexpected AWS Lambda misconfiguration – in a web app Pen test (Part 1). https://labs.jumpsec.com/whats-in-a-name-writing-custom-dns-tunnelling-protocol-on-the-fly-exploiting-unexpected-aws-lambda-misconfiguration-all-in-a-web-app-pen-test-part-1/ https://t.me/cKure/14234

■■■□□ Chisel-Strike: A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities. https://github.com/m3rcer/Chisel-Strike https://t.me/cKure/14233

■■□□□ TotalRecall: This tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC’s activity snapshots. https://github.com/xaitax/TotalRecall https://t.me/cKure/14232

■□□□□ Cadiclus – Privilege Escalation Tool for Linux Systems that use PowerShell. https://github.com/tjnull/pentest-arsenal/tree/main/Cadiclus https://t.me/cKure/14231

■■■■■ Search & Parse Password Leaks. https://github.com/JoelGMSec/LeakSearch https://t.me/cKure/14228

■■■■□ SolarWinds Patches High-Severity Vulnerability Reported by NATO Pentester. https://www.securityweek.com/solarwinds-patches-high-severity-vulnerability-reported-by-nato-pentester/ https://t.me/cKure/14227

■■■■■ An Introduction to Chrome Exploitation – Maglev Edition. The post includes CVE-2023-4069. https://www.matteomalvica.com/blog/2024/06/05/intro-v8-exploitation-maglev/ https://t.me/cKure/14225

■■□□□ Bypass Windows Defender 2024. https://youtu.be/NmB2MPAafTo https://t.me/cKure/14224

■■■■■ Becoming any Android app via Zygote command injection. https://rtx.meta.security/exploitation/2024/06/03/Android-Zygote-injection.html https://t.me/cKure/14222

■■■■□ SSD Advisory – Linux Kernel Nft_validate_register_store Integer Overflow Privilege Escalation. https://ssd-disclosure.com/ssd-advisory-linux-kernel-nft_validate_register_store-integer-overflow-privilege-escalation/ https://t.me/cKure/14221