All posts tagged telegram

■■■■■ Hunting bugs in Nginx JavaScript engine (njs). https://0xbigshaq.github.io/2024/05/24/njs-vr-bugs/ https://t.me/cKure/14178

■■■■■ Exploiting n-day in Home Security Camera. https://0xbigshaq.github.io/2024/01/05/tp-link-tapo-c100/ https://t.me/cKure/14177

■■■■■ Abusing Active Directory Certificate Services. Part 1: Abusing Active Directory Certificate Services – Part One Part 2: Abusing Active Directory Certificate Services – Part 2 Part 3: Abusing Active Directory Certificate Services (Part 3) Part 4: https://www.blackhillsinfosec.com/abusing-active-directory-certificate-services-part-4/ https://t.me/cKure/14176

■■■■□ Python for Dark Web OSINT : Automate Threat Monitoring. https://medium.com/@ervin.zubic/python-for-dark-web-osint-automate-threat-monitoring-5994b63c4d4a https://t.me/cKure/14175

● Yet another website pub.expmon.com (File Sandbox) https://t.me/cKure/14174

■■■■■ Chaining N-days to Compromise All Part 1 — Chrome Renderer RCE. https://blog.theori.io/chaining-n-days-to-compromise-all-part-1-chrome-renderer-rce-1afccf56721b Part 2 — Windows Kernel LPE (a.k.a Chrome Sandbox Escape). https://blog.theori.io/chaining-n-days-to-compromise-all-part-2-windows-kernel-lpe-a-k-a-chrome-sandbox-escape-44cb49d7a4f8 Part 3 — Windows Driver LPE: Medium to System. https://blog.theori.io/chaining-n-days-to-compromise-all-part-3-windows-driver-lpe-medium-to-system-12f7821d97bb Part 4 — VMware Workstation Information leakage. https://blog.theori.io/chaining-n-days-to-compromise-all-part-4-vmware-workstation-information-leakage-44476b05d410 Part 5 — VMware Workstation Guest-to-Host Escape. https://blog.theori.io/chaining-n-days-to-compromise-all-part-5-vmware-workstation-host-to-guest-escape-5a1297e431b5 https://t.me/cKure/14173

■■■■□ Exploiting Windows Kernel Wild Copy With User Fault Handling (CVE-2023–28218). https://blog.theori.io/exploiting-windows-kernel-wild-copy-with-user-fault-handling-cve-2023-28218-89f5189d0926 https://t.me/cKure/14172

■■■■□ Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code — inside the Copilot+ Recall disaster. https://doublepulsar.com/recall-stealing-everything-youve-ever-typed-or-viewed-on-your-own-windows-pc-is-now-possible-da3e12e9465e https://t.me/cKure/14171

■■□□□ Cyber-Crime: Head of Israeli intelligence Mossad threatened ICC prosecutor and her family for investigating war crimes committed by Israel. The phones were hacked, and other cyber tools were used by the eternal jew https://youtube.com/shorts/PE6kts0VcwY #Genocide #WarCrime https://t.me/cKure/14170

■■■■□ SMB Enumeration Cheatsheet. https://0xdf.gitlab.io/2024/03/21/smb-cheat-sheet.html https://t.me/cKure/14169