Follow the evidence.

URL https://twitter.com/wabafet1

Indicator published by the cited source.

An Open Letter to the Japanese Government on Cybersecurity

An Open Letter to the Japanese Government on Cybersecurity Credits John Github: https://github.com/johnjhacking Daichi Twitter: https://twitter.com/da1mshlomd Background Every nation that has grown in the Cybersecurity space has felt the woes of malicious threat actors exploiting their systems. The United States for instance, has felt the pain of continued occurrences of ransomware, with one of th

The Ultimate CRTO Preparation Guide

The Ultimate CRTO Preparation Guide Understanding this Guide The CRTO (Certified Red Team Operator) course is offered through Zero Point Security. Originally, I had purchased the course when the exam was on version 1, and the entire course was organized in a different way. I stopped working on the course because I kept having issues with the initial access part of the lab environment because of th

URL https://twitter.com/rej_ex

Indicator published by the cited source.

OSCP Reborn - 2023 Exam Preparation Guide

OSCP Reborn - 2023 Exam Preparation Guide Prologue Many of you are likely aware that the Offensive Security Certified Professional Exam was revised, with the changes officially published on January 11, 2022. The old version of the exam required the student to perform a buffer overflow attack (it still may end up on your exam, but is not a guarantee). Since then, the model has shifted towards an ac

URL https://twitter.com/sickcodes

Indicator published by the cited source.

research1_section2

URL https://github.com/nicksahler

Indicator published by the cited source.

URL https://www.linkedin.com/in/huntharo

Indicator published by the cited source.

CVE-2021-24495: Improper Neutralization of Input During Web Page Generation on ‘id’ parameter in Wordpress Marmoset Viewer Plugin versions 1.9.3 ≤ leads to Reflected Cross Site Scripting

Credits John Github: https://github.com/johnjhacking Jackson Henry [Helped simplify the payload] Twitter: https://twitter.com/JacksonHHax Wabaf3t [Provided post-code analysis/looked for escalation] Twitter: https://twitter.com/wabafet1 Kelly Kaoudis [Reviewed the writeup] Twitter: https://twitter.com/kaoudis Robert Willis [Reviewed the writeup] Twitter: https://twitter.com/rej_ex Erwan [Identified

URL https://github.com/sleventyeleven/linuxprivchecker/blob/master/linuxprivchecker.py

Indicator published by the cited source.

ressearch2_section3

URL https://example.com/wp-content/plugins/marmoset-viewer/mviewer.php?width=640&height=360&autostart=1&transparantbg=1&nui=1&id=https:/example.com/wp-content/uploads/2020/02/Golems_v2.mview

Indicator published by the cited source.

CVE-2022-27226: CSRF to RCE in iRZ Mobile Routers through 2022-03-16

Credits Vulnerability Discovery John Chris Mack Exploit Development Stephen Chavez Robert Willis Identification Default credentials were discovered on an iRZ Mobile Router login page. Utilizing root:root gave us access to the administrative functionality for the device. Having administrative access allows for various manipulation. Any setting that can be modified by an administrator was accessible

URL https://github.com/johnjhacking

Indicator published by the cited source.

URL https://github.com/sickcodes

Indicator published by the cited source.

research7_section1

research4_section1

Spear Phishing with Zix: An Undisclosed Red Team Method for the Hungry APT

Background Typically, organizations utilize Zix Secure Messaging as a convenient alternative to Dropbox or other file sharing related tools because it’s easier to share sensitive information with users outside of the organization. Shadow IT has always been a standing issue among large enterprises and the ability to securely share files and communications with vendors, clients, and colleagues is a

P1: Critical - Discovering and Foiling a Threat Actor

P1: Critical - Discovering and Foiling a Threat Actor Disclaimers, Credits: Thank you to everyone who helped validate any part of the project. It took a lot of work to figure out the extent of who was/is affected. I appreciate all of the help that we have received, with a special thank you to those who confirmed our suspicions. As a general rule of thumb, we will have to redact specific parts of t

CVE-2021-23827: Sakura Samurai discover cleartext pictures in Keybase Desktop Client; Windows, macOS, Linux

Credits John Github: https://github.com/johnjhacking Aubrey Cottle Twitter: https://twitter.com/Kirtaner Jackson Henry Twitter: https://twitter.com/JacksonHHax Robert Willis Twitter: https://twitter.com/rej_ex Identification During security research, John Jackson stumbled upon the Keybase Client directories and decided to take a look considering Keybase operates a Bug Bounty Program. Within severa

URL https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/linPEAS

Indicator published by the cited source.

Google Earth Hacking - EaaS (Espionage as a Service)

Credits John Github: https://github.com/johnjhacking Molly White Twitter: https://twitter.com/molly0xFFF Zultan Twitter: https://twitter.com/orpheus9001 Summary First and foremost, we may have taken the phrase “Hack the Planet” a little too serious. Google Earth Enterprise is an application that is utilized by Scientific, Government, Military and Educational organizations. We discovered that GEE d

URL https://github.com/jondonas/linux-exploit-suggester-2

Indicator published by the cited source.