All posts in Uncategorized

■■■■□ Exploit Development: No Code Execution? No Problem! Living The Age of VBS, HVCI, and Kernel CFG. https://connormcgarr.github.io/hvci/ https://t.me/cKure/14201

■■■■■ Exploit Development: Browser Exploitation on Windows – CVE-2019-0567, A Microsoft Edge Type Confusion. Part 3: https://connormcgarr.github.io/type-confusion-part-3/ https://t.me/cKure/14200

■■■■■ Windows Internals: Part 1 – Dissecting Secure Image Objects. https://connormcgarr.github.io/secure-images/ https://t.me/cKure/14199

Hacking Millions of Modems (owned by an ISP). A story by Sam Curry. https://samcurry.net/hacking-millions-of-modems https://t.me/cKure/14197

■■■□□ Data-Leak (#unclassified): Google accidentally published internal ‘Search’ documentation to GitHub. https://arstechnica.com/gadgets/2024/06/google-accidentally-published-internal-search-documentation-to-github/ https://t.me/cKure/14196

■■■■□ [Linux Kernel Exploitation 0x1] Smashing Stack Overflows in the Kernel. https://blog.k3170makan.com/2020/11/linux-kernel-exploitation-0x1-smashing.html?m=1 https://t.me/cKure/14195

■■■□□ Telegram Combolists and 361M Email Addresses. https://www.troyhunt.com/telegram-combolists-and-361m-email-addresses/ https://t.me/cKure/14194

Air-Gap Bypass: Various Methods for Extracting Information from Isolated Systems. https://github.com/seyedhojjathosseini/Advanced-Methods-for-Extracting-Information-from-Isolated-Systems https://t.me/cKure/14192

■■■■■ Exploit-code | Zero-Day: CVE-2024-27348 (RCE) – Unauth users can execute commands via Groovy injection in Apache HugeGraph-Server. Fix: Upgrade to version 1.3.0 Python Scanner: https://github.com/Zeyad-Azima/CVE-2024-27348 https://t.me/cKure/14189

■■■■□ Hunting for Network Share Discovery. https://www.splunk.com/en_us/blog/security/sharing-is-not-caring-hunting-for-file-share-discovery.html https://t.me/cKure/14188