All posts in Uncategorized

■■■■■ LDAP Queries for Offensive and Defensive Operations. https://www.politoinc.com/post/ldap-queries-for-offensive-and-defensive-operations https://t.me/cKure/13703

■■■■■ BlueSpy – Spying on Bluetooth conversations. https://www.tarlogic.com/blog/bluespy-spying-on-bluetooth-conversations/ https://t.me/cKure/13699

■■■■■ BlueSpy – PoC to record audio from a Bluetooth device. https://github.com/TarlogicSecurity/BlueSpy https://t.me/cKure/13697

■■■■■ SMB Enumeration Cheatsheet. https://0xdf.gitlab.io/2024/03/21/smb-cheat-sheet.html https://t.me/cKure/13695

Chaining N-days to Compromise All: Part 1 — Chrome Renderer RCE. https://blog.theori.io/chaining-n-days-to-compromise-all-part-1-chrome-renderer-rce-1afccf56721b https://t.me/cKure/13693

■■■■■ Browser Exploitation on Windows! CVE-2019-0567, A Microsoft Edge Type Confusion Vulnerability (Part 2): https://connormcgarr.github.io/type-confusion-part-2/ CVE-2019-0567, A Microsoft Edge Type Confusion Vulnerability (Part 3): https://connormcgarr.github.io/type-confusion-part-1/ https://t.me/cKure/13691

■■■■■ HiddenVM — Use any desktop OS without leaving a trace. https://github.com/aforensics/HiddenVM https://t.me/cKure/13689

■■■■□ Pwned by the Mail Carrier – How does MS Exchange on-premises compromise Active Directory? https://posts.specterops.io/pwned-by-the-mail-carrier-0750edfad43b https://t.me/cKure/13688

Security researchers have released a proof-of-concept (PoC) exploit for a critical vulnerability in Fortinet’s FortiClient Enterprise Management Server (EMS) software, which is now actively exploited in attacks. Tracked as CVE-2023-48788, this security flaw is an SQL injection in the DB2 Administration Server (DAS) component discovered and reported by the UK’s National Cyber Security Centre (NCSC).…

■■■■□ TP-Link TDDP Buffer Overflow Vulnerability. TP-Link’s TDDP programs listening on UDP port 1040, fails to properly verify data length during parsing, leading to memory overflow destroying the memory structure and causing a denial of service. https://boschko.ca/tp-link-tddp-bof/ https://t.me/cKure/13686