ASPJinjaObfuscator
https://ift.tt/mQgyG3S

Discuss on Reddit : https://ift.tt/dmQO4Cr
@redteamalerts

GitHub

GitHub - fin3ss3g0d/ASPJinjaObfuscator: Heavily obfuscated ASP web shell generation tool.

Heavily obfuscated ASP web shell generation tool. Contribute to fin3ss3g0d/ASPJinjaObfuscator development by creating an account on GitHub.

Peco602/cobaltstrike-aggressor-scripts: A collection of Cobalt Strike Aggressor scripts.
https://ift.tt/DgCW8NH

Discuss on Reddit : https://ift.tt/l3scXfp
@redteamalerts

GitHub

GitHub - Peco602/cobaltstrike-aggressor-scripts: A collection of Cobalt Strike Aggressor scripts.

A collection of Cobalt Strike Aggressor scripts. Contribute to Peco602/cobaltstrike-aggressor-scripts development by creating an account on GitHub.

EvilLsassTwin - PPL Bypass, Fast 12MB In-Memory Dumps
https://ift.tt/N9k5LwS

Discuss on Reddit : https://ift.tt/4bZIEqa
@redteamalerts

GitHub

Nimperiments/EvilLsassTwin at main · RePRGM/Nimperiments

Various one-off pentesting projects written in Nim. Updates happen on a whim. - RePRGM/Nimperiments

apt44-unearthing-sandworm
https://ift.tt/rFIkiRW

Discuss on Reddit : https://ift.tt/3iVb9SZ
@redteamalerts

Attackers exploiting new critical OpenMetadata vulnerabilities on Kubernetes clusters
https://ift.tt/BcgvlPQ

Discuss on Reddit : https://ift.tt/XjS9D3J
@redteamalerts

Microsoft Security Blog

Attackers exploiting new critical OpenMetadata vulnerabilities on Kubernetes clusters | Microsoft Security Blog

Microsoft recently uncovered an attack that exploits new critical vulnerabilities in OpenMetadata to gain access to Kubernetes workloads and leverage them for cryptomining activity.

An Obscure GitHub Actions Workflow Vulnerability in Google’s Flank
https://ift.tt/YyPAuhk

Discuss on Reddit : https://ift.tt/GYp3aTO
@redteamalerts

Adnan Khan's Blog

An Obscure Actions Workflow Vulnerability in Google’s Flank

Learn about how I used a custom tool to find a Google-owned repository vulnerable to GitHub Actions Poisoned Pipeline Execution Attack and earned a $7,500 bug bounty!

Blind Spot: how I get from Docker Registry To RCE
https://ift.tt/3GXPRvK

Discuss on Reddit : https://ift.tt/Ppygksu
@redteamalerts

Medium

Blind Spot: how I get from Docker Registry To RCE

Introduction

From S3 bucket to internal network operation
https://ift.tt/3Re8dZ9

Discuss on Reddit : https://ift.tt/Ecax82G
@redteamalerts

Medium

From S3 bucket to internal network operation

We are all familiar with AWS’s S3 buckets that became popular because of their different use cases. From hosting static files (Javascript…

Credential stuffing like an APT: 10 secrets for credentials harvesting
https://ift.tt/RUxdyV2

Discuss on Reddit : https://ift.tt/oMzRJqp
@redteamalerts

Medium

Credential stuffing like an APT: 10 secrets for credentials harvesting

Lately we heard about many different security breaches to some of the big brands out there, some of them like Microsoft were breached as a…

5 Methods I Use To Discover APIs
https://ift.tt/S98CurB

Discuss on Reddit : https://ift.tt/fXq9ODE
@redteamalerts

Medium

5 Methods I Use To Discover APIs

While working on a target, some of the most interesting parts to test is its API. APIs are dynamics, they get updated more often then other…