Not_H

Penetration Test , Write Page , Analysis Code

[Not_H @Noth72013441]

@cyku_tw 師傅，外網初始點最難 🤣

[曾哥 @AabyssZG]

【情报】新Windows提权漏洞CVE-2024-35250🚨
PoC for the Untrusted Pointer Dereference in the ks.sys driver😢
Github地址：https://t.co/qHy6OicYzT
提权适用的Windows版本挺多的，但动作很明显，实测大部分XDR都拦截动态行为了🫣
#cybersecurity #CyberSafety #redteam #blueteam #exploit #CVE

[Weasel Sec @Weasel_Sec]

https://t.co/WRWkUAfz2I

GodPotato can be found at https://t.co/QQSMUxehRs

Tested on Windows 10 (fully patched)

[The Shadowserver Foundation @Shadowserver]

We are reporting Microsoft Exchange Server CVE-2023-36439 vulnerable IPs (post-auth RCE). Over 63K vulnerable worldwide. Patch released Nov 14th - https://t.co/pBGFiK2uSD

IP data for your constituency in https://t.co/ApcM9HwiOK

Dashboard tracker - https://t.co/MIDRauQ7SQ

[Cyku @cyku_tw]

參與紅隊無數次打 Windows AD 的經驗總結下來，
我得到了四個字的滲透心法：花式登入。

不是隨時都有 ZeroLogon、CVE-2022–26923 這種無視限制可以直搗黃龍的漏洞，所以平時滲透的不二法門果然還是想盡辦法撈到密碼登入就對了！

[CVE @CVEnew]

CVE-2020-28040 WordPress before 5.5.2 allows CSRF attacks that change a theme's background image. https://t.co/8JZA27tZhL

[Not_H @Noth72013441]

@kenanistaken @66ed3gs Yes ! you are right !
Don't rush

[Not_H @Noth72013441]

@CVEnew Thanks you !

[Not_H @Noth72013441]

@CVEnew Hi~ I have sent you a CVE application, but no response has been received .... [email protected]