IOCs

pwnpwnpwn

[unSafe.sh Bot @buaqbot]

ThinkPHP框架漏洞总结+Thinkphp自动化武器
https://t.co/51PqF2enCM
https://t.co/hCZ8vlp6FL

[曾哥 @AabyssZG]

最近出了ThinkPHP<6.0.14 RCE漏洞
相关情况：https://t.co/wNC6PTWRvT
初步细节：
/index.php?s=index/index/index/think_lang/../../extend/pearcmd/pearcmd/index&cmd=whoami
#thinkphp #RCE

[Hacking Articles @hackinarticles]

Cyber Security Domains

#infosec #cybersecurity #pentesting #redteam #informationsecurity #CyberSec #networking #networksecurity #infosecurity #cyberattacks #security #linux #cybersecurityawareness #bugbounty #bugbountytips

[Mike Takahashi @TakSec]

Google Dork - all the juicy extensions

site:"target[.]com" ext:log | ext:txt | ext:conf | ext:cnf | ext:ini | ext:env | ext:sh | ext:bak | ext:backup | ext:swp | ext:old | ext:~ | ext:git | ext:svn | ext:htpasswd | ext:htaccess

[0xor0ne @0xor0ne]

A few years old but still a great research work on Wi-Fi stack exploitation by Gal Beniamini.
(Broadcom chipsets)

Part 1: https://t.co/gy5Sb3SvBm
Part 2: https://t.co/O7hAQqNv4q
Part 3: https://t.co/UMlWTKHdM4

#wifi #80211 #infosec #cybersecurity #hacking

[Rocco Calvi @TecR0c]

🚨 Just disclosed CVE-2023-28760: a critical RCE vulnerability in TP-Link AX1800 Wi-Fi 6 Routers! Update your firmware ASAP!

🔗 Blog post: https://t.co/XNwYBSQpED
🔗 Exploit code: https://t.co/sAXL8F8BfQ

[_0xf4n9x_ @_0xf4n9x_]

#CVE-2023-28432 #MinIO Information Disclosure in Cluster Deployment

Affected versions:
MinIO RELEASE.2019-12-17T23-16-33Z <= version < MinIO RELEASE.2023-03-20T20-16-18Z

Ref:
https://t.co/9a8uJyi7Kl
https://t.co/hyhMXycibt

[securfreakazoid @securfreakazoid]

GCP exploitation & lateral movement write up! - @securfreakazoid

https://t.co/20j3QtoTno

[Florian Hansemann @CyberWarship]

"Offensive WMI - The Basics (Part 1)"

#infosec #pentest #redteam
https://t.co/85EXqUj5R3

[浅蓝 @b1u3r]

fastjson 1.2.80 autotype bypass 反序列化漏洞
https://t.co/TqsDniEz8e

[RedDrip Team @RedDrip7]

Seems #Lazarus uses #cryptocurrency as a bait to attack #Korean by using #EPS vulnerability to inject shellcode into expoler.exe and download subsequent backdoor from https://t.co/QdnmieSLnM.

https://t.co/cgn9X2uBmm

[IOCs @w0zoo]

cool

[Panos Gkatziroulis 🦄 @ipurple]

backdoorfactory - A from-scratch rewrite of The Backdoor Factory - a MitM tool for inserting shellcode into all types of binaries on the wire https://t.co/kFYNRxb7r5

[Florian Hansemann @CyberWarship]

UAC bypass via dll hijacking and mock directories

#infosec #pentest #redteam
https://t.co/FjrOz4lKOy

[Hakin9 @Hakin9]

Jackdaw - Tool To Collect All Information In Your Domain https://t.co/jWczyTvyYk

#infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource #linux #windows #osint #email #socmint #cyberattack

[Brandon Rossi @0xConda]

Here's a cool repo that lists CVE PoCs that are posted to GitHub.

Super useful when looking for exploits.

https://t.co/jzYTU2PV0U

[IOCs @w0zoo]

5.0.24 is cool

[drivertom @drivertomtt]

Reproduced a POP Chain on #ThinkPHP 5.0.24!(Don't OCR the payload,I'll release the POC tomorrow)
#hacking

[Vulmon Vulnerability Feed @VulmonFeeds]

CVE-2019-2795

概述
该项目用于存放一些平时写的漏洞检测/利用脚本，不出意外会持续更新。
已有POC

thinkphp v5 RCE漏洞
Confluence RCE漏洞，编号CVE-2019-3396
Weblogic wls async unserialization RCE漏洞，编号CVE-2019-2795

https://t.co/4trOTHalI2

[BleepingComputer @BleepinComputer]

Critical GitLab vulnerability lets attackers take over accounts - @serghei
https://t.co/s1Q0tnJnV6

[Stephen Fewer @stephenfewer]

Here's my writeup of the 4 bugs from my Cisco exploit at pwn2own 👇

[Hakin9 @Hakin9]

Crack WPA/WPA2 Wi-Fi Routers with Aircrack-ng and Hashcat by Brannon Dorsey https://t.co/DMGczW4tqm

#infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource #webapp #programming #wifi #wireless #wpa