/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 gebir.ge
Remote Code Execution as a Service: A Privilege Escalation Journey | GEBIRGE
| | taeluralexis.com
TryHackMe Wreath Writeup - Tae'lur Alexis
0.8 parsecs away

Travel
| | We'll target a network comprising 3 machines, leveraging CVE exploits, pivoting, code obfuscation techniques, and AV bypass strategies.
| | parsiya.net
Attack Surface Analysis - Part 2 - Custom Protocol Handlers
1.7 parsecs away

Travel
| | [AI summary] The provided text is a detailed technical article discussing various methods and techniques for exploiting custom protocol handlers and command-line switches in applications. It covers topics such as UNC path injection, command-line switch abuse, remote file execution, and leveraging startup directories for persistence. The article also includes practical examples, tools like Nirsoft's URLProtocolView, and advice on how to discover and exploit vulnerabilities in applications.
| | swordbytes.com
Overwolf 1-Click Remote Code Execution - CVE-2021-33501
1.8 parsecs away

Travel
| | SwordBytes researchers have identified an Unauthenticated Remote Code Execution (RCE) vulnerability in Overwolf's Client Application by abusing a Reflected Cross-Site Scripting (XSS) issue present in the "overwolfstore://" URL handler. This vulnerability allows remote unauthenticated attackers to execute arbitrary commands on the underlying operating system that hosts Overwolf's Client Application.
| | www.trendmicro.com
Ransomware Spotlight: Clop | Trend Micro (US)
5.8 parsecs away

Travel
| We take a closer look at the operations of Clop, a prolific ransomware family that has gained notoriety for its high-profile attacks. We review this ransomware group's constantly changing schemes and discuss how companies can shore up defenses against this threat.