Explore >> Select a destination

You are here

 gebir.ge
Remote Code Execution as a Service: A Privilege Escalation Journey | GEBIRGE
| | swordbytes.com
Overwolf 1-Click Remote Code Execution - CVE-2021-33501
1.8 parsecs away

Travel
| | SwordBytes researchers have identified an Unauthenticated Remote Code Execution (RCE) vulnerability in Overwolf's Client Application by abusing a Reflected Cross-Site Scripting (XSS) issue present in the "overwolfstore://" URL handler. This vulnerability allows remote unauthenticated attackers to execute arbitrary commands on the underlying operating system that hosts Overwolf's Client Application.
| | taeluralexis.com
TryHackMe Wreath Writeup - Tae'lur Alexis
0.8 parsecs away

Travel
| | We'll target a network comprising 3 machines, leveraging CVE exploits, pivoting, code obfuscation techniques, and AV bypass strategies.
| | itm4n.github.io
Windows Privilege Escalation - DLL Proxying | itm4n's blog
1.1 parsecs away

Travel
| | DLL Hijacking is the first Windows privilege escalation technique I worked on as a junior pentester, with the IKEEXT service on Windows 7 (or Windows Server 2008 R2). Here, I'd like to discuss one of its variants - DLL Proxying - and provide a step-by-step guide for easily crafting a custom DLL wrapper in the context of a privilege escalation.
| | wsummerhill.github.io
Malware Development Introduction aka Malware Dev 101 - Part 2 - Will Summerhill
23.2 parsecs away

Travel
| Malware Development Introduction (aka Malware Dev 101), Part 2 - Evasion Basics