Meta-Thrunks

remmons-r7's assessment of CVE-2024-53677 | AttackerKB CVE-2024-53677 is a flawed upload logic vulnerability in Apache Struts 2. The vulnerability permits an attacker to override internal file upload variables in a…

Rapid7 analysis of Apache #Struts 2 CVE-2024-53677 here via research lead Ryan Emmons — highlights:
* No, this isn't really being successfully exploited in the wild
* Payloads need to be customized to the target
* The 'fixed' version *does not* remediate the vuln
attackerkb.com/assessments/...

18.12.2024 20:48 — 👍 22    🔁 11    💬 2    📌 1

I'm glad to release the tool I have been working hard on the last month: #KrbRelayEx
A Kerberos relay & forwarder for MiTM attacks!
>Relays Kerberos AP-REQ tickets
>Manages multiple SMB consoles
>Works on Win& Linux with .NET 8.0
>...
GitHub: github.com/decoder-it/K...

25.11.2024 17:31 — 👍 63    🔁 43    💬 3    📌 0

ldap socks on netexec / nxc 🎃

02.01.2025 22:22 — 👍 7    🔁 2    💬 0    📌 0

GitHub - dirkjanm/BloodHound.py: A Python based ingestor for BloodHound A Python based ingestor for BloodHound. Contribute to dirkjanm/BloodHound.py development by creating an account on GitHub.

Few BloodHound python updates: LDAP channel binding is now supported with Kerberos auth (native) or with NTLM (custom ldap3 version). Furthermore, the BH CE collector now has its own pypi package and command. You can have both on the same system with pipx. github.com/dirkjanm/Blo...

02.01.2025 16:41 — 👍 29    🔁 14    💬 2    📌 0

So you want to exploit ADCS ESC8 with only netexec and ntlmrelayx ? Fear not my friend, I will show you how to do it 👇

NetExec now supports "Pass-the-Cert" as an authentication method, thanks to @dirkjanm.io original work on PKINITtools ⛱️

06.01.2025 20:33 — 👍 14    🔁 7    💬 0    📌 0

Google: Chinese hackers likely behind Ivanti VPN zero-day attacks Hackers exploiting the critical Ivanti Connect Secure zero-day vulnerability disclosed yesterday installed on compromised VPN appliances new malware called 'Dryhook' and 'Phasejam' that is not currently associated with any threat group.

Google: Chinese hackers likely behind Ivanti VPN zero-day attacks

09.01.2025 16:45 — 👍 3    🔁 1    💬 0    📌 0

Hintertür in xz-Bibliothek gefährdet SSH-Verbindungen | heise online

01.04.2024 15:19 — 👍 2    🔁 0    💬 0    📌 0