Канал: Exploit Blizzard

Create your own linux malware | Simple reverse shell | Series - Crafting linux malware

Create your own linux malware | Simple reverse shell | Series - Crafting linux malware

Dumping lsass | Bypassing LSA Protection - PPLFault | Windows 11

Dumping lsass | Bypassing LSA Protection - PPLFault | Windows 11

Pushing boundaries with Love.exe | Boot persistent trigger for execution

Pushing boundaries with Love.exe | Boot persistent trigger for execution

Cobalt Strike | bypassing defender | Evasion method PoC by Aibel Aju

Cobalt Strike | bypassing defender | Evasion method PoC by Aibel Aju

sector-C31 | Gateway to forward local port via cloud vps | By AuxGrep

sector-C31 | Gateway to forward local port via cloud vps | By AuxGrep

Backdooring Windows Login | Implanting via boot process - fake chkdsk screen

Backdooring Windows Login | Implanting via boot process - fake chkdsk screen

Love.exe | Windows UAC Bypass | Fully Undetectable - Zero Behaviour Detection

Love.exe | Windows UAC Bypass | Fully Undetectable - Zero Behaviour Detection

Offensive Nim to Powershell | Getting interactive pty reverse shell | Bypassing Defender

Offensive Nim to Powershell | Getting interactive pty reverse shell | Bypassing Defender

iSCSI UAC Bypass | Abusing AutoElevate - DLL Proxying | DLL Search Order hijacking

iSCSI UAC Bypass | Abusing AutoElevate - DLL Proxying | DLL Search Order hijacking

Creating a Word Exploit | Bypassing Defender | Getting reverse shell

Creating a Word Exploit | Bypassing Defender | Getting reverse shell

Cobalt Strike - Obfuscating JScript Payload | Spawning reverse shell | Evading Windows Defender

Cobalt Strike - Obfuscating JScript Payload | Spawning reverse shell | Evading Windows Defender

Leveraging UAC Bypass via Event Viewer to DNS Poisoning | PoC by AuxGrep

Leveraging UAC Bypass via Event Viewer to DNS Poisoning | PoC by AuxGrep

UAC Bypass via Event Viewer | .NET Deserialization

UAC Bypass via Event Viewer | .NET Deserialization

CSRF Vulnerability | Exploiting live target - dcbooks.com | PoC by Aibel Aju

CSRF Vulnerability | Exploiting live target - dcbooks.com | PoC by Aibel Aju

AppRecoveryCallback Inject | Runtime bypass with persistent reverse connection

AppRecoveryCallback Inject | Runtime bypass with persistent reverse connection

Spring4shell | Remote code execution in spring java framework | CVE-2022-22965

Spring4shell | Remote code execution in spring java framework | CVE-2022-22965

Dirty Pipe Vulnerability | Linux Kernel Privilege Escalation | CVE-2022-0847

Dirty Pipe Vulnerability | Linux Kernel Privilege Escalation | CVE-2022-0847

PE Backdooring | Injecting stageless shellcode into an executable | Malware development

PE Backdooring | Injecting stageless shellcode into an executable | Malware development

Exploiting DilMil Dating App's Backend Server | Open upload policy & Enabled directory listing

Exploiting DilMil Dating App's Backend Server | Open upload policy & Enabled directory listing

CVE-2022-21882 | Windows win32k Local Privilege Escalation | A Bypass of CVE-2021-1732

CVE-2022-21882 | Windows win32k Local Privilege Escalation | A Bypass of CVE-2021-1732

Send malicious attachments using gmail | Payload delivery via gmail

Send malicious attachments using gmail | Payload delivery via gmail

Creating Malicious Word File | This is how cyber criminals target using innocent looking document

Creating Malicious Word File | This is how cyber criminals target using innocent looking document

Log4Shell vulnerability | 0 Day RCE exploit in Java logging library log4j2 | CVE-2021-44228

Log4Shell vulnerability | 0 Day RCE exploit in Java logging library log4j2 | CVE-2021-44228

CVE-2021-24084 | Windows MDM Local Privilege Escalation Zero Day | Unpatched Since 2020

CVE-2021-24084 | Windows MDM Local Privilege Escalation Zero Day | Unpatched Since 2020

InstallerFileTakeOver | Windows Privilege Escalation Zero Day

InstallerFileTakeOver | Windows Privilege Escalation Zero Day

Dump LSASS | Renaming procdump to dump64 bypasses defender

Dump LSASS | Renaming procdump to dump64 bypasses defender

Windows 11 UAC Bypass to Local Privilege Escalation

Windows 11 UAC Bypass to Local Privilege Escalation

Open redirect vulnerability | Exploit delivery method - No click download

Open redirect vulnerability | Exploit delivery method - No click download

OTP Leakage In Response Live Target | Bypassing OTP verification

OTP Leakage In Response Live Target | Bypassing OTP verification

Apache Server Zero Day | Exploiting Live Target

Apache Server Zero Day | Exploiting Live Target

Linux Privilege Escalation using Linux Containers (LXD) - II

Linux Privilege Escalation using Linux Containers (LXD) - II

HiveNightmare (SeriousSAM ) | Reading registry - Local Privilege Escalation | CVE-2021-36934

HiveNightmare (SeriousSAM ) | Reading registry - Local Privilege Escalation | CVE-2021-36934

Using syscalls to bypass AV and EDR | Reverse Connection Windows

Using syscalls to bypass AV and EDR | Reverse Connection Windows

CVE-2021-1675 PrintNightmare | Windows Local Privilege Escalation

CVE-2021-1675 PrintNightmare | Windows Local Privilege Escalation

Android Cookie Stealer | Stealing cookies in Realtime android | Introducing Evil-Browser

Android Cookie Stealer | Stealing cookies in Realtime android | Introducing Evil-Browser

Linux Local Privilege Escalation with polkit | CVE-2021-3560

Linux Local Privilege Escalation with polkit | CVE-2021-3560

This is how you can order free milk | Hijacking user accounts | Bypassing otp login | Doodhvale

This is how you can order free milk | Hijacking user accounts | Bypassing otp login | Doodhvale

InvisibilityCloak | Bypassing Signature based Detection | Antivirus Bypass | C#

InvisibilityCloak | Bypassing Signature based Detection | Antivirus Bypass | C#

CVE-2020-14882 | WebLogic Unauthorized Bypass RCE | Console Login Bypass & Remote Shell | Oracle

CVE-2020-14882 | WebLogic Unauthorized Bypass RCE | Console Login Bypass & Remote Shell | Oracle

Root access with docker in 5 seconds | Privilege Escalation Using Docker - I

Root access with docker in 5 seconds | Privilege Escalation Using Docker - I

Introduction to Reverse Engineering using Assembler | cracking a simple program | 0x01

Introduction to Reverse Engineering using Assembler | cracking a simple program | 0x01

Make your Own Webserver In Just 5 lines | SimpleHTTPServer using python kali Linux

Make your Own Webserver In Just 5 lines | SimpleHTTPServer using python kali Linux

Polyglot HTA PE file | hide and run script in an executable binary | obfuscated HTA file | MacroPack

Polyglot HTA PE file | hide and run script in an executable binary | obfuscated HTA file | MacroPack

Privilege Escalation Windows 10 | Antivirus Bypass | Dump NTLM hashes

Privilege Escalation Windows 10 | Antivirus Bypass | Dump NTLM hashes

SMBGhost RCE Eternal Darkness | Crashing Windows | CVE 2020 0769

SMBGhost RCE Eternal Darkness | Crashing Windows | CVE 2020 0769

Customizing and Backdooring Windows Terminal | Terminalsplash Part -1

Customizing and Backdooring Windows Terminal | Terminalsplash Part -1

ret2shellcode | Stack Buffer Overflow | Basic ROP - Binary Exploitation

ret2shellcode | Stack Buffer Overflow | Basic ROP - Binary Exploitation

Overwriting Global Offset Table GOT & Procedure Linkage Table PLT | Binary Exploitation

Overwriting Global Offset Table GOT & Procedure Linkage Table PLT | Binary Exploitation

Creating Spoofed certificate to sign the malware | Microsoft ECC Root certificate | CVE: 2020-0601

Creating Spoofed certificate to sign the malware | Microsoft ECC Root certificate | CVE: 2020-0601

Broken Access Control | Hijacking Zee5 Account using Authorization Token | Hacking Zee5

Broken Access Control | Hijacking Zee5 Account using Authorization Token | Hacking Zee5

Insecure Deserialization | Modifying Serialized Objects - Gaining Admin Privilege

Insecure Deserialization | Modifying Serialized Objects - Gaining Admin Privilege

Dumping lsass Service and Extracting Juicy Information from the memory | windows

Dumping lsass Service and Extracting Juicy Information from the memory | windows

Bypassing UAC | Elevating Privilege Windows 10 | WinPwnage

Bypassing UAC | Elevating Privilege Windows 10 | WinPwnage

How an Innocent pdf can hack your pc | Hacking pc using pdf

How an Innocent pdf can hack your pc | Hacking pc using pdf

Android Firefox Browser Bug | Evil SSDP | Android Remote Code Execution

Android Firefox Browser Bug | Evil SSDP | Android Remote Code Execution

XSS - CSRF | Exploiting XSS to Perform CSRF | OWASP

XSS - CSRF | Exploiting XSS to Perform CSRF | OWASP

Exploit Blizzard | Version 0x1E

Exploit Blizzard | Version 0x1E

Intentionally Crash Your PC | Cause BSoD | Crash Windows

Intentionally Crash Your PC | Cause BSoD | Crash Windows