몾 Artemis @mixic@nanao.cybtex.fr

TokenUniverse v0.3

Advanced tool for working with access tokens & Windows Security Policy

https://github.com/diversenok/TokenUniverse

PidLidReminderPwn.py

Exploiting Outlook CVE-2023-23397 using Python by sending the message through EWS

https://gist.github.com/tothi/d2d6c6a3e8b1d72ce6646d8683326e49

NewPowerDNS

Transfer files over DNS A records. NewPowerDNS is an updated version of PowerDNS by Dominic Chell (@domchell)

https://github.com/icyguider/NewPowerDNS

Hello /dev/null lovers.

Put your config in a file (E.g. lessdemo.cnf)

#env
SHELL=/dev/null
LESSHISTFILE=/dev/null
blablabla

• lesskey lessdemo.cnf

• /bin/chmod 400 $HOME/.less

• echo -n "HelloWorld" | less

No more .lesshst & if you try to execute a command ( CVE-2023–26604 ) like a !/bin/sh ↦ permission denied

Have fun ᕙ👹ᕗ

Aujourd'hui, SIGSEGV ne cesse de me narguer.

PPLmedic

Dump the memory of any PPL with a Userland exploit chain

https://github.com/itm4n/PPLmedic

HTTP Toolkit

Targeted interception for specific clients rather than intercepting everything and so avoids capturing irrelevant traffic or disrupting other applications

https://httptoolkit.com

Kali Purple

Defensive Security - Kali Purple for Blue & Purple Teams

https://www.kali.org/get-kali/

PolarProxy

• Custom TLS Redirection

One new feature in PolarProxy is the --redirect argument, which can be used to redirect TLS traffic destined for a specific domain name to a different domain. This feature can be used to redirect TLS-encrypted malware traffic going to a known C2 domain to a local HTTPS sandbox.

https://www.netresec.com/?page=PolarProxy

bootlicker

UEFI bootkit used to achieve initial usermode execution

https://github.com/realoriginal/bootlicker

Exegol v3.0.1

• Documentation

https://github.com/ThePorgs/Exegol-images

dns.toys

A DNS server that takes creative liberties with the DNS protocol.

https://github.com/knadh/dns.toys

FToDNS

PoC - File Transfert over DNS

https://github.com/neitzert/FToDNS

mimic

Convert execution on Linux x86_64

https://github.com/emptymonkey/mimic

MemFiles

Cobalt Strike toolkit to write files produced by Beacon to memory instead of disk

https://github.com/Octoberfest7/MemFiles

BokuLoader

PoC UDRL which aims to recreate, integrate, and enhance Cobalt Strike's evasion features for x64 HTTP/S beacons

https://github.com/xforcered/BokuLoader