{"uuid": "96895532-9e31-4756-8593-35ed1d727ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-26258", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3100", "content": "Tools \ud83d\udd27 \ud83d\udd28 \ud83d\udd27  - Hackers Factory\n\n\u200b\u200bDorkLab\n\nWeb app tool for helping compose advance search operators (aka Google dorking AKA boolean searches) for a variety of search engines.\n\nhttps://github.com/rtwillett/DorkLab\n\n#OSINT #dork #infosec\n\n\u200b\u200bNinja UUID Shellcode Runner\n\nModule Stomping, No New Thread, HellsGate syscaller, UUID Shellcode Runner for x64 Windows 10!\n\nhttps://github.com/boku7/Ninja_UUID_Runner\n\n#infosec #pentesting #redteam\n\n\u200b\u200bsddl_py\n\nParse an SDDL string.\n\nhttps://github.com/t94j0/sddl_py\n\n#infosec #pentesting\n\n\u200b\u200bDeFiVulnLabs\n\nThis was an internal Web3 solidity security training in XREX. I want to share these materials with everyone interested in Web3 security and how to find vulnerabilities in code and exploit them. Every vulnerability testing uses Foundry. Currently supports 32 types of vulnerabilities.\n\nhttps://github.com/SunWeb3Sec/DeFiVulnLabs\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200blibcurl-crlf\n\nThis repository aims to describe a CRLF (Carriage Return Line Feed) that exist in the libcurl of PHP source code. Here you can found the owasp description of a CRLF.\n\nhttps://github.com/W0rty/libcurl-crlf\n\n#cybersecurity #infosec\n\n\u200b\u200bCVE-2023-26258\n\nRemote Code Execution in ArcServe UDP Backup.\n\nhttps://github.com/mdsecactivebreach/CVE-2023-26258-ArcServe\n\nDetails:\nhttps://www.mdsec.co.uk/2023/06/cve-2023-26258-remote-code-execution-in-arcserve-udp-backup/\n\n#cybersecurity #infosec #pentesting\n\n\u200b\u200bNvdsearch\n\nA National Vulnerability Database (NVD) API query tool.\n\nhttps://github.com/optiv/nvdsearch\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bMax\n\nMaximizing BloodHound with a simple suite of tools.\n\nhttps://github.com/knavesec/Max\n\n#infosec #pentesting #redteam\n\n\u200b\u200bTenantHunter\n\nA small script to resolve domains to Azure AD tenants (and OAuth login portals) It is incredibly useful for pentesting companies or governments powered by the Azure ecosystem.\n\n\u2022 Resolves domain to tenant ID\n\u2022 Resolves tenant ID to OAuth login portal\n\u2022 More upcoming features but for now that's it\n\nhttps://github.com/axylisdead/TenantHunter\n\n#infosec #pentesting #redteam\n\nhttps://t.me/dilagrafie", "creation_timestamp": "2023-06-29T07:19:05.000000Z"}