Tags - Adepts of 0xCC

VULNERABILITIES

Apr 06, 2022

In the land of PHP you will always be (use-after-)free

Aug 09, 2021

Having fun with a Use-After-Free in ProFTPd (CVE-2020-9273)

May 14, 2021

From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim)

Oct 25, 2020

Remote Command Execution in Ruckus IoT Controller (CVE-2020-26878 & CVE-2020-26879)

Oct 04, 2020

A brief encounter with Leostream Connect Broker

RESEARCH

Aug 13, 2024

Mixing watering hole attacks with history leak via CSS

Jul 07, 2024

VBA: overwriting R/W/X memory in a reliable way

Jan 23, 2024

A christmas tale: pwning GTB Central Console (CVE-2024-22107 & CVE-2024-22108)

Jan 12, 2024

VBA: having fun with macros, overwritten pointers & R/W/X memory

Dec 23, 2023

Developers are juicy targets: DCOM & Visual Studio

Mar 17, 2023

VBA: resolving exports in runtime without NtQueryInformationProcess or GetProcAddress

Mar 07, 2023

Beating an old PHP source code protector

Dec 26, 2022

Spice up your persistence: loading PHP extensions from memory

Sep 09, 2022

Thoughts on the use of noVNC for phishing campaigns

Aug 09, 2021

Having fun with a Use-After-Free in ProFTPd (CVE-2020-9273)

Jul 09, 2021

Adding a native sniffer to your implants: decomposing and recomposing PktMon

Jun 18, 2021

Knock! Knock! The postman is here! (abusing Mailslots and PortKnocking for connectionless shells)

Jun 11, 2021

Don't use commands, use code: the tale of Netsh & PortProxy

May 14, 2021

From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim)

May 08, 2021

A physical graffiti of LSASS: getting credentials from physical memory for fun and learning

Feb 18, 2021

One thousand and one ways to copy your shellcode to memory (VBA Macros)

Feb 09, 2021

Hooks-On Hoot-Off: Vitaminizing MiniDump

Jan 28, 2021

The Kerberos Credential Thievery Compendium (GNU/Linux)

Jan 16, 2021

Hijacking connections without injections: a ShadowMoving approach to the art of pivoting

Dec 24, 2020

The worst of the two worlds: Excel meets Outlook

Nov 15, 2020

Shedding light on creating VBA macros

Oct 31, 2020

Hacking in an epistolary way: implementing kerberoast in pure VBA

Oct 25, 2020

Remote Command Execution in Ruckus IoT Controller (CVE-2020-26878 & CVE-2020-26879)

Oct 04, 2020

A brief encounter with Leostream Connect Broker

X-C3LL

Aug 13, 2024

Mixing watering hole attacks with history leak via CSS

Jul 07, 2024

VBA: overwriting R/W/X memory in a reliable way

Jan 23, 2024

A christmas tale: pwning GTB Central Console (CVE-2024-22107 & CVE-2024-22108)

Jan 12, 2024

VBA: having fun with macros, overwritten pointers & R/W/X memory

Dec 23, 2023

Developers are juicy targets: DCOM & Visual Studio

Mar 17, 2023

VBA: resolving exports in runtime without NtQueryInformationProcess or GetProcAddress

Mar 07, 2023

Beating an old PHP source code protector

Dec 26, 2022

Spice up your persistence: loading PHP extensions from memory

Sep 09, 2022

Thoughts on the use of noVNC for phishing campaigns

Apr 06, 2022

In the land of PHP you will always be (use-after-)free

Jul 09, 2021

Adding a native sniffer to your implants: decomposing and recomposing PktMon

Jun 18, 2021

Knock! Knock! The postman is here! (abusing Mailslots and PortKnocking for connectionless shells)

Jun 11, 2021

Don't use commands, use code: the tale of Netsh & PortProxy

May 08, 2021

A physical graffiti of LSASS: getting credentials from physical memory for fun and learning

Feb 18, 2021

One thousand and one ways to copy your shellcode to memory (VBA Macros)

Jan 28, 2021

The Kerberos Credential Thievery Compendium (GNU/Linux)

Jan 16, 2021

Hijacking connections without injections: a ShadowMoving approach to the art of pivoting

Dec 24, 2020

The worst of the two worlds: Excel meets Outlook

Nov 15, 2020

Shedding light on creating VBA macros

Oct 31, 2020

Hacking in an epistolary way: implementing kerberoast in pure VBA

Oct 25, 2020

Remote Command Execution in Ruckus IoT Controller (CVE-2020-26878 & CVE-2020-26879)

Oct 04, 2020

A brief encounter with Leostream Connect Broker

RED TEAM

Aug 13, 2024

Mixing watering hole attacks with history leak via CSS

Jul 07, 2024

VBA: overwriting R/W/X memory in a reliable way

Jan 23, 2024

A christmas tale: pwning GTB Central Console (CVE-2024-22107 & CVE-2024-22108)

Jan 12, 2024

VBA: having fun with macros, overwritten pointers & R/W/X memory

Dec 23, 2023

Developers are juicy targets: DCOM & Visual Studio

Mar 17, 2023

VBA: resolving exports in runtime without NtQueryInformationProcess or GetProcAddress

Mar 07, 2023

Beating an old PHP source code protector

Dec 26, 2022

Spice up your persistence: loading PHP extensions from memory

Sep 09, 2022

Thoughts on the use of noVNC for phishing campaigns

Jul 09, 2021

Adding a native sniffer to your implants: decomposing and recomposing PktMon

Jun 18, 2021

Knock! Knock! The postman is here! (abusing Mailslots and PortKnocking for connectionless shells)

Jun 11, 2021

Don't use commands, use code: the tale of Netsh & PortProxy

May 08, 2021

A physical graffiti of LSASS: getting credentials from physical memory for fun and learning

Feb 18, 2021

One thousand and one ways to copy your shellcode to memory (VBA Macros)

Jan 28, 2021

The Kerberos Credential Thievery Compendium (GNU/Linux)

Jan 16, 2021

Hijacking connections without injections: a ShadowMoving approach to the art of pivoting

Dec 24, 2020

The worst of the two worlds: Excel meets Outlook

Nov 15, 2020

Shedding light on creating VBA macros

Oct 31, 2020

Hacking in an epistolary way: implementing kerberoast in pure VBA

PIVOTING

Jan 16, 2021

Hijacking connections without injections: a ShadowMoving approach to the art of pivoting

SHADOWMOVE

Jan 16, 2021

Hijacking connections without injections: a ShadowMoving approach to the art of pivoting

POST-EXPLOTATION

Jan 28, 2021

The Kerberos Credential Thievery Compendium (GNU/Linux)

KERBEROS

Jan 28, 2021

The Kerberos Credential Thievery Compendium (GNU/Linux)

LSASS

May 08, 2021

A physical graffiti of LSASS: getting credentials from physical memory for fun and learning

Feb 09, 2021

Hooks-On Hoot-Off: Vitaminizing MiniDump

MINIDUMPWRITEDUMP

Feb 09, 2021

Hooks-On Hoot-Off: Vitaminizing MiniDump

HOOKING

Feb 09, 2021

Hooks-On Hoot-Off: Vitaminizing MiniDump

CREDENTIALS

May 08, 2021

A physical graffiti of LSASS: getting credentials from physical memory for fun and learning

Feb 09, 2021

Hooks-On Hoot-Off: Vitaminizing MiniDump

MARIO

Feb 09, 2021

Hooks-On Hoot-Off: Vitaminizing MiniDump

MIMIKATZ

May 08, 2021

A physical graffiti of LSASS: getting credentials from physical memory for fun and learning

SNOOPYOWL

May 08, 2021

A physical graffiti of LSASS: getting credentials from physical memory for fun and learning

EXPLOITING

Apr 06, 2022

In the land of PHP you will always be (use-after-)free

Aug 09, 2021

Having fun with a Use-After-Free in ProFTPd (CVE-2020-9273)

May 14, 2021

From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim)

LOCKEDBYTE

Aug 09, 2021

Having fun with a Use-After-Free in ProFTPd (CVE-2020-9273)

May 14, 2021

From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim)

PHP

Apr 06, 2022

In the land of PHP you will always be (use-after-)free

CHALLENGES

Apr 06, 2022

In the land of PHP you will always be (use-after-)free

RANT

Sep 09, 2022

Thoughts on the use of noVNC for phishing campaigns

PHP

Mar 07, 2023

Beating an old PHP source code protector

NU-CODER

Mar 07, 2023

Beating an old PHP source code protector

VBA

Mar 17, 2023

VBA: resolving exports in runtime without NtQueryInformationProcess or GetProcAddress

MALDOCS

Mar 17, 2023

VBA: resolving exports in runtime without NtQueryInformationProcess or GetProcAddress

DCOM

Dec 23, 2023

Developers are juicy targets: DCOM & Visual Studio

LATERAL MOVEMENT

Dec 23, 2023

Developers are juicy targets: DCOM & Visual Studio

DTE

Dec 23, 2023

Developers are juicy targets: DCOM & Visual Studio

VISUAL STUDIO

Dec 23, 2023

Developers are juicy targets: DCOM & Visual Studio

VBA

Jul 07, 2024

VBA: overwriting R/W/X memory in a reliable way

Jan 12, 2024

VBA: having fun with macros, overwritten pointers & R/W/X memory

MACROS

Jul 07, 2024

VBA: overwriting R/W/X memory in a reliable way

Jan 12, 2024

VBA: having fun with macros, overwritten pointers & R/W/X memory

DLP

Jan 23, 2024

A christmas tale: pwning GTB Central Console (CVE-2024-22107 & CVE-2024-22108)

GTBCC

Jan 23, 2024

A christmas tale: pwning GTB Central Console (CVE-2024-22107 & CVE-2024-22108)

GTB

Jan 23, 2024

A christmas tale: pwning GTB Central Console (CVE-2024-22107 & CVE-2024-22108)

CVE-2024-22107

Jan 23, 2024

A christmas tale: pwning GTB Central Console (CVE-2024-22107 & CVE-2024-22108)

CVE-2024-22108

Jan 23, 2024

A christmas tale: pwning GTB Central Console (CVE-2024-22107 & CVE-2024-22108)

EXPLOIT

Jan 23, 2024

A christmas tale: pwning GTB Central Console (CVE-2024-22107 & CVE-2024-22108)

WATERING HOLE

Aug 13, 2024

Mixing watering hole attacks with history leak via CSS

PHISHING

Aug 13, 2024

Mixing watering hole attacks with history leak via CSS

CSS

Aug 13, 2024

Mixing watering hole attacks with history leak via CSS

CSS LEAK

Aug 13, 2024

Mixing watering hole attacks with history leak via CSS

HISTORY LEAK

Aug 13, 2024

Mixing watering hole attacks with history leak via CSS