Tags - Adepts of 0xCC

VULNERABILITIES

Apr 06, 2022

In the land of PHP you will always be (use-after-)free

Aug 09, 2021

Having fun with a Use-After-Free in ProFTPd (CVE-2020-9273)

May 14, 2021

From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim)

Oct 25, 2020

Remote Command Execution in Ruckus IoT Controller (CVE-2020-26878 & CVE-2020-26879)

Oct 04, 2020

A brief encounter with Leostream Connect Broker

RESEARCH

Dec 26, 2022

Spice up your persistence: loading PHP extensions from memory

Sep 09, 2022

Thoughts on the use of noVNC for phishing campaigns

Aug 09, 2021

Having fun with a Use-After-Free in ProFTPd (CVE-2020-9273)

Jul 09, 2021

Adding a native sniffer to your implants: decomposing and recomposing PktMon

Jun 18, 2021

Knock! Knock! The postman is here! (abusing Mailslots and PortKnocking for connectionless shells)

Jun 11, 2021

Don't use commands, use code: the tale of Netsh & PortProxy

May 14, 2021

From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim)

May 08, 2021

A physical graffiti of LSASS: getting credentials from physical memory for fun and learning

Feb 18, 2021

One thousand and one ways to copy your shellcode to memory (VBA Macros)

Feb 09, 2021

Hooks-On Hoot-Off: Vitaminizing MiniDump

Jan 28, 2021

The Kerberos Credential Thievery Compendium (GNU/Linux)

Jan 16, 2021

Hijacking connections without injections: a ShadowMoving approach to the art of pivoting

Dec 24, 2020

The worst of the two worlds: Excel meets Outlook

Nov 15, 2020

Shedding light on creating VBA macros

Oct 31, 2020

Hacking in an epistolary way: implementing kerberoast in pure VBA

Oct 25, 2020

Remote Command Execution in Ruckus IoT Controller (CVE-2020-26878 & CVE-2020-26879)

Oct 04, 2020

A brief encounter with Leostream Connect Broker

X-C3LL

Dec 26, 2022

Spice up your persistence: loading PHP extensions from memory

Sep 09, 2022

Thoughts on the use of noVNC for phishing campaigns

Apr 06, 2022

In the land of PHP you will always be (use-after-)free

Jul 09, 2021

Adding a native sniffer to your implants: decomposing and recomposing PktMon

Jun 18, 2021

Knock! Knock! The postman is here! (abusing Mailslots and PortKnocking for connectionless shells)

Jun 11, 2021

Don't use commands, use code: the tale of Netsh & PortProxy

May 08, 2021

A physical graffiti of LSASS: getting credentials from physical memory for fun and learning

Feb 18, 2021

One thousand and one ways to copy your shellcode to memory (VBA Macros)

Jan 28, 2021

The Kerberos Credential Thievery Compendium (GNU/Linux)

Jan 16, 2021

Hijacking connections without injections: a ShadowMoving approach to the art of pivoting

Dec 24, 2020

The worst of the two worlds: Excel meets Outlook

Nov 15, 2020

Shedding light on creating VBA macros

Oct 31, 2020

Hacking in an epistolary way: implementing kerberoast in pure VBA

Oct 25, 2020

Remote Command Execution in Ruckus IoT Controller (CVE-2020-26878 & CVE-2020-26879)

Oct 04, 2020

A brief encounter with Leostream Connect Broker

RED TEAM

Dec 26, 2022

Spice up your persistence: loading PHP extensions from memory

Sep 09, 2022

Thoughts on the use of noVNC for phishing campaigns

Jul 09, 2021

Adding a native sniffer to your implants: decomposing and recomposing PktMon

Jun 18, 2021

Knock! Knock! The postman is here! (abusing Mailslots and PortKnocking for connectionless shells)

Jun 11, 2021

Don't use commands, use code: the tale of Netsh & PortProxy

May 08, 2021

A physical graffiti of LSASS: getting credentials from physical memory for fun and learning

Feb 18, 2021

One thousand and one ways to copy your shellcode to memory (VBA Macros)

Jan 28, 2021

The Kerberos Credential Thievery Compendium (GNU/Linux)

Jan 16, 2021

Hijacking connections without injections: a ShadowMoving approach to the art of pivoting

Dec 24, 2020

The worst of the two worlds: Excel meets Outlook

Nov 15, 2020

Shedding light on creating VBA macros

Oct 31, 2020

Hacking in an epistolary way: implementing kerberoast in pure VBA

PIVOTING

Jan 16, 2021

Hijacking connections without injections: a ShadowMoving approach to the art of pivoting

SHADOWMOVE

Jan 16, 2021

Hijacking connections without injections: a ShadowMoving approach to the art of pivoting

POST-EXPLOTATION

Jan 28, 2021

The Kerberos Credential Thievery Compendium (GNU/Linux)

KERBEROS

Jan 28, 2021

The Kerberos Credential Thievery Compendium (GNU/Linux)

LSASS

May 08, 2021

A physical graffiti of LSASS: getting credentials from physical memory for fun and learning

Feb 09, 2021

Hooks-On Hoot-Off: Vitaminizing MiniDump

MINIDUMPWRITEDUMP

Feb 09, 2021

Hooks-On Hoot-Off: Vitaminizing MiniDump

HOOKING

Feb 09, 2021

Hooks-On Hoot-Off: Vitaminizing MiniDump

CREDENTIALS

May 08, 2021

A physical graffiti of LSASS: getting credentials from physical memory for fun and learning

Feb 09, 2021

Hooks-On Hoot-Off: Vitaminizing MiniDump

MARIO

Feb 09, 2021

Hooks-On Hoot-Off: Vitaminizing MiniDump

MIMIKATZ

May 08, 2021

A physical graffiti of LSASS: getting credentials from physical memory for fun and learning

SNOOPYOWL

May 08, 2021

A physical graffiti of LSASS: getting credentials from physical memory for fun and learning

EXPLOITING

Apr 06, 2022

In the land of PHP you will always be (use-after-)free

Aug 09, 2021

Having fun with a Use-After-Free in ProFTPd (CVE-2020-9273)

May 14, 2021

From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim)

LOCKEDBYTE

Aug 09, 2021

Having fun with a Use-After-Free in ProFTPd (CVE-2020-9273)

May 14, 2021

From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim)

PHP

Apr 06, 2022

In the land of PHP you will always be (use-after-)free

CHALLENGES

Apr 06, 2022

In the land of PHP you will always be (use-after-)free

RANT

Sep 09, 2022

Thoughts on the use of noVNC for phishing campaigns