Ivan Ožić Bebek
@obivan.infosec.exchange.ap.brid.gy
:hacker_h: :hacker_a: :hacker_c: :hacker_k: :hacker_e: :hacker_r: :hacker_m: :hacker_a: :hacker_n:
🌉 bridged from ⁂ https://infosec.exchange/@obivan, follow @ap.brid.gy to interact
🌉 bridged from ⁂ https://infosec.exchange/@obivan, follow @ap.brid.gy to interact
CVE lookup + Wappalyzer https://github.com/xZoroo/wappacvelyze
GitHub - xZoroo/wappacvelyze: CVE lookup + Wappalyzer
CVE lookup + Wappalyzer. Contribute to xZoroo/wappacvelyze development by creating an account on GitHub.
github.com
September 16, 2026 at 8:26 AM
CVE lookup + Wappalyzer https://github.com/xZoroo/wappacvelyze
Detecting and mitigating
Active Directory
compromises https://www.cyber.gov.au/sites/default/files/2026-09/Detecting%20and%20mitigating%20Active%20Directory%20compromises%20%28September%202026%29.pdf
Active Directory
compromises https://www.cyber.gov.au/sites/default/files/2026-09/Detecting%20and%20mitigating%20Active%20Directory%20compromises%20%28September%202026%29.pdf
September 15, 2026 at 8:10 PM
Detecting and mitigating
Active Directory
compromises https://www.cyber.gov.au/sites/default/files/2026-09/Detecting%20and%20mitigating%20Active%20Directory%20compromises%20%28September%202026%29.pdf
Active Directory
compromises https://www.cyber.gov.au/sites/default/files/2026-09/Detecting%20and%20mitigating%20Active%20Directory%20compromises%20%28September%202026%29.pdf
Microsoft Entra ID Conditional Access Bypass via User-Agent Policy Gap https://cqureacademy.com/blog/cqure-hacks-82-microsoft-entra-id-conditional-access-bypass-via-user-agent-policy-gap/
cqureacademy.com
September 15, 2026 at 8:06 PM
Microsoft Entra ID Conditional Access Bypass via User-Agent Policy Gap https://cqureacademy.com/blog/cqure-hacks-82-microsoft-entra-id-conditional-access-bypass-via-user-agent-policy-gap/
Discord went down, but the status page doesn't reflect that, probably also down https://discordstatus.com/
Discord Status
Welcome to Discord's home for real-time and historical data on system performance.
discordstatus.com
September 15, 2026 at 2:25 PM
Discord went down, but the status page doesn't reflect that, probably also down https://discordstatus.com/
PoC for Steam Client Service LPE https://github.com/KillaBoi/BrokenPipe
GitHub - KillaBoi/BrokenPipe: Steam Client Service Local Privilege Escalation Vulnerability
Steam Client Service Local Privilege Escalation Vulnerability - KillaBoi/BrokenPipe
github.com
September 15, 2026 at 10:05 AM
PoC for Steam Client Service LPE https://github.com/KillaBoi/BrokenPipe
Ask the Web Account Manager (WAM) for Entra ID tokens https://github.com/dirkjanm/askWAM
GitHub - dirkjanm/askWAM: Ask the Web Account Manager (WAM) for Entra ID tokens
Ask the Web Account Manager (WAM) for Entra ID tokens - dirkjanm/askWAM
github.com
September 12, 2026 at 2:31 PM
Ask the Web Account Manager (WAM) for Entra ID tokens https://github.com/dirkjanm/askWAM
A First Look Inside the Windows Endpoint Security Platform https://jonny-jhnson.dev/blog/a-first-look-inside-the-windows-endpoint-security-platform/
A First Look Inside the Windows Endpoint Security Platform
An initial analysis of wesp.sys and espclient.dll, how WESP moves kernel events to user mode, and a POC for receiving process-creation events.
jonny-jhnson.dev
September 12, 2026 at 2:17 PM
A First Look Inside the Windows Endpoint Security Platform https://jonny-jhnson.dev/blog/a-first-look-inside-the-windows-endpoint-security-platform/
PoC for unauthenticated arbitrary file read on Gitlab https://github.com/guneykabel/cve-2026-85706
GitHub - guneykabel/cve-2026-85706: Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7–19.1.7; 19.2.0–19.2.5; 19.3.0–19.3.1
Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7–19.1.7; 19.2.0–19.2.5; 19.3.0–19.3.1 - guneykabel/cve-2026-85706
github.com
September 12, 2026 at 8:47 AM
PoC for unauthenticated arbitrary file read on Gitlab https://github.com/guneykabel/cve-2026-85706
Safely detect Citrix NetScaler SAML auth bypass (CVE-2026-19490) https://github.com/BishopFox/CVE-2026-19490-check
GitHub - BishopFox/CVE-2026-19490-check: Safely detect Citrix NetScaler SAML auth bypass CVE-2026-19490
Safely detect Citrix NetScaler SAML auth bypass CVE-2026-19490 - BishopFox/CVE-2026-19490-check
github.com
September 11, 2026 at 7:51 AM
Safely detect Citrix NetScaler SAML auth bypass (CVE-2026-19490) https://github.com/BishopFox/CVE-2026-19490-check
So… You Found AWS Access Keys (Part 1) https://trustedsec.com/blog/so-you-found-aws-access-keys-part-1
So… You Found AWS Access Keys (Part 1)
The AWS access keys are in hand... now what? In Part 1 of this blog series, we break down AWS credential types, where to find them, and how to validate…
trustedsec.com
September 10, 2026 at 8:12 PM
So… You Found AWS Access Keys (Part 1) https://trustedsec.com/blog/so-you-found-aws-access-keys-part-1
Unmasking SCCM Application Execution https://specterops.io/blog/2026/09/10/unmasking-sccm-application-execution/#
specterops.io
September 10, 2026 at 8:11 PM
Unmasking SCCM Application Execution https://specterops.io/blog/2026/09/10/unmasking-sccm-application-execution/#
Tool to authenticate to an LDAP/S server with a certificate through Schannel https://github.com/g0h4n/PassTheCert-rs
GitHub - g0h4n/PassTheCert-rs: Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀
Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀 - g0h4n/PassTheCert-rs
github.com
September 9, 2026 at 2:22 PM
Tool to authenticate to an LDAP/S server with a certificate through Schannel https://github.com/g0h4n/PassTheCert-rs
CVE-2026-83991: Windows Cloud Files access-check bypass https://github.com/karollooool/CVE-2026-83991-writeup-and-poc
GitHub - karollooool/CVE-2026-83991-writeup-and-poc: CVE-2026-83991: Windows Cloud Files access-check bypass
CVE-2026-83991: Windows Cloud Files access-check bypass - karollooool/CVE-2026-83991-writeup-and-poc
github.com
September 9, 2026 at 12:33 PM
CVE-2026-83991: Windows Cloud Files access-check bypass https://github.com/karollooool/CVE-2026-83991-writeup-and-poc
Yet another Microsoft Defender 0day https://github.com/MSNightmare/ShieldCrash
GitHub - MSNightmare/ShieldCrash: Windows Defender 0day Vulnerability
Windows Defender 0day Vulnerability. Contribute to MSNightmare/ShieldCrash development by creating an account on GitHub.
github.com
September 9, 2026 at 10:27 AM
Yet another Microsoft Defender 0day https://github.com/MSNightmare/ShieldCrash
NetNTLMv1 Is Dead. Long Live NetNTLMv1 https://www.outflank.nl/blog/2026/09/08/netntlmv1-is-dead-long-live-netntlmv1/
September 8, 2026 at 8:06 PM
NetNTLMv1 Is Dead. Long Live NetNTLMv1 https://www.outflank.nl/blog/2026/09/08/netntlmv1-is-dead-long-live-netntlmv1/
NTLM hash extraction through HTTP-layer authentication proxying https://github.com/ivancabrera02/HashSiphon
GitHub - ivancabrera02/HashSiphon
Contribute to ivancabrera02/HashSiphon development by creating an account on GitHub.
github.com
September 8, 2026 at 7:18 AM
NTLM hash extraction through HTTP-layer authentication proxying https://github.com/ivancabrera02/HashSiphon
Hacking AI customer service agents https://www.intigriti.com/researchers/blog/hacking-tools/hacking-ai-customer-service-agents
Hacking AI customer service agents
As AI agents are deployed to automate more tasks, they become more capable. And as the famous quote goes: "With great power comes great responsibility." Assuming that humans in the loop can mitigate t...
www.intigriti.com
September 7, 2026 at 2:53 PM
Hacking AI customer service agents https://www.intigriti.com/researchers/blog/hacking-tools/hacking-ai-customer-service-agents
Shai-Hulud Rises From the Dead after 111 days https://www.aikido.dev/blog/shai-hulud-npm-resurfaces
A Shai-Hulud npm payload came back 111 days later
A known Shai-Hulud worm payload sat dormant for 111 days, then republished to npm, right past the malware scanning meant to catch it.
www.aikido.dev
September 7, 2026 at 1:23 PM
Shai-Hulud Rises From the Dead after 111 days https://www.aikido.dev/blog/shai-hulud-npm-resurfaces
A practical security workbook for reviewing source code https://github.com/ShubhamDubeyy/Source-Code-Review-Workbook
GitHub - ShubhamDubeyy/Source-Code-Review-Workbook: A practical security workbook for reviewing source code, identifying vulnerabilities, validating findings with test cases, and automating secure code reviews.
A practical security workbook for reviewing source code, identifying vulnerabilities, validating findings with test cases, and automating secure code reviews. - ShubhamDubeyy/Source-Code-Review-Wor...
github.com
September 7, 2026 at 1:07 PM
A practical security workbook for reviewing source code https://github.com/ShubhamDubeyy/Source-Code-Review-Workbook
RouterOS SSH public-key authentication bypass (CVE-2026-67276) https://github.com/dinosn/mikrotrick-poc
GitHub - dinosn/mikrotrick-poc: CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC
CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC - dinosn/mikrotrick-poc
github.com
September 6, 2026 at 7:10 PM
RouterOS SSH public-key authentication bypass (CVE-2026-67276) https://github.com/dinosn/mikrotrick-poc
The firmware security analyzer https://github.com/e-m-b-a/emba
GitHub - e-m-b-a/emba: EMBA - The firmware security analyzer
EMBA - The firmware security analyzer. Contribute to e-m-b-a/emba development by creating an account on GitHub.
github.com
September 5, 2026 at 2:08 PM
The firmware security analyzer https://github.com/e-m-b-a/emba
Enumerates unattend files in Windows Deployment Services https://github.com/cogiceo/WDSEnum
GitHub - cogiceo/WDSEnum: Enumerates unattend files in Windows Deployment Services.
Enumerates unattend files in Windows Deployment Services. - cogiceo/WDSEnum
github.com
September 4, 2026 at 10:39 AM
Enumerates unattend files in Windows Deployment Services https://github.com/cogiceo/WDSEnum
Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 https://github.com/tyeurada/edrEvasionWorkshop
GitHub - tyeurada/edrEvasionWorkshop: Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 and BSidesLV 2026. Covers malware development, EDR Architecture, EDR evasion, C2 customization, and kernel-level techniques.
Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 and BSidesLV 2026. Covers malware development, EDR Architecture, EDR evasio...
github.com
September 4, 2026 at 9:05 AM
Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 https://github.com/tyeurada/edrEvasionWorkshop
Activating Chrome DevTools Protocol in Memory: Bypassing –remote-debugging-port Restrictions https://www.pikered.com/en/learn/bypass-remote-debugging-port-restrictions/
Activating Chrome DevTools Protocol in Memory: Bypassing -remote-debugging-port Restrictions - Pikered
A technical walkthrough of a new offensive technique that activates the Chrome Debugging Protocol directly in memory, bypassing Google's --remote-debugging-port mitigations. Covers chrome.dll signature scanning, DevToolsSocketFactory vtable reconstruction, PartitionAlloc constraints, and Special APC-based shellcode injection into the Chrome parent process.
www.pikered.com
September 4, 2026 at 8:55 AM
Activating Chrome DevTools Protocol in Memory: Bypassing –remote-debugging-port Restrictions https://www.pikered.com/en/learn/bypass-remote-debugging-port-restrictions/
Redis RCE PoC (CVE-2026-81934) https://github.com/v12-security/pocs/tree/main/redis/server_ssl
pocs/redis/server_ssl at main · v12-security/pocs
poc it like it's hot. Contribute to v12-security/pocs development by creating an account on GitHub.
github.com
September 3, 2026 at 12:46 PM
Redis RCE PoC (CVE-2026-81934) https://github.com/v12-security/pocs/tree/main/redis/server_ssl