https://library.paracyberbellum.io/rss en Sat, 12 Sep 2026 06:14:24 +0000 https://ssd-disclosure.com/dcom-service-psmserviceexthost-lpe/ https://ssd-disclosure.com/dcom-service-psmserviceexthost-lpe/ Fri, 11 Sep 2026 04:04:27 +0000 https://specterops.io/blog/2021/06/02/an-introduction-to-manual-active-directory-querying-with-dsquery-and-ldapsearch/ https://specterops.io/blog/2021/06/02/an-introduction-to-manual-active-directory-querying-with-dsquery-and-ldapsearch/ Fri, 11 Sep 2026 04:03:32 +0000 https://trustedsec.com/blog/so-you-found-aws-access-keys-part-1 https://trustedsec.com/blog/so-you-found-aws-access-keys-part-1 Fri, 11 Sep 2026 03:58:49 +0000 https://research.checkpoint.com/2026/puzzlemask-abusing-plain-prose-as-a-covert-ai-attack-vector/ https://research.checkpoint.com/2026/puzzlemask-abusing-plain-prose-as-a-covert-ai-attack-vector/ Fri, 11 Sep 2026 03:55:37 +0000 https://specterops.io/blog/2026/09/10/unmasking-sccm-application-execution/ https://specterops.io/blog/2026/09/10/unmasking-sccm-application-execution/ Fri, 11 Sep 2026 03:53:25 +0000 https://blog.nullze.net/posts/peeling-the-sentinel/ https://blog.nullze.net/posts/peeling-the-sentinel/ Fri, 11 Sep 2026 03:52:10 +0000 https://gabdevele.dev/posts/sqlite-dbpage-shared-objects-rce/ https://gabdevele.dev/posts/sqlite-dbpage-shared-objects-rce/ Fri, 11 Sep 2026 03:43:56 +0000 https://www.accomplish.ai/blog/beltdown-escaping-the-claude-code-sandbox/ https://www.accomplish.ai/blog/beltdown-escaping-the-claude-code-sandbox/ Fri, 11 Sep 2026 03:41:47 +0000 https://labs.detectify.com/how-to/how-to-hack-apis-in-2026/ https://labs.detectify.com/how-to/how-to-hack-apis-in-2026/ Fri, 11 Sep 2026 03:41:00 +0000 https://ipurple.team/2026/09/09/windows-security-center/ https://ipurple.team/2026/09/09/windows-security-center/ Thu, 10 Sep 2026 07:17:40 +0000 https://www.slcyber.io/research/out-of-bounds-out-of-sandbox-rce-goja https://www.slcyber.io/research/out-of-bounds-out-of-sandbox-rce-goja Thu, 10 Sep 2026 03:54:12 +0000 https://www.vulncheck.com/blog/zbt-darklantern-speakingstone https://www.vulncheck.com/blog/zbt-darklantern-speakingstone Thu, 10 Sep 2026 03:50:18 +0000 https://www.vulncheck.com/blog/zbt-endlessdoors https://www.vulncheck.com/blog/zbt-endlessdoors Thu, 10 Sep 2026 03:47:46 +0000 https://bynar.io/blog/linux-has-screensharing-rces-too https://bynar.io/blog/linux-has-screensharing-rces-too Thu, 10 Sep 2026 03:46:04 +0000 https://github.com/Orange-Cyberdefense/p3-loader https://github.com/Orange-Cyberdefense/p3-loader Thu, 10 Sep 2026 03:44:20 +0000 https://sensepost.com/blog/2026/process-parameter-poisoning/ https://sensepost.com/blog/2026/process-parameter-poisoning/ Thu, 10 Sep 2026 03:41:48 +0000 https://matheuzsecurity.github.io/hacking/linux-kernel-keyring-fileless-exec/ https://matheuzsecurity.github.io/hacking/linux-kernel-keyring-fileless-exec/ Thu, 10 Sep 2026 03:38:56 +0000 https://github.com/open-policy-agent/opa https://github.com/open-policy-agent/opa Thu, 10 Sep 2026 03:11:19 +0000 https://ethiack.com/info-hub/research/abusing-remix-routing-discrepancies https://ethiack.com/info-hub/research/abusing-remix-routing-discrepancies Wed, 09 Sep 2026 08:49:59 +0000 https://remedio.io/blog/trust-me-im-the-system-arango-db-bugs-secure-system-architecture/ https://remedio.io/blog/trust-me-im-the-system-arango-db-bugs-secure-system-architecture/ Wed, 09 Sep 2026 08:26:10 +0000 https://pentesterlab.com/blog/how-to-secure-jwts-and-avoid-common-vulnerabilities https://pentesterlab.com/blog/how-to-secure-jwts-and-avoid-common-vulnerabilities Wed, 09 Sep 2026 08:24:09 +0000 https://research.checkpoint.com/2026/the-shared-clipboard-inside-the-sandbox-cross-account-data-leakage-in-chatgpt/ https://research.checkpoint.com/2026/the-shared-clipboard-inside-the-sandbox-cross-account-data-leakage-in-chatgpt/ Wed, 09 Sep 2026 08:22:51 +0000 https://github.com/IceMoonHSV/TATS https://github.com/IceMoonHSV/TATS Wed, 09 Sep 2026 08:12:49 +0000 https://github.com/portbuster1337/lpe-toolkit https://github.com/portbuster1337/lpe-toolkit Wed, 09 Sep 2026 08:06:21 +0000 https://lookup.ntlmrain.com/ https://lookup.ntlmrain.com/ Wed, 09 Sep 2026 08:04:11 +0000 https://www.outflank.nl/blog/2026/09/08/netntlmv1-is-dead-long-live-netntlmv1/ https://www.outflank.nl/blog/2026/09/08/netntlmv1-is-dead-long-live-netntlmv1/ Wed, 09 Sep 2026 07:57:22 +0000 https://www.huntress.com/blog/ad-rms-architecture-and-recon https://www.huntress.com/blog/ad-rms-architecture-and-recon Wed, 09 Sep 2026 07:48:17 +0000 https://censys.com/blog/adaptixc2-open-source-c2-framework https://censys.com/blog/adaptixc2-open-source-c2-framework Tue, 08 Sep 2026 11:41:05 +0000 https://www.netresec.com/?page=Blog&month=2026-08&post=CNCMachineRMS-C2-Protocol https://www.netresec.com/?page=Blog&month=2026-08&post=CNCMachineRMS-C2-Protocol Tue, 08 Sep 2026 09:23:48 +0000 https://matheuzsecurity.github.io/hacking/fileless-loader-bypassing-elastic-memfd/ https://matheuzsecurity.github.io/hacking/fileless-loader-bypassing-elastic-memfd/ Tue, 08 Sep 2026 09:22:09 +0000 https://depthfirst.com/research/going-depthfirst-achieving-gitlab-rce-via-two-ruby-memory-corruption-vulnerabilities https://depthfirst.com/research/going-depthfirst-achieving-gitlab-rce-via-two-ruby-memory-corruption-vulnerabilities Tue, 08 Sep 2026 09:19:21 +0000 https://github.com/chaitin/safeline https://github.com/chaitin/safeline Tue, 08 Sep 2026 09:16:27 +0000 https://git.smukx.site/smukx/Rust-for-Malware-Development https://git.smukx.site/smukx/Rust-for-Malware-Development Mon, 07 Sep 2026 05:34:29 +0000 https://www.optimuslabs.io/research/briefings/coder-registry-infrastructure-hijack https://www.optimuslabs.io/research/briefings/coder-registry-infrastructure-hijack Mon, 07 Sep 2026 05:31:25 +0000 https://xusheng.dev/posts/byotc/main/ https://xusheng.dev/posts/byotc/main/ Mon, 07 Sep 2026 05:24:44 +0000 https://www.synacktiv.com/en/publications/caught-in-the-octopus-trap-unauthenticated-rce-in-argo-cd-with-codeql https://www.synacktiv.com/en/publications/caught-in-the-octopus-trap-unauthenticated-rce-in-argo-cd-with-codeql Mon, 07 Sep 2026 05:21:35 +0000 https://www.netspi.com/blog/technical-blog/cloud-pentesting/modern-adventures-in-azure-privilege-escalation/ https://www.netspi.com/blog/technical-blog/cloud-pentesting/modern-adventures-in-azure-privilege-escalation/ Mon, 07 Sep 2026 05:19:45 +0000 https://github.com/NeffIsBack/EVENmonitor https://github.com/NeffIsBack/EVENmonitor Mon, 07 Sep 2026 05:17:21 +0000 https://blog.elcomsoft.com/2026/02/usb-device-forensics-on-windows-10-and-11/ https://blog.elcomsoft.com/2026/02/usb-device-forensics-on-windows-10-and-11/ Mon, 07 Sep 2026 04:47:15 +0000 https://www.guidepointsecurity.com/blog/attacking-and-defending-scom/ https://www.guidepointsecurity.com/blog/attacking-and-defending-scom/ Mon, 07 Sep 2026 04:43:20 +0000 https://cham1ndux.github.io/posts/BYOVD-EDR-killer-with-a-UAC-bypass-and-a-lying-comment-block/ https://cham1ndux.github.io/posts/BYOVD-EDR-killer-with-a-UAC-bypass-and-a-lying-comment-block/ Mon, 07 Sep 2026 04:41:20 +0000 https://0xsec.gitbook.io/0xsec/windows/uac-bypass-cmstplua-com-exploitation https://0xsec.gitbook.io/0xsec/windows/uac-bypass-cmstplua-com-exploitation Mon, 07 Sep 2026 04:40:06 +0000 https://github.com/mukul975/cve-mcp-server https://github.com/mukul975/cve-mcp-server Mon, 07 Sep 2026 04:37:07 +0000 https://insinuator.net/2026/09/token-theft-in-microsoft-entra-id-part-2-of-4-continuous-access-evaluation/ https://insinuator.net/2026/09/token-theft-in-microsoft-entra-id-part-2-of-4-continuous-access-evaluation/ Mon, 07 Sep 2026 04:30:44 +0000 https://www.pikered.com/en/learn/bypass-remote-debugging-port-restrictions/ https://www.pikered.com/en/learn/bypass-remote-debugging-port-restrictions/ Mon, 07 Sep 2026 04:25:49 +0000 https://sansec.io/research/stylesmuggler https://sansec.io/research/stylesmuggler Mon, 07 Sep 2026 04:22:04 +0000 https://tantosec.com/blog/2026/09/telerik-padding-oracle-to-shell/ https://tantosec.com/blog/2026/09/telerik-padding-oracle-to-shell/ Mon, 07 Sep 2026 04:16:18 +0000