The Absurdly Underestimated Dangers of CSV Injection

Abusing DCOM For Yet Another Lateral Movement Technique

Offensive Security Free

An exploration of a new method to abuse DCOM for remote payload execution and lateral movement.

Google Dorks

Offensive Security Free

A collection of search queries that can reveal sensitive information, vulnerabilities, and exposed data indexed by Google. Free to access through Exploit-DB's Google Hacking Database.

A practical guide to RFID badge copying

Offensive Security Free

A guide to bypassing RFID card reader security mechanisms using specialized hardware

Abusing Exported Functions and Exposed DCOM Interfaces for Pass-Thru Command Execution and Lateral Movement

Offensive Security Free

A blog post about abusing exported functions and exposed DCOM interfaces for pass-thru command execution and lateral movement

aem-hacker

Offensive Security Free

AEM (Adobe Experience Manager) Hacker is a tool designed to help security researchers and penetration testers identify and exploit vulnerabilities in AEM-based systems.

AFE Android Framework for Exploitation

Offensive Security Free

A framework for exploiting Android-based devices and applications