Re-creation of the Darkhotel APT "Double Star" exploit chain, including many enhancements and personalizations. From Firefox RCE, to sandbox escape, to EoP to SYSTEM utilizing CVE-2020-0674 and CVE-2019-17026

This page summarizes the projects mentioned and recommended in the original post on /r/blueteamsec

SurveyJS - Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App
With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.
surveyjs.io
featured
InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
  • DoubleStar

    A personalized/enhanced re-creation of the Darkhotel "Double Star" APT exploit chain with a focus on Windows 8.1 and mixed with some of my own techniques (by forrest-orr)

  • SurveyJS

    Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App. With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.

    SurveyJS logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

  • Stirling PDF: Self-hosted, web-based PDF manipulation tool

    4 projects | news.ycombinator.com | 2 May 2024
  • blooket-cheat VS blooket-hack - a user suggested alternative

    2 projects | 26 Apr 2024
  • Minecraft Randar Exploit

    1 project | news.ycombinator.com | 20 Apr 2024
  • Randar: A Minecraft exploit that uses LLL lattice reduction to crack server RNG

    4 projects | news.ycombinator.com | 17 Apr 2024
  • Universal local privilege escalation exploit for CVE-2024-1086

    1 project | news.ycombinator.com | 11 Apr 2024