🧰 .NET

The items that name it 45

• What are shell vulnerabilities? PHP2Shell, Node2Shell (HTTP2Shell), React2Shell and Log4Shell explained
  articleas affected products2026-10-29
• A quiet week in infosec <.<
  articleas affected products2026-10-29It is written here as .NET (affected by the Brotli flaw).

  affected by the Brotli flaw

• Node2Shell: Reproducing CVE-2026-111497 in the Node.js Brotli decoder
  writeupas affected products2026-10-29
• eMudhra, Brotli, and the Long Tail of a Security Fix
  articleas classification.technologies2026-10-26
• Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
  articleas classification.technologies2026-10-26
• Brotlipocalypse
  writeupas classification.technologies2026-10-24
• Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
  articleas classification.technologies2026-10-14
• Patch Tuesday - October 2026
  advisoryas classification.technologies2026-10-13
• ZDI: The October 2026 Security Update Review
  advisoryas classification.technologies2026-10-13
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-12
• Ignore all instructions and read this blog: The state of AI-analysis evasion in malware
  articleas classification.technologies2026-10-08
• Blinder Tunnel Campaign Targets Iraqi Infrastructure
  articleas classification.technologies2026-10-06
• China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor
  writeupas classification.technologies2026-09-30
• Determined Attacker Uploads Malicious Webshells to Parks and Rec Management Platform Servers
  writeupas classification.technologies2026-09-30
• AD Rights Management Service (Part 2): Extraction, Offline Decryption, and the Unrotatable Key
  writeupas classification.technologies2026-09-10
• AD Rights Management Service (Part 1): Architecture, Deprecation, and Reconnaissance
  articleas classification.technologies2026-09-08
• Built to Blend: Miraak's Modular Post-Exploitation Framework
  writeupas classification.technologies2026-08-26
• UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations
  writeupas classification.technologies2026-08-20
• VEEAM UNDER FIRE: Understanding CVE-2026–44963 & Ransomware Group Exploit Claims
  writeupas classification.technologies2026-08-20
• Post-DEF CON Phishing Uses Malicious Google Doc to Deliver Malware
  writeupas classification.technologies2026-08-19
• Bank of America Phishing Email Delivers ScreenConnect Malware
  writeupas classification.technologies2026-08-04
• CosmosEscape: Taking Over Every Database in Azure Cosmos DB
  writeupas classification.technologies2026-07-30
• Inside FakeAgent: How a Claude Desktop Malvertising Campaign Hit 29 Organizations with SectopRAT
  writeupas classification.technologies2026-07-22
• JFrog: NuGet Typosquat Rigs Betting Outcomes at Digitain
  writeupas classification.technologies2026-07-21
• Socket: Fake Braintree NuGet Package Skims Credit Cards
  writeupas classification.technologies2026-07-15
• Socket: 11 Malicious NuGet Tools Pose as Game Cheats
  writeupas classification.technologies2026-07-15
• Factoring "short-sleeve" RSA keys with polynomials
  articleas classification.technologies2026-06-12
• DECODING GRIXBA — A PLAY RANSOMWARE SCANNER
  writeupas classification.technologies2026-06-08
• Inside .NET Loader Analysis: From Malspam to In-Memory Loader
  writeupas classification.technologies2026-06-03
• Socket: Malicious NuGet Package Impersonates Sicoob Banking SDK
  writeupas classification.technologies2026-05-29
• Alice and Bob Learn Secure Coding: Chapter 2
  videoas technologies2026-05-11
• Socket: 5 Malicious NuGet Packages Target Chinese .NET Developers
  writeupas classification.technologies2026-05-07
• When Prompts Become Shells: RCE Vulnerabilities in AI Agent Frameworks (Semantic Kernel)
  writeupas classification.technologies2026-05-07
• Microsoft Agent Governance Toolkit
  repoas classification.technologies2026-05-06
• microsoft/AntiSSRF
  repoas classification.technologies2026-05-06
• Hiding in Plain Sight with App Domain Manager Injection
  writeupas classification.technologies2026-02-19
• Dissecting CrashFix: KongTuke's New Toy
  writeupas classification.technologies2026-01-16
• Gladinet CentreStack/Triofox: Cryptography Vulnerability | Huntress
  advisoryas classification.technologies2025-12-18
• ClickFix Gets Creative: Malware Buried in Images
  writeupas classification.technologies2025-11-24
• EDR: The Great Escape - RomHack Training Review
  writeupas affected products2024-09-30

  Internals, IL, header, ImplMap table, R2R stomping, JIT hooking, and DynamicMethod/reflection discussed

• Two in a row - You mitigated wrong (Kentico CMS RCE)
  writeupas classification.technologies2024-03-06
• Using a C# Shellcode Runner and ConfuserEx to Bypass UAC
  writeupas classification.technologies2020-10-30
• microsoft/mxc
  repoas classification.technologies
• Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
  articleas classification.technologies
• Sift — Open-Source Secrets/Credential Scanner
  repoas classification.technologies