Harden-Windows-Security

Harden Windows Security | Una Nueva Amenaza para el Malware Protege Windows de Forma Segura, Fiable y Solo con Métodos Oficiales de Microsoft...

SharpGPOAbuse

SharpGPOAbuse SharpGPOAbuse 是一个用 C 编写的 .NET 应用程序，可用于利用用户对组策略对象（GPO）的编辑权限，来破坏该 GPO 所控制的对象。 更多详细信息可在以下博客文章中找到：https://labs.mwrinfosecurity.com/tools/sharpgpoabuse 编译说明 确保必要的 NuGet 包已正确安装，然后在 Visual Studio 中直接生成项目。 使用方法 root@kitploit: 用法： SharpGPOAbuse.exe 攻击类型 目前 SharpGPOAbuse 支持以下选项： 选项| 描述 ---|--...

TaskManager-Button-Disabler

TaskManager-Button-Disabler 禁用/重命名任务管理器按钮的简单方法。 安装 root@kitploit: git clone https://github.com/Mrakovic-ORG/TaskManager-Button-Disabler cd TaskManager-Button-Disabler\TaskManager Button Disabler dotnet build 功能特性 重命名终止进程按钮 禁用终止进程按钮 适用于任务管理器、ProcessHacker等 实际效果...

Codecepticon - .NET Application That Allows You To Obfuscate C#, VBA/VB6 (Macros), And PowerShell Source Code

Codecepticon is a .NET application that allows you to obfuscate C, VBA/VB6 macros, and PowerShell source code, and is developed for offensive security engagements such as Red/Purple Teams. What separates Codecepticon from other obfuscators is that it targets the source code rather than the compil...

.NET Application Event ID 1026 Inventory.exe unhandled exception

On PVS server, periodic errors every 6-10 minutes are being logged: Application event ID 1026 from .NET with details:Application: Inventory.exe;The process was terminated due to an unhandled exception. Application event ID 1000 with Faulting Application name: Inventory.exe System event ID 36871...

August 7, 2017—KB4038220 (OS Build 14393.1537)

None None...

Car-Net - Corrupted files, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Car-Net published at the 'play' market has multiple vulnerabilities...

Privilege escalation

The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at optimization, which allows remote attackers to execute arbitrary code via a crafted .NET application, aka "RyuJIT Optimization Elevation of Privilege Vulnerability," a different vulnerability than...

Microsoft .NET Framework Privilege Elevation Vulnerability (2769324)

This host is missing an important security update according to Microsoft Bulletin MS13-004. OpenVAS Vulnerability Test $Id: secpodms13-004.nasl 5365 2017-02-20 13:46:09Z cfi $ Microsoft .NET Framework Privilege Elevation Vulnerability 2769324 Authors: Antu Sanadi Copyright: Copyright c 2013 SecPo...

Design/Logic Flaw

The code-optimization feature in the reflection implementation in Microsoft .NET Framework 4 and 4.5 does not properly enforce object permissions, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP or 2 a crafted .NET Framework application, a...

CVE-2012-2519

CVE-2012-2519 : Untrusted search path vulnerability in Entity Framework/ADO.NET of Microsoft .NET Framework (1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4) allows local privilege gain via a Trojan DLL in the current working directory. Connected sources confirm this as a real, public entry with concret...

CVE-2012-4777

The code-optimization feature in the reflection implementation in Microsoft .NET Framework 4 and 4.5 does not properly enforce object permissions, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP or 2 a crafted .NET Framework application, a...

Ektron CMS400.NET WorkArea/ContentRatingGraph.aspx res Parameter SQL Injection

The remote host is running CMS400.NET, a .NET content management solution. The version of CMS400.NET installed on the remote host fails to sanitize user-supplied input to the 'res' parameter of the 'WorkArea/ContentRatingGraph.aspx' script before using it in a database query. An unauthenticated...