ADLab

ADLab PowerShell 模块 简介 此模块旨在自动化部署用于内部渗透测试练习的 Active Directory 实验室环境。 感谢 Joe Helle 及其 PowerShell for Pentesters 课程 提供的攻击向量生成思路。 使用说明 准备 可选但推荐：将模块移入 PSModulePath Display PSModulePath $env:PSModulePath.split";" Move module to path Move-Item .\ADLab...

ADLab

AD渗透测试实验室 作者：@browninfosecguy 版本：1.0 用途：此脚本可用于配置域控制器和工作站。 适用于服务器的选项： 选项1：为域控制器配置机器名称和静态IP地址。 选项2：在服务器上安装“Active Directory Domain Services”角色并配置域控制器。 选项3：在域控制器和工作站上设置网络共享。 选项4：创建组策略以“禁用”Windows Defender。 选项5：在域控制器上创建用户账户。 适用于工作站的选项： 选项3：在域控制器和工作站上设置网络共享。 选项6：配置机器名称并将DNS设置为域控制器的IP地址。 选项7：将工作站加入域。...

EUVD-2018-3781

Malware in sbrugna...

EUVD-2020-6290

Malware in sbrugna...

Malicious code in raspberry-hotel-kilo-adlab (npm)

The package raspberry-hotel-kilo-adlab was found to contain malicious code...

MAL-2025-31656 Malicious code in raspberry-hotel-kilo-adlab (npm)

The package raspberry-hotel-kilo-adlab was found to contain malicious code...

CVE-2020-14131

The Xiaomi Security Center expresses heartfelt thanks to ADLab of VenusTech ! At the same time, we also welcome more outstanding and professional security experts and security teams to join the Mi Security Center MiSRC to jointly ensure the safe access of millions of Xiaomi users worldwide Life...

CVE-2020-14131

The Xiaomi Security Center expresses heartfelt thanks to ADLab of VenusTech ! At the same time, we also welcome more outstanding and professional security experts and security teams to join the Mi Security Center MiSRC to jointly ensure the safe access of millions of Xiaomi users worldwide Life...

CVE-2020-14131: Undefined Security Weakness

The Xiaomi Security Center expresses heartfelt thanks to ADLab of VenusTech ! At the same time, we also welcome more outstanding and professional security experts and security teams to join the Mi Security Center MiSRC to jointly ensure the safe access of millions of Xiaomi users worldwide Life...

CVE-2020-14131

Based on connected documents, CVE-2020-14131 concerns Xiaomi Security Center devices where vulnerability stems from a lack of authentication, enabling an attacker to obtain elevated privileges. The embedded reports describe a privilege escalation path without specifying exact product versions or ...

CVE-2020-14131

The Xiaomi Security Center expresses heartfelt thanks to ADLab of VenusTech ! At the same time, we also welcome more outstanding and professional security experts and security teams to join the Mi Security Center MiSRC to jointly ensure the safe access of millions of Xiaomi users worldwide Life...

Debian DLA-1885-1 : linux-4.9 security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2017-18509 Denis Andzakovic reported a missing type check in the IPv4 multicast routing implementation. A user with the CAPNETADMIN capability in a...

CVE-2018-11773

Apache VCL versions 2.1 through 2.5 do not properly validate form input when processing a submitted block allocation. The form data is then used as an argument to the php built in function strtotime. This allows for an attack against the underlying implementation of that function. The...

Design/Logic Flaw

Apache VCL versions 2.1 through 2.5 do not properly validate form input when processing a submitted block allocation. The form data is then used as an argument to the php built in function strtotime. This allows for an attack against the underlying implementation of that function. The...

Sql injection

Apache VCL versions 2.1 through 2.5 do not properly validate cookie input when determining what node if any was previously selected in the privilege tree. The cookie data is then used in an SQL statement. This allows for an SQL injection attack. Access to this portion of a VCL system requires adm...

CVE-2018-11772

Apache VCL versions 2.1 through 2.5 do not properly validate cookie input when determining what node if any was previously selected in the privilege tree. The cookie data is then used in an SQL statement. This allows for an SQL injection attack. Access to this portion of a VCL system requires adm...

CVE-2018-11772

The CVE-2018-11772 entry concerns Apache VCL versions 2.1–2.5 with an SQL injection caused by improper validation of cookie input used to determine the previously selected node in the privilege tree. The cookie data is incorporated into an SQL statement, enabling injection. Access to this VCL are...

CVE-2018-11774

Apache VCL versions 2.1 through 2.5 do not properly validate form input when adding and removing VMs to and from hosts. The form data is then used in SQL statements. This allows for an SQL injection attack. Access to this portion of a VCL system requires admin level rights. Other layers of securi...

CVE-2018-11773

Apache VCL versions 2.1 through 2.5 do not properly validate form input when processing a submitted block allocation. The form data is then used as an argument to the php built in function strtotime. This allows for an attack against the underlying implementation of that function. The...

CVE-2018-11773

Apache VCL exposes a vulnerability in versions 2.1–2.5 where submitted block allocation form input is not properly validated and is passed to PHP’s strtotime, enabling exploitation of that function’s behavior. The advisory notes that versions earlier than 2.5.1 should be upgraded or patched; upgr...