keelog-bof

KeeLog 非同期BOF。KeePassのロック解除プロンプトウィンドウを監視して、マスターパスワードをキャプチャします。ロックされたKeePassデータベースが検出されると、低レベルキーボードフックがインストールされ、プロンプトウィンドウが送信、キャンセル、または閉じられて消えるまでキーストロークがキャプチャされます。キャプチャされたバッファはオペレーターに返され、自動的にマスターパスワードに再構築されます。 !Important...

tgt-monitor-bof

Kerberos TGT 監視 & 自動更新 このリポジトリには、2つの非同期ビーコンオブジェクトファイル（BOF）が含まれています。1つ目は tgt-monitor で、Kerberos ログオンイベントを監視し、新しい Kerberos TGT がキャプチャされるたびにエージェントを起動します。Rubeus の monitor コマンドと同様に、この BOF は無期限に実行され、定期的にシステム上の LSA チケットキャッシュをチェックします。新しい TGT が検出されると、チケットのメタデータを表示し、pass-the-ticket 攻撃による横方向の移動に使用できる base64...

conquest

Conquest 是一个功能丰富、可扩展且灵活的命令与控制/后渗透框架，专为渗透测试和对手模拟而设计。Conquest 的团队服务器、操作员客户端和代理均使用 Nim 编程语言开发，并以模块化和灵活性为设计目标。它具备高级可塑配置文件系统，用于定制网络流量；采用 Dear ImGui 开发的多用户客户端 GUI；强大的 Python 脚本 API；以及 Monarch 代理——一个针对 Windows 目标的可扩展 C2 植入程序。 !CAUTION Conquest 仅供教育目的、研究以及对你拥有或已获得明确授权进行安全测试的系统使用。作者不提供任何保证，也不对滥用承担任何责任。 开始...

grc2

nimc2 This software is in very early development stages and you might run into many issues using it nimc2 is a very lightweight C2 written fully in nim. It's uses range from user support to employee monitoring. If you want to give it a try check out the wiki to learn how to install and use nimc2...

EUVD-2003-0923

Malware in sbrugna...

EUVD-2020-22984

Malware in sbrugna...

CVE-2003-0933

Buffer overflow in conquest 7.2 and earlier may allow a local user to execute arbitrary code via a long environment variable...

ConQuest Dicom Server 1.5.0d Remote Command Execution Exploit

!/usr/bin/env python3 --------------------------------------------------------- preauth rce poc for ConQuest Dicom Server 1.5.0d --------------------------------------------------------- 04.08.2023 @ 22:07 code610 blogspot com import socket target = '192.168.56.106' rport = 5678 pkt1 =...

ConQuest Dicom Server 1.5.0d Remote Command Execution

!/usr/bin/env python3 --------------------------------------------------------- preauth rce poc for ConQuest Dicom Server 1.5.0d --------------------------------------------------------- 04.08.2023 @ 22:07 code610 blogspot com import socket target = '192.168.56.106' rport = 5678 pkt1 =...

CVE-2020-35308

CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code...

CVE-2020-35308

CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code...

Remote code execution

CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code...

CVE-2020-35308

CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code...

CVE-2020-35308

Technical details about CVE-2020-35308 are not publicly disclosed in the provided documents. The connected records do not specify affected versions beyond 1.5.0, root cause, or concrete remediation. Monitor for updates from vendor/security advisories.

IMAGE CONQUEST DICOM SERVER 命令注入漏洞

IMAGE CONQUEST DICOM SERVER is IMAGE an open source application. It can store, validate, query and retrieve through programmable SQL database tables. A security vulnerability exists in CONQUEST DICOM SERVER before 1.5.0, which can be exploited by attackers to execute malicious code...

Code Execution Vulnerability in CONQUEST DICOM SERVER

DICOM is a software in the medical field, mainly used in radiology, similar to image transfer and so on. A code execution vulnerability exists in CONQUEST DICOM SERVER, which can be exploited by attackers to execute malicious code...

Art of Conquest (Unreleased) - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Art of Conquest Unreleased published at the 'play' market has multiple vulnerabilities...

ConQuest DICOM Server 1.4.17d - Stack Buffer Overflow Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python -- coding: utf8 -- ConQuest DICOM Server 1.4.17d Remote Stack Buffer Overflow RCE Vendor: University of Manchester. Developed by Marcel van Herk, Lambert Zijp and Jan Meinders. The Netherlands Cancer Institute Product web pag...

ConQuest DICOM Server 1.4.17d - Stack Buffer (PoC)

!/usr/bin/env python -- coding: utf8 -- ConQuest DICOM Server 1.4.17d Remote Stack Buffer Overflow RCE Vendor: University of Manchester. Developed by Marcel van Herk, Lambert Zijp and Jan Meinders. The Netherlands Cancer Institute Product web page: https://ingenium.home.xs4all.nl/dicom.html |...

ConQuest DICOM Server 1.4.17d Remote Stack Buffer Overflow RCE

Summary A full featured DICOM server has been developed based on the public domain UCDMC DICOM code. Some possible applications of the Conquest DICOM software are: DICOM training and testing; Demonstration image archives; Image format conversion from a scanner with DICOM network access; DICOM ima...