conquest

Conquest is a feature-rich, extensible and malleable command & control/post-exploitation framework developed for penetration testing and adversary simulation. Conquest's team server, operator client and agent have all been developed using the Nim programming language and are designed with...

keelog-bof

KeeLog Async BOF that captures the KeePass master password by monitoring for the unlock prompt window. When a locked KeePass database is detected, a low-level keyboard hook is installed and keystrokes are captured until the prompt window disappears by being submitted, cancelled or closeed. The...

tgt-monitor-bof

Kerberos TGT 모니터링 및 자동 갱신 이 저장소에는 두 개의 Async Beacon Object FileBOF이 포함되어 있습니다. 첫 번째인 tgt-monitor는 시스템에서 Kerberos 로그온 이벤트를 모니터링하고, 새로운 Kerberos TGT가 캡처될 때마다 에이전트를 깨웁니다. Rubeus의 monitor 명령과 유사하게 이 BOF는 무기한 실행되며 주기적으로 시스템의 LSA 티켓 캐시를 확인합니다. 새 TGT가 감지되면 티켓 메타데이터를 출력하고 base64로 인코딩된 kirbi blob을 내보내어...

grc2

nimc2 This software is in very early development stages and you might run into many issues using it nimc2 is a very lightweight C2 written fully in nim. It's uses range from user support to employee monitoring. If you want to give it a try check out the wiki to learn how to install and use nimc2...

EUVD-2020-22984

Malware in sbrugna...

EUVD-2003-0923

Malware in sbrugna...

CVE-2003-0933

Buffer overflow in conquest 7.2 and earlier may allow a local user to execute arbitrary code via a long environment variable...

ConQuest Dicom Server 1.5.0d Remote Command Execution Exploit

!/usr/bin/env python3 --------------------------------------------------------- preauth rce poc for ConQuest Dicom Server 1.5.0d --------------------------------------------------------- 04.08.2023 @ 22:07 code610 blogspot com import socket target = '192.168.56.106' rport = 5678 pkt1 =...

ConQuest Dicom Server 1.5.0d Remote Command Execution

!/usr/bin/env python3 --------------------------------------------------------- preauth rce poc for ConQuest Dicom Server 1.5.0d --------------------------------------------------------- 04.08.2023 @ 22:07 code610 blogspot com import socket target = '192.168.56.106' rport = 5678 pkt1 =...

CVE-2020-35308

CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code...

CVE-2020-35308

CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code...

Remote code execution

CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code...

CVE-2020-35308

CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code...

CVE-2020-35308

Technical details about CVE-2020-35308 are not publicly disclosed in the provided documents. The connected records do not specify affected versions beyond 1.5.0, root cause, or concrete remediation. Monitor for updates from vendor/security advisories.

IMAGE CONQUEST DICOM SERVER 命令注入漏洞

IMAGE CONQUEST DICOM SERVER is IMAGE an open source application. It can store, validate, query and retrieve through programmable SQL database tables. A security vulnerability exists in CONQUEST DICOM SERVER before 1.5.0, which can be exploited by attackers to execute malicious code...

CVE-2020-35308: Undefined Security Weakness

CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code...

Code Execution Vulnerability in CONQUEST DICOM SERVER

DICOM is a software in the medical field, mainly used in radiology, similar to image transfer and so on. A code execution vulnerability exists in CONQUEST DICOM SERVER, which can be exploited by attackers to execute malicious code...

Art of Conquest (Unreleased) - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Art of Conquest Unreleased published at the 'play' market has multiple vulnerabilities...

ConQuest DICOM Server 1.4.17d - Stack Buffer Overflow Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python -- coding: utf8 -- ConQuest DICOM Server 1.4.17d Remote Stack Buffer Overflow RCE Vendor: University of Manchester. Developed by Marcel van Herk, Lambert Zijp and Jan Meinders. The Netherlands Cancer Institute Product web pag...

ConQuest DICOM Server 1.4.17d - Stack Buffer (PoC)

!/usr/bin/env python -- coding: utf8 -- ConQuest DICOM Server 1.4.17d Remote Stack Buffer Overflow RCE Vendor: University of Manchester. Developed by Marcel van Herk, Lambert Zijp and Jan Meinders. The Netherlands Cancer Institute Product web page: https://ingenium.home.xs4all.nl/dicom.html |...