keelog-bof

KeeLog 一种异步BOF，通过监控解锁提示窗口来捕获KeePass主密码。当检测到锁定的KeePass数据库时，会安装一个低级键盘钩子，捕获按键直到提示窗口通过提交、取消或关闭消失。捕获的缓冲区随后返回给操作员，并自动重构为主密码。 !Important 此BOF需要异步对象文件加载能力才能在不阻塞agent的情况下工作。该功能由Conquest框架提供。 工作原理 此BOF监视前台窗口标题，以确定KeePass主密码提示何时处于活动状态。锁定数据库窗口的标题遵循格式Open Database -...

tgt-monitor-bof

Kerberos TGT Monitoring & Auto-Renewal This repository contains two Async Beacon Object Files BOF. The first, tgt-monitor, monitors the system for Kerberos logon events and wakes up the agent whenever a new Kerberos TGT is captured. Similar to Rubeus' monitor command, this BOF is running...

conquest

Conquest es un framework de comando y control/post-explotación completo, extensible y maleable, desarrollado para pruebas de penetración y simulación de adversarios. El servidor de equipo, el cliente de operador y el agente de Conquest se han desarrollado utilizando el lenguaje de programación Ni...

grc2

nimc2 This software is in very early development stages and you might run into many issues using it nimc2 is a very lightweight C2 written fully in nim. It's uses range from user support to employee monitoring. If you want to give it a try check out the wiki to learn how to install and use nimc2...

EUVD-2003-0923

Malware in sbrugna...

EUVD-2020-22984

Malware in sbrugna...

CVE-2003-0933

Buffer overflow in conquest 7.2 and earlier may allow a local user to execute arbitrary code via a long environment variable...

ConQuest Dicom Server 1.5.0d Remote Command Execution Exploit

!/usr/bin/env python3 --------------------------------------------------------- preauth rce poc for ConQuest Dicom Server 1.5.0d --------------------------------------------------------- 04.08.2023 @ 22:07 code610 blogspot com import socket target = '192.168.56.106' rport = 5678 pkt1 =...

ConQuest Dicom Server 1.5.0d Remote Command Execution

!/usr/bin/env python3 --------------------------------------------------------- preauth rce poc for ConQuest Dicom Server 1.5.0d --------------------------------------------------------- 04.08.2023 @ 22:07 code610 blogspot com import socket target = '192.168.56.106' rport = 5678 pkt1 =...

CVE-2020-35308

CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code...

CVE-2020-35308

CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code...

Remote code execution

CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code...

CVE-2020-35308

CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code...

CVE-2020-35308

Technical details about CVE-2020-35308 are not publicly disclosed in the provided documents. The connected records do not specify affected versions beyond 1.5.0, root cause, or concrete remediation. Monitor for updates from vendor/security advisories.

IMAGE CONQUEST DICOM SERVER 命令注入漏洞

IMAGE CONQUEST DICOM SERVER is IMAGE an open source application. It can store, validate, query and retrieve through programmable SQL database tables. A security vulnerability exists in CONQUEST DICOM SERVER before 1.5.0, which can be exploited by attackers to execute malicious code...

Code Execution Vulnerability in CONQUEST DICOM SERVER

DICOM is a software in the medical field, mainly used in radiology, similar to image transfer and so on. A code execution vulnerability exists in CONQUEST DICOM SERVER, which can be exploited by attackers to execute malicious code...

Art of Conquest (Unreleased) - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Art of Conquest Unreleased published at the 'play' market has multiple vulnerabilities...

ConQuest DICOM Server 1.4.17d - Stack Buffer Overflow Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python -- coding: utf8 -- ConQuest DICOM Server 1.4.17d Remote Stack Buffer Overflow RCE Vendor: University of Manchester. Developed by Marcel van Herk, Lambert Zijp and Jan Meinders. The Netherlands Cancer Institute Product web pag...

ConQuest DICOM Server 1.4.17d - Stack Buffer (PoC)

!/usr/bin/env python -- coding: utf8 -- ConQuest DICOM Server 1.4.17d Remote Stack Buffer Overflow RCE Vendor: University of Manchester. Developed by Marcel van Herk, Lambert Zijp and Jan Meinders. The Netherlands Cancer Institute Product web page: https://ingenium.home.xs4all.nl/dicom.html |...

ConQuest DICOM Server 1.4.17d Remote Stack Buffer Overflow RCE

Summary A full featured DICOM server has been developed based on the public domain UCDMC DICOM code. Some possible applications of the Conquest DICOM software are: DICOM training and testing; Demonstration image archives; Image format conversion from a scanner with DICOM network access; DICOM ima...