RemotePotato0

RemotePotato0 更新 2022-10-21：RemotePotato0 的主要利用场景 RPC- LDAP 已被修复。更多详情请见 -- https://twitter.com/splintercode/status/1583555613950255104 又一个“不会修复”的 Windows 权限提升漏洞，从普通用户提升到域管理员。 RemotePotato0 是一个漏洞利用工具，允许您将权限从普通用户提升到域管理员。 简要说明： 它滥用 DCOM 激活服务，并触发目标机器上当前登录的任何用户的 NTLM 认证。 前提是目标机器上必须有一个特权用户已登录（例如域管理员用户）...

September 27, 2021—KB5005619 (OS Build 20348.261) Preview

None None...

August 26, 2021—KB5005103 (OS Build 18363.1766) Preview

None None...

August 26, 2021—KB5005102 (OS Build 17763.2145) Preview

None None...

RemotePotato0 - Just Another "Won't Fix" Windows Privilege Escalation From User To Domain Admin

Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin. RemotePotato0 is an exploit that allows you to escalate your privileges from a generic User to Domain Admin. Briefly: It abuses the DCOM activation service and trigger an NTLM authentication of the user currently...

CVE-2013-4922

CVE-2013-4922 is a double free vulnerability in the Wireshark DCOM ISystemActivator dissector (function dissect_dcom_sysact.c) affecting Wireshark 1.10.x before 1.10.1, leading to denial of service via crafted packets. Remediation: upgrade to Wireshark 1.10.1 or apply vendor patches; affected adv...