DVS

DCOM Vulnerability Scanner AKA Devious swiss army knife - Lateral movement using DCOM Objects Did you ever wonder how you can move laterally through internal networks? or interact with remote machines without alerting EDRs? Let's assume that we have a valid credentials, or an active session with...

RemoteMonologue

RemoteMonologue RemoteMonologue 是一种 Windows 凭据收集技术，通过利用 Interactive User RunAs 密钥并通过 DCOM 强制 NTLM 认证，实现对远程用户的入侵。 阅读 X-Force Red 的 RemoteMonologue：将 DCOM 武器化用于 NTLM 认证强制，获取详细信息。 功能 🔹 通过 DCOM 进行认证强制（-dcom） 针对四个 DCOM...

DVS - D(COM) V(ulnerability) S(canner) AKA Devious Swiss Army Knife

Did you ever wonder how you can move laterally through internal networks? or interact with remote machines without alerting EDRs? Let's assume that we have a valid credentials, or an active session with access to a remote machine, but we are without an option for executing a process remotely in a...