KB5010794: Out-of-band update for Windows 8.1 and Windows Server 2012 R2: January 17, 2022

KB5010794: Out-of-band update for Windows 8.1 and Windows Server 2012 R2: January 17, 2022 Summary This update resolves the following issues: Virtual machines VMs located on a server that has Unified Extensible Firmware Interface UEFI enabled fail to start after installing the January 11, 2022...

[updated] You can update now: Microsoft patches 97 bugs including 6 zero-days and a wormable one

How time flies sometimes. Microsoft yesterday released the first patch Tuesday security updates of the year 2022. The update includes fixes for six zero-day vulnerabilities and a total of 97 bugs. This includes two Remote Code Execution RCE vulnerabilities affecting open source libraries. None of...

January 11, 2022—KB5009543 (OS Builds 19042.1466, 19043.1466, and 19044.1466)

None None...

January 11, 2022—KB5009595 (Security-only update)

None None...

January 11, 2022—KB5009624 (Monthly Rollup)

None None...

January 11, 2022—KB5009555 (OS Build 20348.469)

None None...

January 11, 2022—KB5009610 (Monthly Rollup)

None None...

January 11, 2022—KB5009621 (Security-only update)

None None...

January 11, 2022—KB5009619 (Security-only update)

None None...

January 11, 2022—KB5009546 (OS Build 14393.4886) - EXPIRED

None None...

LACheck - Multithreaded C# .NET Assembly Local Administrative Privilege Enumeration

Multithreaded C .NET Assembly Local Administrative Privilege Enumeration Arguments domain controller to query if not ran on a domain-joined host /domain - specify domain name if not ran on a domain-joined host /edr - check host for EDR requires smb, rpc, or winrm /logons - return logged on users ...

The vulnerability of the Active Directory Domain Controller component of the Samba networking software allows a perpetrator to execute arbitrary code.

The vulnerability of the Active Directory Domain Controller component in the Samba networking software package arises due to a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result cou...

OESA-2021-1461 samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: A flaw was discovered in the way samba implements SMB1 authentication. Even if Kerberos authentication is required, an attacker can use this flaw to retrieve the clear text password sent over the...

Kerberoast - Kerberoast Attack -Pure Python-

Kerberos attack toolkit -pure python- Install pip3 install kerberoast Prereqirements Python 3.6 See requirements.txt For the impatient IMPORTANT: the accepted target url formats for LDAP and Kerberos are the following : +://:@/?= : +://:@/?= Steps -with SSPI-: kerberoast auto Steps -SSPI not...

DetectionLabELK - A Fork From DetectionLab With ELK Stack Instead Of Splunk

DetectionLabELK is a fork from Chris Long's DetectionLab with ELK stack instead of Splunk. Description: DetectionLabELK is the perfect lab to use if you would like to build effective detection capabilities. It has been designed with defenders in mind. Its primary purpose is to allow blueteams to...

November 9, 2021—KB5007245 (Security-only update)

None None...

Samba 权限许可和访问控制问题漏洞

Samba is the standard Windows interoperability suite for Linux and Unix. Samba suffers from a permission permission and access control issue vulnerability that stems from multiple flaws found in the way samba AD DC implements access and consistency checks for stored data. An attacker could exploi...

Samba 竞争条件问题漏洞

Samba is the standard Windows interoperability suite for Linux and Unix. A security vulnerability exists in Samba that stems from a flaw discovered in the way Samba, which acts as an Active Directory domain controller, implements Kerberos name-based authentication. An attacker could exploit this...

Samba AD DC did not correctly sandbox

Description Samba as an Active Directory Domain Controller is able to support an RODC, which is meant to have minimal privileges in a domain. However, in accepting a ticket from a Samba or Windows RODC, Samba was not confirming that the RODC is authorized to print such a ticket, via the...