HashDump-BypassEDR

1 Resumen del proyecto Mediante el uso extendido del programa de confianza del sistema Reg.exe, se sortean hábilmente los puntos de interceptación del antivirus, logrando el objetivo de evadir el EDR para realizar un DumpHash. Según las pruebas reales, este método es eficaz contra los sistemas de...

RFCpwn

RFCpwn 一个使用 SAP RFC 调用的 SAP 枚举与利用工具包 Twitter: @icryo 这是一个用于展示受损服务账户影响的工具包。 此 PoC 不适用于生产环境，不保证稳定性或支持。 RFCpwn 依赖于 pyrfc 以及 SAP 提供的库，详情请参见：https://github.com/SAP/PyRFCinstallation root@kitploit: usage: RFCpwn.py -h -debug -ip IP -u Username -p Password -c Client -s Sysid -ping -enum -usercopy -user...

CVE-2016-5639

CVE-2016-5639 Crestron AirMedia AM-100 路径遍历与哈希转储 Metasploit 模块 两个相似的模块，利用 CVE-2016-5639 通过路径遍历转储哈希并检索文件。我将这两个模块分开编写，因为我想获得编写能够"转储"哈希、正确格式化以用于破解，并将其添加到 loot 中的经验。欢迎任何建议。 所有原始漏洞披露与报告的功劳都应归于 Cylance，我想： https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2016-05-001.md...

OSCP-Prep

This is a comprehensive guide for information security infosec professionals, particularly those preparing for the OSCP Offensive Security Certified Professional exam. The guide is a collection of various files, including a PDF document, a text file, and a set of cheat sheets. The PDF document,...

mysql any user password the probability of landing vulnerability-vulnerability warning-the black bar safety net

When connected to MariaDB/MySQL, enter the password with the desired correct password comparison, due to incorrect handling, cause even if the memcmpreturned a non-zero value, it will make MySQL think that the two passwords are the same. That is as long as you know the user name, continually try ...

TorrentTrader 1.0 RC2 SQL Injection Exploit

No description provided by source. !/usr/bin/php ? / TorrentTrader 1.0 RC2 SQL Injection Proof of Concept By aCiDBiTS acidbitsathotmail.com 31-August-2004 "TorrentTrader http://www.torrenttrader.com/ is a feature packed and highly customisable open-source BitTorrent tracker." This PoC dumps the...