265 matches found
EvtMute - Apply A Filter To The Events Being Reported By Windows Event Logging
This is a tool that allows you to offensively use YARA to apply a filter to the events being reported by windows event logging. Usage Grap the latest verison from here. EvtMuteHook.dll contains the core functionality, once it is injected it will apply a temporary filter which will allow all event...
CVE-2020-1509
An elevation of privilege vulnerability exists in the Local Security Authority Subsystem Service LSASS when an authenticated attacker sends a specially crafted authentication request. A remote attacker who successfully exploited this vulnerability could cause an elevation of privilege on the targ...
Privilege escalation
An elevation of privilege vulnerability exists in the Local Security Authority Subsystem Service LSASS when an authenticated attacker sends a specially crafted authentication request. A remote attacker who successfully exploited this vulnerability could cause an elevation of privilege on the targ...
CVE-2020-1509
CVE-2020-1509 is an elevation-of-privilege vulnerability in the Local Security Authority Subsystem Service (LSASS) on Windows. An authenticated attacker could exploit a specially crafted authentication request to elevate privileges on the target system. The issue is addressed by a security update...
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the Local Security Authority Subsystem Service LSASS when an authenticated attacker sends a specially crafted authentication request. A remote attacker who successfully exploited this vulnerability could cause an elevation of privilege on the targ...
PT-2020-3821 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling objects in memory within the Local Security Authority Subsystem Service LSASS of the Windows operating system. It allows a remote attacker to...
KB4571702: Windows Server 2012 August 2020 Security Update
The remote Windows host is missing security update 4571702 or cumulative update 4571736. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Windows Media Audio Codec improperly handles objects. An attacker who successfully exploited the...
Design/Logic Flaw
This security update corrects a denial of service in the Local Security Authority Subsystem Service LSASS caused when an authenticated attacker sends a specially crafted authentication request, aka 'Local Security Authority Subsystem Service Denial of Service Vulnerability'...
CVE-2020-1267
This security update corrects a denial of service in the Local Security Authority Subsystem Service LSASS caused when an authenticated attacker sends a specially crafted authentication request, aka 'Local Security Authority Subsystem Service Denial of Service Vulnerability'...
CVE-2020-1267
CVE-2020-1267 is a Windows Local Security Authority Subsystem Service (LSASS) denial-of-service vulnerability. According to CNVD-2020-52913, an attacker could trigger a DoS by sending a specially crafted authentication request, potentially causing the target system to reboot. The connected docume...
Local Security Authority Subsystem Service Denial of Service Vulnerability
This security update corrects a denial of service in the Local Security Authority Subsystem Service LSASS caused when an authenticated attacker sends a specially crafted authentication request. A remote attacker who successfully exploited this vulnerability could cause a denial of service on the...
May 2016 update rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1
May 2016 update rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1 The May 2016 update rollup package for Windows 7 Service Pack 1 SP1 and Windows Server 2008 R2 SP1 resolves issues and includes performance and reliability improvements. We recommend that you apply this update rollup as part ...
Jackdaw - Tool To Collect All Information In Your Domain And Show You Nice Graphs
Jackdaw is here to collect all information in your domain, store it in a SQL database and show you nice graphs on how your domain objects interact with each-other an how a potential attacker may exploit these interactions. It also comes with a handy feature to help you in a password-cracking...
Pypykatz - Mimikatz Implementation In Pure Python
Mimikatz implementation in pure Python. At least a part of it : Runs on all OS's which support python=3.6 WIKI Since version 0.1.1 the command line changed a little. Worry not, I have an awesome WIKI for you. Installing Install it via pip or by cloning it from github. The installer will create a...
Lsassy - Extract Credentials From Lsass Remotely
Python library to remotely extract credentials. This blog post explains how it works. You can check the wiki This library uses impacket project to remotely read necessary bytes in lsass dump and pypykatz to extract credentials. Requirements Python = 3.6 pypykatz = 0.3.0 impacket Installation From...
MS10-068: Vulnerability in Local Security Authority Subsystem Service could allow elevation of privilege
Resolves a vulnerability in Active Directory directory service, Active Directory Application Mode ADAM, and Active Directory Lightweight Directory Service AD LDS that could allow elevation of privilege if an authenticated attacker sent a specially crafted LDAP messages to a listening LSASS...
Persistence – Security Support Provider
Security support provider SSP is a Windows API which is used to extend the Windows authentication mechanism. The LSASS process is loading the security support provider DLL's during Windows startup. This behavior allows a red team operator to either drop an arbitrary SSP DLL in order to interact...
September 24, 2019—KB4516041 (Preview of Monthly Rollup)
None None...