Windows Persistence via UserInitMprLogonScript

This module establishes persistence by setting the UserInitMprLogonScript value in HKCU\Environment. During user logon, userinit.exe checks this value and executes the specified command or binary. The module writes a payload executable to disk and points UserInitMprLogonScript to that payload...

Windows Registry Persistence via Userinit

This module will install a payload that is executed during user logon. It writes a payload executable to disk and modifies the Userinit registry value in "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" to append the payload path, causing it to execute when any user logs in. Module...

Schneider Electric StruxureWare Building Expert Plaintext Credentials Vulnerability

OVERVIEW Independent researcher Artyom Kurbatov has identified a cleartext transmission vulnerability in Schneider Electric’s StruxureWare Building Expert product. Schneider Electric has produced a new firmware version that mitigates this vulnerability. Artyom Kurbatov has tested the new firmware...

Malicious Microsoft Office Documents: Generate-Macro

This script will generate malicious Microsoft Excel Documents that contain VBA macros. This script will prompt you for an IP address and port you will receive your shell at this address and port and the name of the malicious document. From there, the script will then prompt you to choose from a...

Group Policy Script Execution From Shared Resource

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Group Policy Script Execution From Shared Resource', 'Description' = %q This is a general-purpose module for exploiting systems with...

WebUI RCE Vulnerability

WebUI is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MS15-027: Vulnerability in NETLOGON could allow spoofing: March 10, 2015

None None...

Microsoft Windows win32k.sys Dangling Pointer Privilege Escalation Vulnerability

This vulnerability allows for elevation of privilege on vulnerable installations of Microsoft Windows. An attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability. The specific flaw exists within the usage of Cursor objects. The issue lies in the...

MS15-003: Vulnerability in Windows User Profile service could allow elevation of privilege: January 13, 2015

None None...

PT-2015-3925

Name of the Vulnerable Software and Affected Versions Ex Libris Patron Directory Services PDS NYU OpenSSO Integration versions 2.1 and earlier Description A cross-site scripting XSS issue exists in the logon page, allowing remote attackers to inject arbitrary web script or HTML via the url...

Ex Libris Patron Directory Services 2.1 Cross Site Scripting

CVE-2014-7293 Ex Libris Patron Directory Services PDS XSS Cross-Site Scripting Security Vulnerability Exploit Title: Ex Libris Patron Directory Services PDS Logon Page url Parameter XSS Product: Ex Libris Patron Directory Services PDS Vendor: Ex Libris Vulnerable Versions: 2.1 and probability pri...

Ex Libris Patron Directory Services 2.1 Open Redirect

CVE-2014-7294 Ex Libris Patron Directory Services PDS Open Redirect Security Vulnerability Exploit Title: Ex Libris Patron Directory Services PDS Logon Page url Parameter Open Redirect Product: Ex Libris Patron Directory Services PDS Vendor: Ex Libris Vulnerable Versions: 2.1 and probability prio...

PT-2014-8979

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Edge version 4.1 Description The issue allows remote attackers to obtain the SI PLATFORM SEARCH SERVER LOGON TOKEN token and gain privileges via a crafted CORBA call. Recommendations For SAP BusinessObjects Edge version 4.1...

THC-Hydra 8.1 - Network Logon Cracker

A very fast network logon cracker which support many different services. See feature sets and services coverage page - incl. a speed comparison against ncrack and medusa.Number one of the biggest security holes are passwords, as every password security study shows. This tool is a proof of concept...

MS14-074: Vulnerability in Remote Desktop Protocol Could Allow Security Feature Bypass (3003743)

The remote Windows host is running Remote Desktop Protocol, which does not properly log failed logon attempts, thus allowing attackers to bypass the audit logon security feature. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid79134; scriptversion"1.7";...

Microsoft Windows Remote Desktop Protocol Security Feature Bypass Vulnerability (3003743)

This host is missing an important security update according to Microsoft Bulletin MS14-074. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2014-6318

The audit logon feature in Remote Desktop Protocol RDP in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly log unauthorized login attempts supplying valid...

Design/Logic Flaw

The audit logon feature in Remote Desktop Protocol RDP in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly log unauthorized login attempts supplying valid...

CVE-2014-6318

CVE-2014-6318 refers to a vulnerability in the Remote Desktop Protocol (RDP) audit logon feature across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8/8.1, Server 2012/2012 R2, RT/RT 8.1). The issue is that failed login attempts with valid credentials are not properly logged, ...

PT-2014-7151

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT Gold and 8.1 Description The issue is...