miniplasma-advisory

MiniPlasma - Рекомендации по защите от уязвимости Технические рекомендации по снижению риска для варианта MiniPlasma уязвимости CVE-2020-17103, затрагивающей драйвер мини-фильтра облачных файлов Windows cldflt.sys. Автор: Rafael França — архитектор кибербезопасности Microsoft CSA, подразделение...

MiniPlasma

MiniPlasma O CVE-2020-17103 supostamente ainda funciona...

MiniPlasma-Detection

MiniPlasma-Erkennung CVE-2020-17103 Sigma-Erkennungsregel für MiniPlasma, einen Exploit zur lokalen Rechteausweitung unter Windows, der eine Race Condition in cldflt.sys ausnutzt, um die windir-Umgebungsvariable für das SYSTEM-Konto zu kapern und die geplante Aufgabe WER QueueReporting so...

MiniPlasma-Runner

MiniPlasma-Runner Versione modificata di Nightmare-Eclipse/MiniPlasma CVE-2020-17103 adattata per uso C2. Il PoC originale funziona solo da disco. Questa versione viene eseguita interamente in memoria tramite execute-assembly, con un approccio binario suddiviso per evitare il rilevamento...

Windows Cloud Files Mini Filter Driver EoP (MiniPlasma) (Direct Check) (CVE-2020-17103)

Binary data windowsminiplasmaCVE-2020-17103.nbin...

Exploit for Improper Privilege Management in Microsoft

MiniPlasma Detection CVE-2020-17103 Sigma detection rule fo...

MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems

Chaotic Eclipse, the security researcher behind the recently disclosed Windows flaws, YellowKey and GreenPlasma, has released a proof-of-concept PoC for a Windows privilege escalation zero-day flaw that grants attackers SYSTEM privileges on fully patched Windows systems. Codenamed MiniPlasma , th...