199 matches found
WinShareEnum
WinShareEnum Énumérateur de partages Windows téléchargement https://github.com/nccgroup/WinShareEnum/raw/master/Info/WinShareEnum.exe Exécution sur une plage de mon réseau local sans domaine, avec quelques partages factices. Veuillez noter qu'il est principalement conçu pour les réseaux à domaine...
WindowsJobLock
Verrouillage des processus Windows à l'aide d'objets Job Un outil de verrouillage de processus Microsoft Windows utilisant des objets Job Publié en open source par NCC Group Plc - http://www.nccgroup.com/ Développé par Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com...
WMIcmd
Le problème Lors d'investigations à faible impact et d'autres activités similaires, vous pouvez souhaiter minimiser ce qui est écrit sur le disque / ce qui est visible. Cet outil permet d'exécuter des commandes via WMI et d'obtenir des informations autrement indisponibles via ce canal. Objectif U...
WindowsDACLEnumProject
Windows DACL Enum Project Набор инструментов для перечисления и анализа Windows DACL Выпущено как открытое ПО компанией NCC Group Plc - http://www.nccgroup.com/ Разработано Олли Уайтхаусом, ollie dot whitehouse at nccgroup dot com https://github.com/nccgroup/WindowsDACLEnumProject Выпущено под...
yaml2yara
Introduction Publié en open source par NCC Group Plc - http://www.nccgroup.com/ Développé par David Cannings @edeca [email protected] http://www.github.com/nccgroup/yaml2yara Ce projet est publié sous la licence AGPL. Veuillez consulter LICENSE pour plus d'informations. Vue d'ensemble Ce dép...
Untrue
Untrue Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Richard Turnbull, richard dot turnbull at nccgroup dot com http://www.github.com/nccgroup/untrue Released under AGPL, see LICENSE for more information Description Untrue is a tool for checking passwords agains...
CVE-2024-45346
The Xiaomi Security Center expresses heartfelt thanks to Ken Gannon and Ilyes Beghdadi of NCC Group working with Trend Micro Zero Day Initiative! At the same time, we also welcome more outstanding and professional security experts and security teams to join the Mi Security Center MiSRC to jointly...
CVE-2024-45346
CVE-2024-45346 affects Xiaomi GetApps. Connected sources indicate a code execution vulnerability in GetApps, linked to bypassing authentication logic. The CVSS-style metrics in the initial document show high impact (C, I, A = High) with network attack vector and user interaction required. Public ...
CVE-2024-45346 GetApps application has code execution vulnerability
The Xiaomi Security Center expresses heartfelt thanks to Ken Gannon and Ilyes Beghdadi of NCC Group working with Trend Micro Zero Day Initiative! At the same time, we also welcome more outstanding and professional security experts and security teams to join the Mi Security Center MiSRC to jointly...
CVE-2024-45346 GetApps application has code execution vulnerability
The Xiaomi Security Center expresses heartfelt thanks to Ken Gannon and Ilyes Beghdadi of NCC Group working with Trend Micro Zero Day Initiative! At the same time, we also welcome more outstanding and professional security experts and security teams to join the Mi Security Center MiSRC to jointly...
Sonos Speaker Flaws Could Have Let Remote Hackers Eavesdrop on Users
Cybersecurity researchers have uncovered weaknesses in Sonos smart speakers that could be exploited by malicious actors to clandestinely eavesdrop on users. The vulnerabilities "led to an entire break in the security of Sonos's secure boot process across a wide range of devices and remotely being...
Exploit for CVE-2023-47400
CVE-2023-47400 Proof of Concept for the CVE-2023-47400 Aut...
Exploit for Incorrect Comparison in Dynamic-Linq Linq
Dynamic Linq injection to RCE - CVE-2023-32571 About Dynami...
CVE-2023-21414
NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection for device tampering commonly known as Secure Boot contains a flaw which provides an opportunity for a sophisticated attack to bypass this protection. Axis has released patched AX...
Design/Logic Flaw
NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection for device tampering commonly known as Secure Boot contains a flaw which provides an opportunity for a sophisticated attack to bypass this protection. Axis has released patched AX...
CVE-2023-21414
NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection for device tampering commonly known as Secure Boot contains a flaw which provides an opportunity for a sophisticated attack to bypass this protection. Axis has released patched AX...
CVE-2023-21414
CVE-2023-21414 affects Axis OS Secure Boot (device tamper protection). A flaw in the tamper protection mechanism can allow a sophisticated attacker to bypass Secure Boot. Axis has released patched AXIS OS versions and directs to the Axis security advisory for details and remediation. Connected so...
CVE-2023-21414
NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection for device tampering commonly known as Secure Boot contains a flaw which provides an opportunity for a sophisticated attack to bypass this protection. Axis has released patched AX...
Nearly 2,000 Citrix NetScaler Instances Hacked via Critical Vulnerability
Nearly 2,000 Citrix NetScaler instances have been compromised with a backdoor by weaponizing a recently disclosed critical security vulnerability as part of a large-scale attack. "An adversary appears to have exploited CVE-2023-3519 in an automated fashion, placing web shells on vulnerable...
New Vulnerabilities Disclosed in SonicWall and Fortinet Network Security Products
SonicWall on Wednesday urged customers of Global Management System GMS firewall management and Analytics network reporting engine software to apply the latest fixes to secure against a set of 15 security flaws that could be exploited by a threat actor to circumvent authentication and access...