blackhat-usa-2022-demos

blackhat-usa-2022-demos Demos para a palestra Blackhat USA 2022 "Taking Kerberos to the Next Level". Estes são os slides e demos da apresentação de James Forshaw @tiraniddo e Nick Landers @monoxgas. Os demos são os seguintes: demo1.ps1 - Silver ticket com senha. demo2.ps1 - Silver ticket U2U...

Windows Exploitation Tricks: Abusing the User-Mode Debugger

Posted by James Forshaw, Google Project Zero I've recently been adding native user-mode debugger support to NtObjectManager. Whenever I add new functionality I have to do some research and reverse engineering to better understand how it works. In this case I wondered what access you need to debug...

Microsoft Windows - Desktop Bridge Virtual Registry Arbitrary File Read/Write Privilege Escalation E

Exploit for windows platform in category local exploits Windows: Windows: Desktop Bridge Virtual Registry Arbitrary File Read/Write EoP Platform: Windows 1709 not tested earlier version Class: Elevation of Privilege Summary: The handling of the virtual registry for desktop bridge applications can...