blackhat-usa-2022-demos

blackhat-usa-2022-demos Blackhat USA 2022 講演「Taking Kerberos to the Next Level」のデモです。 これは James Forshaw（@tiraniddo）と Nick Landers（@monoxgas）によるプレゼンテーションのスライドとデモです。デモは以下のとおりです： demo1.ps1 - パスワードを使用したシルバーチケット。 demo2.ps1 - シルバーチケット U2U。 demo3.ps1 - バッファタイプの混乱を利用したシルバーチケット。 demo4.ps1 - KDC ピニングと BYOK...

Windows Exploitation Tricks: Abusing the User-Mode Debugger

Posted by James Forshaw, Google Project Zero I've recently been adding native user-mode debugger support to NtObjectManager. Whenever I add new functionality I have to do some research and reverse engineering to better understand how it works. In this case I wondered what access you need to debug...

Microsoft Windows - Desktop Bridge Virtual Registry Arbitrary File Read/Write Privilege Escalation E

Exploit for windows platform in category local exploits Windows: Windows: Desktop Bridge Virtual Registry Arbitrary File Read/Write EoP Platform: Windows 1709 not tested earlier version Class: Elevation of Privilege Summary: The handling of the virtual registry for desktop bridge applications can...