blackhat-usa-2022-demos

blackhat-usa-2022-demos عروض توضيحية لمحاضرة Blackhat USA 2022 بعنوان «الارتقاء بـ Kerberos إلى المستوى التالي». هذه هي الشرائح والعروض التوضيحية للعرض التقديمي لجيمس فورشو @tiraniddo ونيك لاندرز @monoxgas. العروض التوضيحية هي كما يلي: demo1.ps1 - Silver ticket مع كلمة المرور. demo2.ps1 - Silver...

Windows Exploitation Tricks: Abusing the User-Mode Debugger

Posted by James Forshaw, Google Project Zero I've recently been adding native user-mode debugger support to NtObjectManager. Whenever I add new functionality I have to do some research and reverse engineering to better understand how it works. In this case I wondered what access you need to debug...

Microsoft Windows - Desktop Bridge Virtual Registry Arbitrary File Read/Write Privilege Escalation E

Exploit for windows platform in category local exploits Windows: Windows: Desktop Bridge Virtual Registry Arbitrary File Read/Write EoP Platform: Windows 1709 not tested earlier version Class: Elevation of Privilege Summary: The handling of the virtual registry for desktop bridge applications can...