PowerZure

有关函数列表、用法及更多信息，请查看 https://powerzure.readthedocs.io 什么是 PowerZure？ PowerZure 是一个 PowerShell 项目，旨在评估和利用微软云平台 Azure 中的资源。PowerZure 的创建源于对既能执行侦察 又 能利用 Azure、EntraID 及相关资源的框架的需求。 要求 “Az” Azure PowerShell 模块是 PowerZure 使用的主要模块，因为它处理与 Azure 资源交互的大部分请求。Az 模块通过 Azure REST API 进行交互。可以通过 PowerShell 命令...

DVS

DCOM Vulnerability Scanner 又名 狡猾的瑞士军刀 - 使用DCOM对象进行横向移动 你是否曾经思考过如何在内部网络中横向移动？或者如何在不被EDR察觉的情况下与远程机器交互？ 假设我们拥有有效凭证，或者有一个可访问远程机器的活跃会话，但我们无法通过已知、预期或高度监控的方法（例如WMI、任务计划程序、WinRM、PowerShell远程处理）远程执行进程。 对于这些场景，DVS框架可以派上用场。 DVS框架是一把瑞士军刀，它允许您枚举远程DCOM对象的脆弱函数、启动它们，甚至使用它们发起攻击。 该框架以“红队”思维开发，采用隐蔽方法攻陷远程机器。...

📄 Icinga for Windows 1.13.3 Private Key Disclosure

This Metasploit module identifies and exploits insecure default ACL permissions in vulnerable versions of the Icinga for Windows PowerShell Framework. The certificate directory is created with overly permissive read access for the BUILTIN\Users group, allowing any local user to access the...

📄 Icinga for Windows 1.13.3 Private Key Exposure

Icinga for Windows PowerShell Framework versions prior to 1.13.4, 1.12.4, and 1.11.2 install the certificate directory with insecure default permissions. The directory C:\Program Files\WindowsPowerShell\Modules\icinga-powershell-framework\certificate is created with BUILTIN\Users:RX permissions,...

CVE-2026-24414

The Icinga PowerShell Framework provides configuration and check possibilities to ensure integration and monitoring of Windows environments. In versions prior to 1.13.4, 1.12.4, and 1.11.2, permissions of the Icinga for Windows certificate directory grant every user read access, which results in...

CVE-2026-24414

The Icinga PowerShell Framework provides configuration and check possibilities to ensure integration and monitoring of Windows environments. In versions prior to 1.13.4, 1.12.4, and 1.11.2, permissions of the Icinga for Windows certificate directory grant every user read access, which results in...

CVE-2026-24413 Icinga has insecure permission of %ProgramData%\icinga2\var on Windows

Icinga 2 is an open source monitoring system. Starting in version 2.3.0 and prior to versions 2.13.14, 2.14.8, and 2.15.2, the Icinga 2 MSI did not set appropriate permissions for the %ProgramData%\icinga2\var folder on Windows. This resulted in the its contents - including the private key of the...

Icinga PowerShell Framework security vulnerabilities

Icinga PowerShell Framework is an open-source PowerShell module developed by Icinga. Versions prior to 1.13.4, 1.12.4, and 1.11.2 of the Icinga PowerShell Framework have security vulnerabilities. These vulnerabilities stem from improper permission settings for the certificate directory, which may...

Power-Response Path Traversal Vulnerability

Power-Response is a modular PowerShell framework for event response . A path traversal vulnerability exists in versions of Power-Response prior to 2019-02-02, which can be exploited by an attacker to access locations outside of a restricted directory...

Windows Zero-Day Emerges in Active Exploits

A just-patched vulnerability in the Windows operating system that was previously unknown up until last week is being actively exploited in the wild; it opens the door for full system takeover. Discovered by Vasily Berdnikov and Boris Larin of Kaspersky Lab on St. Patrick’s Day this year, the flaw...