doublehop

Doublehop このツールは、PowerShell Remoting / WinRM を使用して、WinRM ダブルホップ技術を介しリモートホスト上で PowerShell コマンドを実行する際の補助を目的としています。 このツールは、内部ネットワークおよびCLIアクセス権があることを前提としています。 使用方法 root@kitploit: doublehop Usage: -c string Command we are executing. -j string Host we are executing command against. -l string Inital hos...

PeekABoo

PeekABoo PeekABoo 工具可在内部渗透测试期间使用，当用户需要在目标机器上启用远程桌面时。它使用 PowerShell 远程管理来执行此任务。 该工具仅在 WinRM 已启用时有效。自 Windows Server 2012 起，WinRM 在所有 Windows 服务器操作系统上默认启用，但在客户端操作系统上默认未启用。 注意：远程桌面在所有 Windows 操作系统上默认处于禁用状态。用户需要拥有本地管理员密码或服务器上的管理员权限才能在目标机器上启用 RDP。 欢迎对此工具提出任何建议或想法——只需在 Twitter 上私信我 @ManiarViral 截图...

PowerShellForPentesters

PowerShellForPentesters プレイリストリンク - https://youtube.com/playlist?list=PLJQHPJLjSQatUsJy3O4k-VQlllquDmDr PowerShell for Pentesters は、内部ペネトレーションテストで PowerShell を使用するための基礎的な入門コースです。このコースは、TCM Academy と Udemy で公開している人気コース「Movement, Pivoting, and Persistence」の PowerShell...

CVE-2023-3519

CVE-2023-3519 因为你可以在你妈妈的电脑上运行powershell，而无需安装NMAP或PYTHON，也无需告诉任何人你运行的是ARCH！; x...

Ransomware Hackers Using New Way to Bypass MS Exchange ProxyNotShell Mitigations

Threat actors affiliated with a ransomware strain known as Play are leveraging a never-before-seen exploit chain that bypasses blocking rules for ProxyNotShell flaws in Microsoft Exchange Server to achieve remote code execution RCE through Outlook Web Access OWA. "The new exploit method bypasses...

CheeseTools - Self-developed Tools For Lateral Movement/Code Execution

This repository has been made basing onto the already existing MiscTool, so big shout-out to rasta-mouse for releasing them and for giving me the right motivation to work on them. CheeseExec Command Exec / Lateral movement via PsExec-like functionality. Must be running in the context of a...

January 8, 2019—KB4480963 (Monthly Rollup)

None None...

January 8, 2019—KB4480962 (OS Build 10240.18094)

None None...

January 8, 2019—KB4480957 (Security-only update)

None None...

January 8, 2019—KB4480116 (OS Build 17763.253)

None None...

January 8, 2019—KB4480966 (OS Build 17134.523)

None None...

January 8, 2019—KB4480960 (Security-only update)

None None...

January 8, 2019—KB4480964 (Security-only update)

None None...

January 8, 2019—KB4480970 (Monthly Rollup)

None None...

January 8, 2019—KB4480968 (Monthly Rollup)

None None...

January 8, 2019—KB4480972 (Security-only update)

None None...

January 8, 2019—KB4480975 (Monthly Rollup)

None None...

January 8, 2019—KB4480973 (OS Build 15063.1563)

None None...

January 8, 2019—KB4480978 (OS Build 16299.904)

None None...

drchrono: node.drchrono.com - Information Disclosure and Windows Host Exposed

This host has the following TCP ports open; 21 - FTP 22 - SSH 135 - Windows RPC Dynamic 445 - Microsoft DS 3389 - Remote Desktop 5986 - PowerShell Remoting 47001 - WinRM The server appears to be secured well on the whole. However the services SSH and FTP do all give out some information. Please s...