CVE-2023-3519

CVE-2023-3519 Porque puedes ejecutar powershell en el PC de tu mamá sin tener que instalar NMAP ni PYTHON ni contarle a nadie que usas ARCH! ; x...

PeekABoo

PeekABoo PeekABooツールは、内部ペネトレーションテスト中に、対象マシンでリモートデスクトップを有効にする必要がある場合に使用できます。PowerShellリモート処理を使用してこのタスクを実行します。 このツールはWinRMが有効になっている場合にのみ動作します。Windows Server 2012以降、WinRMはすべてのWindowsサーバーオペレーティングシステムでデフォルトで有効になっていますが、クライアントオペレーティングシステムでは有効ではありません。...

doublehop

Doublehop 该工具旨在通过 WinRM 双跳技术，协助利用 PowerShell Remoting / WinRM 在远程主机上执行 PowerShell 命令。 该工具假定您拥有内部网络和 CLI 访问权限。 用法 root@kitploit: doublehop Usage: -c string 要执行的命令。 -j string 我们对其执行命令的目标主机。 -l string 起始跳转主机。 -m string 添加主机，以逗号分隔。格式：'host1,host2' -p string 用户密码 -u string 格式：'DOMAIN\USER'，用于身份验证的用户。 ...

PowerShellForPentesters

PowerShellForPentesters 播放列表链接 - https://youtube.com/playlist?list=PLJQHPJLjSQatUsJy3O4k-VQlllquDmDr PowerShell for Pentesters 是一份关于在内网渗透测试中使用 PowerShell 的基础入门课程。本课程基本上是我在 TCM Academy 和 Udemy 上广受欢迎的 Movement、Pivoting 和 Persistence 课程中的 PowerShell 模块。在本课程中，我们将涵盖： 用户、组和工作站枚举 域枚举 使用 PowerShell 下载文件...

Ransomware Hackers Using New Way to Bypass MS Exchange ProxyNotShell Mitigations

Threat actors affiliated with a ransomware strain known as Play are leveraging a never-before-seen exploit chain that bypasses blocking rules for ProxyNotShell flaws in Microsoft Exchange Server to achieve remote code execution RCE through Outlook Web Access OWA. "The new exploit method bypasses...

CheeseTools - Self-developed Tools For Lateral Movement/Code Execution

This repository has been made basing onto the already existing MiscTool, so big shout-out to rasta-mouse for releasing them and for giving me the right motivation to work on them. CheeseExec Command Exec / Lateral movement via PsExec-like functionality. Must be running in the context of a...

January 8, 2019—KB4480963 (Monthly Rollup)

None None...

January 8, 2019—KB4480966 (OS Build 17134.523)

None None...

January 8, 2019—KB4480962 (OS Build 10240.18094)

None None...

January 8, 2019—KB4480116 (OS Build 17763.253)

None None...

January 8, 2019—KB4480957 (Security-only update)

None None...

January 8, 2019—KB4480964 (Security-only update)

None None...

January 8, 2019—KB4480968 (Monthly Rollup)

None None...

January 8, 2019—KB4480970 (Monthly Rollup)

None None...

January 8, 2019—KB4480960 (Security-only update)

None None...

January 8, 2019—KB4480975 (Monthly Rollup)

None None...

January 8, 2019—KB4480972 (Security-only update)

None None...

January 8, 2019—KB4480978 (OS Build 16299.904)

None None...

January 8, 2019—KB4480973 (OS Build 15063.1563)

None None...

drchrono: node.drchrono.com - Information Disclosure and Windows Host Exposed

This host has the following TCP ports open; 21 - FTP 22 - SSH 135 - Windows RPC Dynamic 445 - Microsoft DS 3389 - Remote Desktop 5986 - PowerShell Remoting 47001 - WinRM The server appears to be secured well on the whole. However the services SSH and FTP do all give out some information. Please s...