CMD_Bypass_Assessment

CMD Bypass Method Analysis CMD Bypass Method Analysis is a PowerShell script that automatically tests CMD bypass methods on Windows systems and evaluates the results. The script checks for various CMD bypass methods and saves the results to a text file, providing security recommendations. Use To...

reconerator

概述 这是一个自定义的 .NET 程序集，用于执行一系列态势感知活动。目前包含以下功能集： BASIC - 从磁盘和注册表获取信息。 LDAP - 允许执行自定义的 AD LDAP 查询。 RESOLVEHOST - 执行 DNS 查询解析。 INDEXSEARCH - 搜索 Windows 索引服务中的本地文件和电子邮件（按文件名和内容）。 PROXYCHECK - 显示访问指定 URL 时将使用的代理服务器。 我在编写此工具时并不知道 GhostPack 正在开发中；最终我们几乎同时发布了各自的工具。实际上，GhostPack 现在的功能要丰富得多。我已移除 PrivescCheck...

RDPLinkEnum

RDPLinkEnum Al consultar el registro, puedes ver a qué hosts se ha conectado el host actual y la información del nombre de usuario utilizada al conectarse. Realizar la demo...

MLflow Registry Enumeration

Binary data mlflowregistryenumeration.nbin...

Git Detection (Windows SMB Login)

Detects the installed version of Git. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MS KB2960358: Update for Disabling RC4 in .NET TLS

The remote host is missing an update for disabling the weak RC4 cipher suite in .NET TLS. Note that even though .NET Framework 4.6 itself is not affected, any Framework 4.5, 4.5.1, or 4.5.2 application that runs on a system that has 4.6 installed is affected. C Tenable Network Security, Inc...

Bitsmith Personal Knowbase Detection

Bitsmith Personal Knowbase is installed on the remote host. Bitsmith Personal Knowbase is personal knowledge base storage software. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58648; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

Windows Gather Hardware Enumeration

Enumerate PCI hardware information from the registry. Please note this script will run through registry subkeys such as: 'PCI', 'ACPI', 'ACPIHAL', 'FDC', 'HID', 'HTREE', 'IDE', 'ISAPNP', 'LEGACY'', LPTENUM', 'PCIIDE', 'SCSI', 'STORAGE', 'SW', and 'USB'; it will take time to finish. It is...

Windows Gather IPSwitch iMail User Data Enumeration

This module will collect iMail user data such as the username, domain, full name, e-mail, and the decoded password. Please note if IMAILUSER is specified, the module extracts user data from all the domains found. If IMAILDOMAIN is specified, then it will extract all user data under that particula...

Read all Windows Policy Security Settings (Windows)

The script read all Windows Policy Security Settings. OpenVAS Vulnerability Test $Id: GSHBWMIPolSecSet.nasl 7061 2017-09-05 11:50:40Z teissa $ Read all Windows Policy Security Settings Windows Authors: Thomas Rotter Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net Set...

Microsoft DirectShow Remote Code Execution Vulnerability (961373)

This host is missing a critical security update according to Microsoft Bulletin MS09-028. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (968537)

This host is missing a critical security update according to Microsoft Bulletin MS09-025. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Checks for MS HOTFIX for snmp buffer overruns

There is an Unchecked Buffer in SNMP Service and this checks to see if the Microsoft Patch has been applied only checks NT/Win2k and XP PRo. Impact of vulnerability: Run code of attacker's choice and denial of service attacks. Also may run snmp detect to see if snmp is running on this host. OpenV...