103 matches found
BackupOperatorToDA
From Backup Operator To Domain Admin If you compromise an account member of the group Backup Operators you can become the Domain Admin without RDP or WinRM on the Domain Controller. All credit from filipdragovic with his inital POC ! I build this project because I wanted to have a more generic...
go-secdump
go-secdump 描述 go-secdump 是一个用于从 SAM 注册表配置单元远程提取哈希值以及从 SECURITY 配置单元提取 LSA 机密和缓存的哈希值的工具，无需远程代理，也无需接触磁盘。 该工具基于 go-smb 库构建，并利用它与 Windows 远程注册表通信，直接从内存中检索注册表键。 该工具的构建是为了学习经验，并作为概念验证，证明应该能够远程从 SAM 配置单元检索 NT 哈希值、LSA 机密以及域缓存凭据，而无需先将注册表配置单元保存到磁盘，然后再在本地解析它们。 需要克服的主要问题是，SAM 和 SECURITY 配置单元仅可由 NT...
Invoke-SessionHunter
Invoke-SessionHunter Retrieve and display information about active user sessions on remote computers. No admin privileges required. The tool leverages the remote registry service to query the HKEYUSERS registry hive on the remote computers. It identifies and extracts Security Identifiers SIDs...
CVE-2026-61345
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-59138
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
EUVD-2026-56318
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-61345 Microsoft Remote Registry Service Denial of Service Vulnerability
...
CVE-2026-61345 Microsoft Remote Registry Service Denial of Service Vulnerability
...
CVE-2026-61345
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-61345
CVE-2026-61345: A null pointer dereference in the Microsoft Remote Registry Service can allow an authenticated network attacker to cause Denial of Service. CVSSv3.1 base score 6.5 (NETWORK, LOW complexity, LOW privileges, NO user interaction, Availability Impact HIGH). Affected component: Microso...
CVE-2026-59138
CVE-2026-59138 is a null pointer dereference in Microsoft Remote Registry Service that allows an authorized attacker to cause a denial of service over a network. The vulnerability has a CVSS v3.1 base score of 6.5 (MEDIUM) with Network attack vector, Low attack complexity, Privileges Required: Lo...
EUVD-2026-56317
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-59138 Microsoft Remote Registry Service Denial of Service Vulnerability
...
CVE-2026-59138 Microsoft Remote Registry Service Denial of Service Vulnerability
...
CVE-2026-59138
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
Microsoft Remote Registry Service Denial of Service Vulnerability
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
Microsoft Remote Registry Service Denial of Service Vulnerability
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
PT-2026-70417
Name of the Vulnerable Software and Affected Versions Microsoft Remote Registry Service affected versions not specified Description A null pointer dereference in the Microsoft Remote Registry Service allows an authorized attacker to cause a denial of service over a network. A null pointer...
PT-2026-70418
Name of the Vulnerable Software and Affected Versions Microsoft Remote Registry Service affected versions not specified Description A null pointer dereference in the Microsoft Remote Registry Service allows an authorized attacker to cause a denial of service over a network. A null pointer...