103 matches found
BackupOperatorToDA
从备份操作员到域管理员 如果您攻陷了“备份操作员”组成员账户,您无需在域控制器上使用RDP或WinRM即可成为域管理员。 全部功劳归功于 filipdragovic 及其初始 POC!我构建此项目是因为我想要一个更通用的、带参数的二进制文件,并且能够将 SAM 数据库导出到远程共享! root@kitploit: PS C:\Users\mpgn\POC .\BackupOperatorToDA.exe -h Backup Operator to Domain Admin by @mpgnx64 此工具感谢 @filipdragovic /...
Invoke-SessionHunter
Invoke-SessionHunter アクティブなユーザーセッションに関する情報をリモートコンピューターから取得して表示します。管理者権限は不要です。 このツールは、リモートレジストリサービスを利用して、リモートコンピューター上の HKEYUSERS レジストリハイブを照会します。アクティブなユーザーセッションに関連するセキュリティ識別子(SID)を特定して抽出し、それらを対応するユーザー名に変換することで、現在ログインしているユーザーに関する情報を提供します。 -CheckAdminAccess スイッチを指定すると、Invoke-WMIRemoting...
go-secdump
go-secdump Descrizione Il pacchetto go-secdump è uno strumento progettato per estrarre da remoto gli hash dal registro SAM, nonché i segreti LSA e gli hash memorizzati nella cache dell'hive SECURITY, senza alcun agente remoto e senza toccare il disco. Lo strumento si basa sulla libreria go-smb e ...
CVE-2026-61345
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-59138
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
EUVD-2026-56318
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-61345 Microsoft Remote Registry Service Denial of Service Vulnerability
...
CVE-2026-61345 Microsoft Remote Registry Service Denial of Service Vulnerability
...
CVE-2026-61345
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-61345
CVE-2026-61345: A null pointer dereference in the Microsoft Remote Registry Service can allow an authenticated network attacker to cause Denial of Service. CVSSv3.1 base score 6.5 (NETWORK, LOW complexity, LOW privileges, NO user interaction, Availability Impact HIGH). Affected component: Microso...
EUVD-2026-56317
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-59138
CVE-2026-59138 is a null pointer dereference in Microsoft Remote Registry Service that allows an authorized attacker to cause a denial of service over a network. The vulnerability has a CVSS v3.1 base score of 6.5 (MEDIUM) with Network attack vector, Low attack complexity, Privileges Required: Lo...
CVE-2026-59138 Microsoft Remote Registry Service Denial of Service Vulnerability
...
CVE-2026-59138 Microsoft Remote Registry Service Denial of Service Vulnerability
...
CVE-2026-59138
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
Microsoft Remote Registry Service Denial of Service Vulnerability
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
Microsoft Remote Registry Service Denial of Service Vulnerability
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
PT-2026-70417
Name of the Vulnerable Software and Affected Versions Microsoft Remote Registry Service affected versions not specified Description A null pointer dereference in the Microsoft Remote Registry Service allows an authorized attacker to cause a denial of service over a network. A null pointer...
PT-2026-70418
Name of the Vulnerable Software and Affected Versions Microsoft Remote Registry Service affected versions not specified Description A null pointer dereference in the Microsoft Remote Registry Service allows an authorized attacker to cause a denial of service over a network. A null pointer...