119 matches found
DropSpawn_BOF
DropSpawn Introduction DropSpawn est un BOF CobaltStrike utilisé pour générer des Beacons supplémentaires via une méthode relativement méconnue de détournement de DLL. Fonctionne en x86-x86, x64-x64 et x86-x64/vice versa. Utilisez-le comme alternative à l'injection de processus. Les exécutables...
TrustJack
TrustJack Encore un PoC pour https://www.wietzebeukema.nl/blog/hijacking-dlls-in-windows Article de blog : https://redteamer.tips/?p=108 À utiliser avec un cmd qui fait ce que vous voulez, pour une dll qui ouvre un cmd, https://github.com/jfmaes/CMDLL. Consultez la liste sur le site de wietze pou...
HardBreacher
HardBreacher Vulnerabilità di Elevazione dei Privilegi ZeroDay in Kaspersky Antivirus per Endpoint Il problema ora sta trapelando al di fuori di Microsoft: è stato condotto un sondaggio per decidere se trovare un bug nella versione home o in quella commerciale, e i risultati del sondaggio hanno...
CVE-2017-11783
CVE-2017-11783 Exploit 1day di sheisback Non è un exploit completo esegue cmd con privilegi di sistema, crea solo un file in system32. Quindi dovrai completarlo, serve la tecnica di UAC di consent.exe. Riferimenti Uno sguardo su ALPC-RPC di Clément Rouault & Thomas Imbert, 2017 PacSec...
ShadowSteal
ShadowSteal | CVE-2021-36934 Implementazione pura in Nim per sfruttare CVE-2021-36934, la escalation dei privilegi locali LPE SeriousSAM. Non OPSEC safe.... ancora ;. Non rivendico il merito della scoperta di questo exploit. Avvio rapido Build con Docker Iniziare con ShadowSteal ora è più facile...
CVE-2021-36934
CVE-2021-36934 CVE-2021-36934 Fix PowerShell Questo script PowerShell corregge CVE-2021-36934, basato sullo script originale di Joran Slingerland https://github.com/JoranSlingerland https://github.com/JoranSlingerland/CVE-2021-36934/blob/main/CVE-2021-36934.ps1 Lo script PowerShell eseguirà le...
CVE-2024-31771
CVE-2024-31771 TotalAV Scrittura Arbitraria di File TotalAV versione 6.0.x https://github.com/restdone/CVE-2024-31771/assets/42227817/ffe0c2ec-4ea6-4c29-852f-456b2e62f5b1 Cronologia: 13 febbraio 2024: Scoperta la vulnerabilità 6.0.740 e segnalata a TotalAV. 15 febbraio 2024: TotalAV ha confermato...
CVE-2020-1337
CVE-2020-1337 - Piantagione Binaria bypass di CVE-2020-1048 Peleg Hadar @peleghd e Tomer Bar di SafeBreach @safebreach sono stati riconosciuti da Microsoft per il CVE-2020-1048, una vulnerabilità dello Spooler di Windows che consente un'elevazione dei privilegi su Windows 7 e successivi. Alcuni...
CVE-2026-13133
A vulnerability has been identified in LineInst.exe LINE for Windows prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy...
CVE-2026-13133
LineInst.exe (LINE for Windows) before version 26.4.0 is vulnerable because Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer directory to be loaded ahead of the legitimate System32 copy. The CVSS metrics indicate a HIGH ...
EUVD-2026-55033
A vulnerability has been identified in LineInst.exe LINE for Windows prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy...
CVE-2019-18194
TotalAV 2020 4.14.31 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junction to restore a malicious DLL from quarantine into the system32 folder...
CVE-2023-53937
Hubstaff 1.6.14 contains a DLL search order hijacking vulnerability that allows attackers to replace a missing system32 wow64log.dll with a malicious library. Attackers can generate a custom DLL using Metasploit and place it in the system32 directory to obtain a reverse shell during application...
CVE-2023-53937
Hubstaff 1.6.14 contains a DLL search order hijacking vulnerability that allows attackers to replace a missing system32 wow64log.dll with a malicious library. Attackers can generate a custom DLL using Metasploit and place it in the system32 directory to obtain a reverse shell during application...
CVE-2023-53937
Hubstaff 1.6.14 is affected by a DLL search order hijacking vulnerability that enables replacing the missing system32 wow64log.dll with a malicious library. An attacker could generate a custom DLL (e.g., via Metasploit) and place it in the system32 directory to obtain a reverse shell when the app...
CVE-2023-53937 Hubstaff 1.6.14 DLL Search Order Hijacking via wow64log Library
Hubstaff 1.6.14 contains a DLL search order hijacking vulnerability that allows attackers to replace a missing system32 wow64log.dll with a malicious library. Attackers can generate a custom DLL using Metasploit and place it in the system32 directory to obtain a reverse shell during application...
PT-2025-52316
Name of the Vulnerable Software and Affected Versions Hubstaff version 1.6.14 Description The software contains a DLL search order hijacking issue. An attacker can replace a missing system32wow64log.dll with a malicious library. By using tools like Metasploit to create a custom DLL and placing it...
EUVD-2007-5124
Malware in sbrugna...