EventViewerUAC_BOF

EventViewerUACBOF 这是对 @orange8361 发现的、由 CsEnox 整理的 Event Viewer 反序列化 UAC 绕过的 Beacon Object File 实现。 已在 x64 Win10/Win11 上测试 OPSEC 警告！ 该 UAC 绕过会执行以下操作，需考虑其对 OPSEC 的影响： -1. 将二进制文件写入 %LOCALAPPDATA%\Microsoft\Event Viewer\RecentViews -2. 调用 ShellExecute 启动 mmc.exe / Event Viewer --A. Event Viewer...

如何针对使用HTTP的.NET Remoting finding and using deserialization vulnerability-vulnerability warning-the black bar safety net

One, overview In the NCC Group and most recent safety assessment, 我发现了一个.NET v2. 0 app, 该应用程序使用.NET Remoting by HTTP to send the SOAP request to the other server to communicate. In the application of the anti-compiled, I realized that the server has TypeFilterLevel is set to Full, this is very...