-EXPLOIT-CVE-2023-36025

EXPLOIT CVE-2023-36025 - Description Windows SmartScreen Security Feature Bypass Vulnerability Usage NOTE handler waiting for tcp request for target P.S configure CVE-2023-36025.vbs file to change the ip and port to machine ip and port that is being used for the TCP handler configure reverse TCP...

DroppedConnection

DroppedConnection 模拟 Cisco ASA Anyconnect VPN 服务，接受任意凭据（并记录日志），然后向客户端提供 VBS 文件，该文件会在用户上下文中执行。 博客文章： https://research.nccgroup.com/2023/03/01/making-new-connections-leveraging-cisco-anyconnect-client-to-drop-and-run-payloads/ 使用说明 1. 将文件复制到服务器。 2. 确保已安装 python2（我知道，但它在设备上能用 ;、pip 以及 pyOpenSSL sudo...

NFR Agent FSFUI Record File Upload Remote Command Execution

NFRAgent.exe, a component of Novell File Reporter NFR, allows remote attackers to upload arbitrary files via a directory traversal while handling requests to /FSF/CMD with FSFUI records with UICMD 130. This Metasploit module has been tested successfully against NFR Agent 1.0.4.3 File Reporter 1.0...