575 matches found
RegPwn
🛠️ RegPwn - Windows Local Exploit Tool RegPwn is a tool designed to demonstrate a local privilege escalation LPE exploit on Windows systems. It works on Windows 10, Windows 11, and Windows Server versions. This guide will help you download, prepare, and run RegPwn on your Windows computer safely...
fingerprint
fingerprint Monitoreo de cambios en el Registro y Archivos en Windows - análisis forense para el registro y archivos de Windows "fingerprint" registra el estado de un sistema Windows, en términos de archivos y registro. Estas huellas digitales se pueden comparar para encontrar todos los datos...
MEC
Masked Extension Control MEC Masked Extension Control MEC Masked Extension Control is a program that makes your Windows rely on magic numbers, and not only on extensions, to choose the program that will be used to open the file. This is much safer for your system, since a lot of attacks begin by...
DecryptTeamViewer
DescifrarTeamViewer Utiliza CVE-2019-18988 para enumerar y descifrar credenciales de TeamViewer desde el registro de Windows. Investigación de vulnerabilidad realizada por Nic Losby. Publicación del blog que detalla la vulnerabilidad: https://whynotsecurity.com/blog/teamviewer/ Uso...
go-secdump
go-secdump Description Package go-secdump is a tool built to remotely extract hashes from the SAM registry hive as well as LSA secrets and cached hashes from the SECURITY hive without any remote agent and without touching disk. The tool is built on top of the library go-smb and use it to...
mscache
mscache una herramienta para manipular dcc credenciales cacheadas de dominio en el registro de Windows, basada principalmente en el trabajo de mimikatz e impacket requisitos python2 pycrypto passlib impacket ejemplo python mscache.py --security security --system system dumping domain cached...
Reg1c1de
Reg1c1de: Escáner de Elevación de Privilegios del Registro de Windows Resumen de la salida de ayuda: Reg1c1de es una herramienta que escanea colmenas de registro especificadas e informa sobre cualquier clave donde el usuario tenga permisos de escritura. Además, si se encuentran valores de registr...
CVE-2024-4573-Mitigation-Script
CVE-2024-4573-Mitigation-Script CVE-2024-43451 es una vulnerabilidad en sistemas que permiten la autenticación NTLM, un protocolo heredado que puede ser explotado para ataques de reenvío de credenciales o ataques de fuerza bruta. Esta vulnerabilidad surge cuando NTLM está habilitado, dejando a lo...
LAB-DFIR-cve-2023-38831
LAB-DFIR-cve-2023-38831 This lab simulates a CVE-2023–38831 attack and must investigate diskimage and contains a variety of questions including understanding the Windows registry, NTFS files, cache browser, and a complete understanding of the functions that come out of Windows in the sequence of...
cve-2017-8529
cve-2017-8529 My CVE-2017-8529 files A PowerShell script to configure the registry fix in CVE-2017-8529...
CentOS Linux 6 [TuxCare] Security Update: libsmbclient / libsmbclient-devel / samba / samba-client / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1779902912)
The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1779902912 advisory. - A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply ...
CVE-2026-92680
Araxis Merge for Windows version 2011.4074 through 2026.0 stores user-configured credentials for remote servers in the Windows registry and does not apply sufficient cryptographic protection. An authenticated, non-administrative attacker could retrieve and unencrypt all credentials the target use...
EUVD-2026-85933
Araxis Merge for Windows version 2011.4074 through 2026.0 stores user-configured credentials for remote servers in the Windows registry and does not apply sufficient cryptographic protection. An authenticated, non-administrative attacker could retrieve and unencrypt all credentials the target use...
CVE-2026-92680 Araxis Merge insufficiently protected credentials
Araxis Merge for Windows version 2011.4074 through 2026.0 stores user-configured credentials for remote servers in the Windows registry and does not apply sufficient cryptographic protection. An authenticated, non-administrative attacker could retrieve and unencrypt all credentials the target use...
Araxis Merge
RISK EVALUATION Araxis Merge for Windows version 2011.4074 through 2026.0 stores user-configured credentials for remote servers in the Windows registry and does not apply sufficient cryptographic protection. An authenticated, non-administrative user could retrieve and unencrypt other users'...
PT-2026-97871
Name of the Vulnerable Software and Affected Versions Araxis Merge for Windows versions 2011.4074 through 2026.0 Description The software stores user-configured credentials for remote servers in the Windows registry without applying sufficient cryptographic protection. This allows an authenticate...
CVE-2026-92680: Insufficiently Protected Credentials
Araxis Merge for Windows version 2011.4074 through 2026.0 stores user-configured credentials for remote servers in the Windows registry and does not apply sufficient cryptographic protection. An authenticated, non-administrative attacker could retrieve and unencrypt all credentials the target use...
CVE-2026-69337
Double free in Windows Registry allows an authorized attacker to elevate privileges over a network...
CVE-2026-69337
A double free vulnerability in the Windows Registry allows an authorized attacker to elevate privileges over a network . The flaw requires low privileges and user interaction , with high attack complexity , but results in high impact to confidentiality, integrity, and availability (CVSS 3.1 score...