PrivKit - Simple Beacon Object File That Detects Privilege Escalation Vulnerabilities Caused By Misconfigurations On Windows OS

PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS. PrivKit detects following misconfigurations Checks for Unquoted Service Paths Checks for Autologon Registry Keys Checks for Always Install Elevated Registry Keys...

PersistenceSniper - Powershell Script That Can Be Used By Blue Teams, Incident Responders And System Administrators To Hunt Persistences Implanted In Windows Machines

PersistenceSniper is a Powershell script that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. The script is also available on Powershell Gallery. --- The Why Why writing such a tool, you might ask. Well, for starters, I...

Practical introduction to the Windows PC client common vulnerability discovery-vulnerability warning-the black bar safety net

0X00 why write this article For white, the WEB security aspect seems to have got a complete knowledge of the system and the loopholes in the excavation process, just getting started friends always like to choose the web direction as their direction of development, because for web systems...

Windows AutoRuns JavaScript MSHTML

Binary data windowsautorunsjavascriptmshtml.nbin...

Microsoft Windows Known Bad AutoRuns / Scheduled Tasks Deprecated

This feature is no longer part of the malware service provided by Tenable. Binary data windowsautorunsmalware.nbin...

Microsoft Windows AutoRuns Winsock Provider

Binary data windowsautorunswinsockproviders.nbin...

Microsoft Windows AutoRuns Setup

Binary data windowsautorunssetup.nbin...

Microsoft Windows AutoRuns Boot Execute

Binary data windowsautorunsbootexecute.nbin...

Microsoft Windows AutoRuns LSA Providers

Binary data windowsautorunsLSAProviders.nbin...

Microsoft Windows AutoRuns Services and Drivers

Binary data windowsautorunsservices.nbin...

Microsoft Windows AutoRuns Internet Explorer

Binary data windowsautorunsinternetexplorer.nbin...

Microsoft Windows AutoRuns Network Providers

Binary data windowsautorunsnetworkproviders.nbin...

Microsoft Windows AutoRuns Print Monitor

Binary data windowsautorunsprintmonitors.nbin...

Microsoft Windows AutoRuns Registry Hijack Possible Locations

Binary data windowsautorunsimageHiJacks.nbin...

Microsoft Windows AutoRuns Report

Binary data windowsautorunsreport.nbin...

Microsoft Windows AutoRuns Winlogon

Binary data windowsautorunswinlogon.nbin...

Microsoft Windows AutoRuns Scheduled Tasks

Binary data windowsautorunsschtasks.nbin...

Microsoft Windows AutoRuns Codecs

Binary data windowsautorunscodecs.nbin...

Microsoft Windows AutoRuns Known DLLs

Binary data windowsautorunsknownDLLs.nbin...

Microsoft Windows AutoRuns Unique Entries

Binary data windowsautorunsuniqueentries.nbin...