7 matches found
shepard
SHEPARD BITS 这是一个利用 Windows 后台智能传输服务（BITS）的持久化工具。 功能 文件下载、文件外传、文件下载 + 持久化执行 用法 以管理员身份运行 shepard.exe，并附带以下命令行参数： -d ：将文件常规下载到你选择的本地路径 -e ：从你选择的本地路径常规上传文件（仅发送到 IIS 服务器，这是 BITS 的限制） -dr optionalFileArgs ：将文件下载到你选择的路径，并尝试维持持久化。下载的文件将尝试以 optionalFileArgs 参数运行，BITS 每 30 秒检查一次，确保文件仍在受感染系统上运行。...
Windows BITS Jobs Persistence Scanner
This is a Windows BITS Job auditing tool that scans all Background Intelligent Transfer Service BITS tasks using bitsadmin, then analyzes them for suspicious behavior such as executable downloads, command execution cmd.exe, powershell, and remote URLs. It classifies jobs as normal or suspicious a...
CVE-2020-1112
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service BITS IIS module improperly handles uploaded content, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'...
CVE-2020-0787
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service BITS improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'...
New Malware Uses Windows BITS Service to Stealthy Exfiltrate Data
Cybersecurity researchers have discovered a new computer virus associated with the Stealth Falcon state-sponsored cyber espionage group that abuses a built-in component of the Microsoft Windows operating system to stealthily exfiltrate stolen data to attacker-controlled server. Active since 2012,...
Privilege Bypass Vulnerability in SeAssignPrimaryTokenPrivilege of Background Intelligent Transfer Service Service
The Background Intelligent Transfer Service service is an intelligent backup and transfer service for transferring data over a LAN using free network bandwidth. A privilege bypass vulnerability exists in SeAssignPrimaryTokenPrivilege of the Background Intelligent Transfer Service service under th...
