9 matches found
PowerSharpPack
赞助商 PowerSharpPack 许多有用的攻击性 C 项目被封装成 PowerShell，以便于使用。 为什么？在我看来，攻击性 PowerShell 并没有因为 AMSI、脚本块日志记录、约束语言模式或其他保护功能而消亡。这些机制中的任何一个都可以被绕过。由于大多数新的创新攻击性安全项目都是用 C 编写的，我决定让它们也能在 PowerShell 中使用。 那么我基本上做了什么？ 1. 首先，克隆每个 C 仓库。 2. 将类和 main 方法设为 public。 3. 对于某些项目，我合并了包含新功能或错误修复的 pull request，或者我必须移除...
nccfsas
Introduction This repository holds information released publicly by NCC Group's Full Spectrum Attack Simulation FSAS team...
x86-exploitation-lab
It is an offensive tool for x86 exploitation. This repository co...
CVE-2022-45301
Insecure permissions in Chocolatey Ruby package v3.1.2.1 and below grants all users in the Authenticated Users group write privileges for the path C:\tools\ruby31 and all files located in that folder...
CVE-2022-45307
Insecure permissions in Chocolatey PHP package v8.1.12 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\tools\php81 and all files located in that folder...
PT-2022-27462 · Chocolatey · Cmder
Name of the Vulnerable Software and Affected Versions: Chocolatey Cmder package versions 1.3.20 and below Description: The issue is related to insecure permissions in the Chocolatey Cmder package, which grants all users in the Authenticated Users group write privileges for the path C:toolsCmder a...
Ruby 安全漏洞
Chocolatey is a NuGet-based package manager developed for Windows systems.Ruby is a cross-platform, object-oriented, dynamically-typed programming language developed by the individual developer Yukihiro Matsumoto. A privilege design vulnerability exists in the Chocolatey Ruby package v3.1.2.1 and...
Description of the security update for Microsoft Visual Studio 2005 Service Pack 1 64-bit Hosted Visual C++ Tools: July 28, 2009
Description of the security update for Microsoft Visual Studio 2005 Service Pack 1 64-bit Hosted Visual C++ Tools: July 28, 2009 INTRODUCTION Microsoft has released security bulletin MS09-035. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home...
