Execute .net Assembly (x64 only)

This module executes a .NET assembly in memory. It reflectively loads a dll that will host CLR, then it copies the assembly to be executed into memory. Credits for AMSI bypass to Rastamouse @RastaMouse This module requires Metasploit: https://metasploit.com/download Current source:...

Mssqlproxy - A Toolkit Aimed To Perform Lateral Movement In Restricted Environments Through A Compromised Microsoft SQL Server Via Socket Reuse

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of three part...

Critical: Red Hat Security Advisory: .NET Core on Red Hat Enterprise Linux security and bug fix update

An update for dotnet3.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

December 10, 2019-KB4532999 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1709

None None...

Microsoft Windows - Escalate UAC Protection Bypass (Via dot net profiler) (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Escalate UAC Protection Bypass Via dot net profiler', 'Description' = %q Microsoft Windows allows for the automatic loading of a profilin...

Windows Escalate UAC Protection Bypass Via Dot Net Profiler

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Escalate UAC Protection Bypass Via dot net profiler', 'Description' = %q Microsoft Windows allows for the automatic loading of a profilin...

Donut - Generates X86, X64, Or AMD64+x86 Position-Independent Shellcode That Loads .NET Assemblies, PE Files, And Other Windows Payloads From Memory

Donut generates x86 or x64 shellcode from VBScript, JScript, EXE, DLL including .NET Assemblies files. This shellcode can be injected into an arbitrary Windows processes for in-memory execution. Given a supported file type, parameters and an entry point where applicable such as Program.Main, it...

October 15, 2019-KB4519564 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1709

None None...

October 15, 2019-KB4519572 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1803

None None...

Moderate: Red Hat Security Advisory: .NET Core on Red Hat Enterprise Linux security and bug fix update

An update for rh-dotnet21-dotnet and rh-dotnet22-dotnet is now available for .NET Core on Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2019-1142

An elevation of privilege vulnerability exists when the .NET Framework common language runtime CLR allows file creation in arbitrary locations, aka '.NET Framework Elevation of Privilege Vulnerability'...

CVE-2019-1142

An elevation of privilege vulnerability exists when the .NET Framework common language runtime CLR allows file creation in arbitrary locations, aka '.NET Framework Elevation of Privilege Vulnerability'...

CVE-2019-1142

CVE-2019-1142 affects the Microsoft .NET Framework CLR, where the runtime can create files in arbitrary locations, enabling elevation of privilege. The vulnerability is described as an elevation of privilege in the CLR that allows writing files to folders requiring higher privileges. In public do...

Microsoft .NET Framework Privilege Escalation Vulnerability (KB4514601)

This host is missing an important security update according to Microsoft KB4514601 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft .NET Framework Privilege Escalation Vulnerability (KB4514359)

This host is missing an important security update according to Microsoft KB4514359 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

.NET Framework Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the .NET Framework common language runtime CLR allows file creation in arbitrary locations. An attacker who successfully exploited this vulnerability could write files to folders that require higher privileges than what the attacker already has...

KB4516068: Windows 10 Version 1703 September 2019 Security Update

The remote Windows host is missing security update 4516068. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Text Service Framework TSF when the TSF server process does not validate the source of input or commands it receives. An...

KB4512578: Windows 10 Version 1809 and Windows Server 2019 September 2019 Security Update

The remote Windows host is missing security update 4512578. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Text Service Framework TSF when the TSF server process does not validate the source of input or commands it receives. An...

KB4516044: Windows 10 Version 1607 and Windows Server 2016 September 2019 Security Update

The remote Windows host is missing security update 4516044. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Text Service Framework TSF when the TSF server process does not validate the source of input or commands it receives. An...

. NET advanced code audit of the first six classes DataContractSerializer deserialization vulnerability-vulnerability warning-the black bar safety net

DataContractSerializer class is used for serialization and de-serialization in Windows Communication Foundation WCF message to send the data for the CLR data type is serialized into an XML stream, which is located in the namespace System. Runtime. Serialization, and inherits from the System...