keelog-bof

KeeLog 一种异步BOF，通过监控解锁提示窗口来捕获KeePass主密码。当检测到锁定的KeePass数据库时，会安装一个低级键盘钩子，捕获按键直到提示窗口通过提交、取消或关闭消失。捕获的缓冲区随后返回给操作员，并自动重构为主密码。 !Important 此BOF需要异步对象文件加载能力才能在不阻塞agent的情况下工作。该功能由Conquest框架提供。 工作原理 此BOF监视前台窗口标题，以确定KeePass主密码提示何时处于活动状态。锁定数据库窗口的标题遵循格式Open Database -...

tgt-monitor-bof

Kerberos TGT 監視 & 自動更新 このリポジトリには、2つの非同期ビーコンオブジェクトファイル（BOF）が含まれています。1つ目は tgt-monitor で、Kerberos ログオンイベントを監視し、新しい Kerberos TGT がキャプチャされるたびにエージェントを起動します。Rubeus の monitor コマンドと同様に、この BOF は無期限に実行され、定期的にシステム上の LSA チケットキャッシュをチェックします。新しい TGT が検出されると、チケットのメタデータを表示し、pass-the-ticket 攻撃による横方向の移動に使用できる base64...

grc2

nimc2 This software is in very early development stages and you might run into many issues using it nimc2 is a very lightweight C2 written fully in nim. It's uses range from user support to employee monitoring. If you want to give it a try check out the wiki to learn how to install and use nimc2...

conquest

Conquest は、ペネトレーションテストおよびアドバーサリシミュレーションのために開発された、高機能で拡張性・可変性に優れたコマンド&コントロール/ポストエクスプロイテーションフレームワークです。Conquest のチームサーバー、オペレータークライアント、エージェントはすべて Nim プログラミング言語で開発されており、モジュール性と柔軟性を重視して設計されています。ネットワークトラフィックをカスタマイズするための高度なメイリアブルプロファイルシステム、Dear ImGui を使用して開発されたマルチユーザークライアント GUI、強力な Python スクリプティング API、そし...

EUVD-2003-0923

Malware in sbrugna...

EUVD-2020-22984

Malware in sbrugna...

CVE-2003-0933

Buffer overflow in conquest 7.2 and earlier may allow a local user to execute arbitrary code via a long environment variable...

ConQuest Dicom Server 1.5.0d Remote Command Execution Exploit

!/usr/bin/env python3 --------------------------------------------------------- preauth rce poc for ConQuest Dicom Server 1.5.0d --------------------------------------------------------- 04.08.2023 @ 22:07 code610 blogspot com import socket target = '192.168.56.106' rport = 5678 pkt1 =...

ConQuest Dicom Server 1.5.0d Remote Command Execution

!/usr/bin/env python3 --------------------------------------------------------- preauth rce poc for ConQuest Dicom Server 1.5.0d --------------------------------------------------------- 04.08.2023 @ 22:07 code610 blogspot com import socket target = '192.168.56.106' rport = 5678 pkt1 =...

CVE-2020-35308

CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code...

CVE-2020-35308

CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code...

Remote code execution

CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code...

CVE-2020-35308

CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code...

CVE-2020-35308

Technical details about CVE-2020-35308 are not publicly disclosed in the provided documents. The connected records do not specify affected versions beyond 1.5.0, root cause, or concrete remediation. Monitor for updates from vendor/security advisories.

IMAGE CONQUEST DICOM SERVER 命令注入漏洞

IMAGE CONQUEST DICOM SERVER is IMAGE an open source application. It can store, validate, query and retrieve through programmable SQL database tables. A security vulnerability exists in CONQUEST DICOM SERVER before 1.5.0, which can be exploited by attackers to execute malicious code...

Code Execution Vulnerability in CONQUEST DICOM SERVER

DICOM is a software in the medical field, mainly used in radiology, similar to image transfer and so on. A code execution vulnerability exists in CONQUEST DICOM SERVER, which can be exploited by attackers to execute malicious code...

Art of Conquest (Unreleased) - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Art of Conquest Unreleased published at the 'play' market has multiple vulnerabilities...

ConQuest DICOM Server 1.4.17d - Stack Buffer Overflow Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python -- coding: utf8 -- ConQuest DICOM Server 1.4.17d Remote Stack Buffer Overflow RCE Vendor: University of Manchester. Developed by Marcel van Herk, Lambert Zijp and Jan Meinders. The Netherlands Cancer Institute Product web pag...

ConQuest DICOM Server 1.4.17d - Stack Buffer (PoC)

!/usr/bin/env python -- coding: utf8 -- ConQuest DICOM Server 1.4.17d Remote Stack Buffer Overflow RCE Vendor: University of Manchester. Developed by Marcel van Herk, Lambert Zijp and Jan Meinders. The Netherlands Cancer Institute Product web page: https://ingenium.home.xs4all.nl/dicom.html |...

ConQuest DICOM Server 1.4.17d Remote Stack Buffer Overflow RCE

Summary A full featured DICOM server has been developed based on the public domain UCDMC DICOM code. Some possible applications of the Conquest DICOM software are: DICOM training and testing; Demonstration image archives; Image format conversion from a scanner with DICOM network access; DICOM ima...