LSTAR-EN

LSTAR - 通过谷歌翻译和DeepL将Aggressor翻译成英文！ 为简化CS右键操作和方便自身集成，参考了大量后渗透插件 重构并丰富了主机相关凭据获取、多级内网穿透、隐藏计划任务、免杀Mimikatz及克隆添加用户等功能 特性： 通过与CobaltStrike的TCP、SMB、Proxy等方式配合，穿透复杂网络环境 为RDP相关、AddUser、LsassDump等功能提供多种免杀执行方式，应对不普及的环境 集成多种免杀功能，如以WinAPI或Assembly内存加载模式运行的影子用户、隐藏计划任务等 其中包括以下功能模块： 以下图片保持不变！...

LSTAR

LSTAR - Aggressor 1つのプラグインでセッション確立からドメインコントローラ掌握までを実現し、内部ネットワークを自由に移動できます CS の右クリックメニューを簡素化し、自身での統合を容易にすることを目的に、多数のポストエクスプロイテーションプラグインを参考にしました ホスト関連の資格情報取得、多段階の内部ネットワークトンネリング、隠蔽スケジュールタスク、AV回避の Mimikatz、ユーザーのクローン作成・追加などの機能を再構築し、拡充しました 機能特性： CobaltStrike の TCP、SMB、Proxy...

EUVD-2022-30476

Malicious code in bioql PyPI...

RHEL 8 : bluez (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - kernel: Authvalue leak in Bluetooth Mesh Provisioning CVE-2020-26559 - bluez: BlueZ allows physically...

Researchers Detail Multistage Attack Hijacking Systems with SSLoad, Cobalt Strike

Cybersecurity researchers have discovered an ongoing attack campaign that's leveraging phishing emails to deliver a malware called SSLoad. The campaign, codenamed FROZENSHADOW by Securonix, also involves the deployment of Cobalt Strike and the ConnectWise ScreenConnect remote desktop software...

CVE-2022-25837

Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent access when at least one device supports BR/EDR Secure Connections pairing and the other BR/EDR Legacy PIN code pairing if the MITM...

Security update for samba (important)

openSUSE Security Update: Security update for samba Announcement ID: openSUSE-SU-2022:0283-1 Rating: important References: 1139519 1183572 1183574 1188571 1191227 1191532 1192684 1193690 1194859 1195048 SLE-23329 Cross-References: CVE-2020-27840 CVE-2021-20277 CVE-2021-20316 CVE-2021-36222...

Siemens SiPass Integrated Credential Acquisition Vulnerability

SiPass server is a component of the SiPass centralized access control system that receives connections from clients for communication. A credential acquisition vulnerability exists in Siemens SiPass integrated, where an attacker with local access to the SiPass integrated server or SiPass integrat...