LSTAR-EN

LSTAR - 通过谷歌翻译和DeepL将Aggressor翻译成英文！ 为简化CS右键操作和方便自身集成，参考了大量后渗透插件 重构并丰富了主机相关凭据获取、多级内网穿透、隐藏计划任务、免杀Mimikatz及克隆添加用户等功能 特性： 通过与CobaltStrike的TCP、SMB、Proxy等方式配合，穿透复杂网络环境 为RDP相关、AddUser、LsassDump等功能提供多种免杀执行方式，应对不普及的环境 集成多种免杀功能，如以WinAPI或Assembly内存加载模式运行的影子用户、隐藏计划任务等 其中包括以下功能模块： 以下图片保持不变！...

LSTAR

LSTAR - Aggressor Un plugin que va desde el compromiso inicial hasta el control del dominio, logrando el movimiento lateral por la red interna Con el objetivo de simplificar el menú contextual de CS y facilitar la integración propia, se han tomado como referencia numerosos plugins de...

EUVD-2022-30476

Malicious code in bioql PyPI...

RHEL 8 : bluez (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - kernel: Authvalue leak in Bluetooth Mesh Provisioning CVE-2020-26559 - bluez: BlueZ allows physically...

Researchers Detail Multistage Attack Hijacking Systems with SSLoad, Cobalt Strike

Cybersecurity researchers have discovered an ongoing attack campaign that's leveraging phishing emails to deliver a malware called SSLoad. The campaign, codenamed FROZENSHADOW by Securonix, also involves the deployment of Cobalt Strike and the ConnectWise ScreenConnect remote desktop software...

CVE-2022-25837

Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent access when at least one device supports BR/EDR Secure Connections pairing and the other BR/EDR Legacy PIN code pairing if the MITM...

Security update for samba (important)

openSUSE Security Update: Security update for samba Announcement ID: openSUSE-SU-2022:0283-1 Rating: important References: 1139519 1183572 1183574 1188571 1191227 1191532 1192684 1193690 1194859 1195048 SLE-23329 Cross-References: CVE-2020-27840 CVE-2021-20277 CVE-2021-20316 CVE-2021-36222...

Siemens SiPass Integrated Credential Acquisition Vulnerability

SiPass server is a component of the SiPass centralized access control system that receives connections from clients for communication. A credential acquisition vulnerability exists in Siemens SiPass integrated, where an attacker with local access to the SiPass integrated server or SiPass integrat...