SpoolSploit

SpoolSploit 一系列 Windows 打印后台处理程序漏洞的集合，通过容器化与其他实用工具一起，用于实际利用。 摘要 SpoolSploit 是一系列 Windows 打印后台处理程序漏洞的集合，通过容器化与其他实用工具一起，用于实际利用。一些非常有效的方法包括中继机器账户凭据以提升权限，以及在端点以完全系统权限执行恶意 DLL。 开始使用 截至发布之日，SpoolSploit Docker 容器已在最新版本的 MacOS、Ubuntu Linux 和 Windows 10 上成功测试。 虽然不是必须的，但如果您希望在 SpoolSploit 容器内托管恶意 DLL...

CVE-2023-50916

Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted change from a local path to a UNC path. It allows administrators to configure the backup location of the database used by the application. Attempting to change this location to a...

Microsoft Windows TAR File Parsing NTLM Relay Vulnerability

This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of T...

CVE-2023-50916

Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted change from a local path to a UNC path. It allows administrators to configure the backup location of the database used by the application. Attempting to change this location to a...

Raining SYSTEM Shells with Citrix Workspace app

TL;DR Citrix Workspace is vulnerable to a remote command execution attack running under the context of the SYSTEM account. By sending a crafted message over a named pipe and spoofing the client process ID, the Citrix Workspace Updater Service can be tricked into executing an arbitrary process und...