SpoolSploit

SpoolSploit Windowsのプリントスプーラーのエクスプロイトを集め、他のユーティリティとともにコンテナ化し、実用的な悪用を可能にします。 概要 SpoolSploitは、Windowsのプリントスプーラーのエクスプロイトを集め、他のユーティリティとともにコンテナ化し、実用的な悪用を可能にするものです。特権を昇格させ、エンドポイント上で完全なシステムアクセス権を持つ悪意のあるDLLを実行するために、マシンアカウントの資格情報をリレーする非常に効果的な方法がいくつかあります。 はじめに 本リリース時点では、SpoolSploit...

CVE-2023-50916

Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted change from a local path to a UNC path. It allows administrators to configure the backup location of the database used by the application. Attempting to change this location to a...

Microsoft Windows TAR File Parsing NTLM Relay Vulnerability

This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of T...

CVE-2023-50916

Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted change from a local path to a UNC path. It allows administrators to configure the backup location of the database used by the application. Attempting to change this location to a...

Raining SYSTEM Shells with Citrix Workspace app

TL;DR Citrix Workspace is vulnerable to a remote command execution attack running under the context of the SYSTEM account. By sending a crafted message over a named pipe and spoofing the client process ID, the Citrix Workspace Updater Service can be tricked into executing an arbitrary process und...