DVS

DCOM Vulnerability Scanner AKA Devious swiss army knife - Lateral movement using DCOM Objects Did you ever wonder how you can move laterally through internal networks? or interact with remote machines without alerting EDRs? Let's assume that we have a valid credentials, or an active session with...

RemoteMonologue

RemoteMonologue RemoteMonologue は、Interactive User RunAs キーを悪用し、DCOM を介して NTLM 認証を強制することで、リモートでのユーザー侵害を可能にする Windows クレデンシャル収集テクニックです。 詳細については、X-Force Red の RemoteMonologue: Weaponizing DCOM for NTLM Authentication Coercions をお読みください。 機能 🔹 DCOM を介した認証強制 -dcom 4つのDCOMオブジェクト ServerDataCollectorSet,...

DVS - D(COM) V(ulnerability) S(canner) AKA Devious Swiss Army Knife

Did you ever wonder how you can move laterally through internal networks? or interact with remote machines without alerting EDRs? Let's assume that we have a valid credentials, or an active session with access to a remote machine, but we are without an option for executing a process remotely in a...