FarsightAD

FarsightAD 목차 FarsightAD 목차 설명 사전 요구 사항 기본 사용법 AD 헌팅 cmdlet 데모 완전/부분적으로 숨겨진 객체 탐지 감사의 말 감사 인사 저자 라이선스 설명 FarsightAD는 Active Directory 도메인 침해 이후 위협 행위자가 배포한 가능한 지속성 메커니즘을 발견하는 데 도움을 주기 위해 설계된 PowerShell 스크립트입니다. 이 스크립트는 복제 메타데이터의 타임스탬프로 보강된 다양한 객체와 해당 속성들을 CSV/JSON 파일로 내보냅니다. 또한, 복제 권한으로 실행될 경우...

drs-malware-scan

AWS 서비스를 사용한 온프레미스 서버의 악성코드 스캔 분석 수행 온프레미스 악성코드 탐지의 과제 보안팀이 예산 및 리소스 제약으로 인해 모든 온프레미스 서버를 지속적으로 모니터링하는 것은 어려울 수 있습니다. 최신 악성코드는 다양한 난독화 기술을 사용하므로 서명 기반 안티바이러스만으로는 충분하지 않습니다. 서버 관리자는 과거의 모든 서버에서 보안 이벤트를 볼 수 있는 가시성이 부족할 수 있습니다. 중앙 집중식 모니터링 및 알림 없이 사고 발생 시 손상된 시스템과 복원해도 안전한 백업을 판단하는 것은 어렵습니다. 서버 관리자가...

ANT-2026-4PKJCSR8 · gdal · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-4PKJCSR8: Heap-buffer-overflow in gdal In GDAL's...

Malicious code in jurss-zss-drs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a2d303602ab6301883d6a58fb9450b70ecefca7920fca2e4b5c5b4cb1d49cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2024-0480

A vulnerability was found in Taokeyun up to 1.0.5. It has been declared as critical. Affected by this vulnerability is the function index of the file application/index/controller/m/Drs.php of the component HTTP POST Request Handler. The manipulation of the argument cid leads to sql injection. The...

PT-2024-15597 · Taokeyun · Taokeyun

Name of the Vulnerable Software and Affected Versions: Taokeyun versions up to 1.0.5 Description: A critical issue has been found in the HTTP POST Request Handler component, specifically in the function index of the file application/index/controller/m/Drs.php. The manipulation of the cid argument...

Taokeyun SQL Injection Vulnerability

Taokeyun is a shopping mall system by jifeer individual developer. A SQL injection vulnerability exists in Taokeyun version 1.0.5 and earlier versions, which originates from a SQL injection vulnerability in the cid parameter of the index function in the application/index/controller/m/Drs.php file...

FarsightAD - PowerShell Script That Aim To Help Uncovering (Eventual) Persistence Mechanisms Deployed By A Threat Actor Following An Active Directory Domain Compromise

FarsightAD is a PowerShell script that aim to help uncovering eventual persistence mechanisms deployed by a threat actor following an Active Directory domain compromise. The script produces CSV / JSON file exports of various objects and their attributes, enriched with timestamps from replication...

Exploit for CVE-2020-1472

CVE-2020-1472 POC The vulnerability can be exploited in a Wi...

Kirona-DRS 5.5.3.5 - Information Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title: Kirona-DRS 5.5.3.5 - Information Disclosure Shodan Search: /opt-portal/pages/login.xhtml Exploit Author: Ramikan Vendor Homepage: https://www.kirona.com/products/dynamic-resource-scheduler/ Affected Version: DRS 5.5.3.5 may be...

Kirona-DRS 5.5.3.5 - Information Disclosure

Kirona-DRS 5.5.3.5 - Information Disclosure Exploit Title: Kirona-DRS 5.5.3.5 - Information Disclosure Discovered Date: 2019-10-03 Shodan Search: /opt-portal/pages/login.xhtml Exploit Author: Ramikan Vendor Homepage: https://www.kirona.com/products/dynamic-resource-scheduler/ Affected Version: DR...

Kirona-DRS 5.5.3.5 Information Disclosure

Exploit Title: Kirona-DRS 5.5.3.5 - Information Disclosure Discovered Date: 2019-10-03 Shodan Search: /opt-portal/pages/login.xhtml Exploit Author: Ramikan Vendor Homepage: https://www.kirona.com/products/dynamic-resource-scheduler/ Affected Version: DRS 5.5.3.5 may be other versions. Tested On...

Kirona-DRS 5.5.3.5 - Information Disclosure

Exploit Title: Kirona-DRS 5.5.3.5 - Information Disclosure Discovered Date: 2019-10-03 Shodan Search: /opt-portal/pages/login.xhtml Exploit Author: Ramikan Vendor Homepage: https://www.kirona.com/products/dynamic-resource-scheduler/ Affected Version: DRS 5.5.3.5 may be other versions. Tested On...

CVE-2019-17503

An issue was discovered in Kirona Dynamic Resource Scheduling DRS 5.5.3.5. An unauthenticated user can access /osm/REGISTER.cmd aka /osmtiles/REGISTER.cmd directly: it contains sensitive information about the database through the SQL queries within this batch file. This file exposes SQL database...

Cross site scripting

An issue was discovered in Kirona Dynamic Resource Scheduling DRS 5.5.3.5. A reflected Cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script via the /osm/report/ password parameter...

Design/Logic Flaw

An issue was discovered in Kirona Dynamic Resource Scheduling DRS 5.5.3.5. An unauthenticated user can access /osm/REGISTER.cmd aka /osmtiles/REGISTER.cmd directly: it contains sensitive information about the database through the SQL queries within this batch file. This file exposes SQL database...

CVE-2019-17503

An issue was discovered in Kirona Dynamic Resource Scheduling DRS 5.5.3.5. An unauthenticated user can access /osm/REGISTER.cmd aka /osmtiles/REGISTER.cmd directly: it contains sensitive information about the database through the SQL queries within this batch file. This file exposes SQL database...

CVE-2019-17503

CVE-2019-17503 affects Kirona Dynamic Resource Scheduler (DRS) 5.5.3.5. An unauthenticated user can directly access /osm/REGISTER.cmd (/osm_tiles/REGISTER.cmd), which contains SQL queries that disclose database information (version, table names, column names, etc.). Multiple sources (NVD, Red Hat...

CVE-2019-17504

Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5 is affected by a reflected XSS vulnerability. The issue allows remote attackers to inject arbitrary web script via the /osm/report/ password parameter, indicating insufficient input validation on the web application. References in the connected doc...

CVE-2019-17504

An issue was discovered in Kirona Dynamic Resource Scheduling DRS 5.5.3.5. A reflected Cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script via the /osm/report/ password parameter...