169 matches found
MrKaplan
Mr.Kaplan Descrizione MrKaplan è uno strumento pensato per aiutare i red teamer a rimanere nascosti cancellando le prove dell'esecuzione. Funziona salvando informazioni come l'ora di esecuzione, un'istantanea dei file e associando ogni prova all'utente interessato. Questo strumento è ispirato a...
Ghost-In-The-Logs
Fantasma nos Logs Esta ferramenta permite-lhe evadir o sysmon e o registo de eventos do Windows. O meu artigo no blogue pode ser encontrado aqui Uso Pode obter a versão mais recente aqui Começando Assim que tiver a versão mais recente, execute-a sem argumentos para ver os comandos disponíveis...
Suborner
Suborner: Il Falsario Invisibile degli Account Cos'è? Un semplice programma per creare un account Windows di cui solo tu saprai : Crea account locali invisibili senza net user o le applicazioni di gestione utenti di Windows OS es. netapi32::netuseradd Funziona su tutti i sistemi Windows NT da...
Winshark
Winshark Wireshark-Plugin zur Arbeit mit der Ereignisablaufverfolgung für Windows Microsoft Message Analyzer wird eingestellt und seine Downloadpakete wurden am 25. November 2019 von den microsoft.com-Websites entfernt. Wireshark hat eine riesige Bibliothek von Netzwerkprotokoll-Dissectoren...
sysmon-modular
sysmon-modular | Un repository di configurazioni Sysmon personalizzabile da tutti Questo è un repository di configurazioni per Sysmon di Microsoft Sysinternals scarica qui, strutturato in modo modulare per semplificare la manutenzione e la generazione di configurazioni specifiche. Tieni presente...
EventLogging
Hinweis Dieses Repository wird seit April 2024 nicht mehr gewartet. BHIS Hinweis Dieses Repository wird seit April 2024 nicht mehr gewartet. EventLogging Dieses Repository enthält Anleitungen zum Einrichten der Ereignisprotokollierung. Diese Anleitung ist in Abschnitte, Defensive Readiness...
Audix
root@kitploit: | / /| | / / / / / |// / // // // / / // |,/ ,/ // //|| ist ein PowerShell-Tool zur schnellen Konfiguration der Windows-Ereignisüberwachungsrichtlinien für Monitoring und Incident Response. Bitte beachten: Dieses Tool ändert nur die lokale Sicherheitsrichtlinie. Wenn es auf einem...
santa
Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...
CVE-2026-61347
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally...
CVE-2026-59137
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...
CVE-2026-59126
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Event Logging Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-56611
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Event Logging Service allows an authorized attacker to elevate privileges locally...
CVE-2026-59126
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Event Logging Service allows an authorized attacker to elevate privileges locally...
CVE-2026-59126 Windows Event Logging Service Elevation of Privilege Vulnerability
...
CVE-2026-59126 Windows Event Logging Service Elevation of Privilege Vulnerability
...
CVE-2026-59126
The CVE refers to a race condition in Windows Event Logging Service where concurrent execution on a shared resource with improper synchronization can enable a local, authorized user to elevate privileges. Affected component: Windows Event Logging Service; root cause: race condition due to insuffi...
CVE-2026-61347
CVE-2026-61347 describes a buffer over-read in Windows Event Logging Service that allows an authorized attacker with LOW privileges and local access to disclose information. The CVSS 3.1 metrics indicate a MEDIUM base score (5.5), with LOCAL attack vector, low attack complexity, no user interacti...
CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability
...