Fetch the HKLM\SAM registry data

Fetch the HKLM\SAM registry data C Tenable Network Security, Inc. include"compat.inc"; if description scriptid160511; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/28"; scriptnameenglish:"Fetch the HKLM\SAM registry data"; scriptsummaryenglish:"Fetch the...

CVE-2019-14743

In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node\Valve\Steam has explicit "Full control" for the Users group, which allows local users to gain NT AUTHORITY\SYSTEM access...

Latest Windows UAC Bypass Permits Code Execution

Less than a month after disclosing a Windows User Account Control bypass, researcher Matt Nelson today published another attack that circumvents the security feature and leaves no traces on the hard disk. This time, the bypass relies on Event Viewer eventvwr.exe, a native Windows feature used to...

Matrix42 Remote Control Host 3.20.0031 Privilege Escalation

Exploit Title: Matrix42 Remote Control Host - Unquoted Path Privilege Escalation Date: 06-05-2016 Exploit Author: Roland C. Redl Vendor Homepage: https://www.matrix42.com/ Software Link: n/a Version: 3.20.0031 Tested on: Windows 7 Enterprise SP1 x64 CVE : n/a 1. Description: sc qc...

Windows Gather VNC Password Extraction

This module extract DES encrypted passwords in known VNC locations This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather VNC Password Extraction', 'Description' = %q This module extrac...

Use of system agreement when the backdoor-vulnerability warning-the black bar safety net

This morning inadvertently open the xFocus of a cow's BLOG...The New Year's firsthaha. Found a very interesting thing. Is the use of the system in the registered agreement to execute the command. 具体 连接 :http://coolice.blogdriver.com/coolice/414334.html Then I on their own machine experiment:it...

Intel SSRK

To be consumed by Intel only, Evaluates to true if HKLM:\SOFTWARE\Microsoft\DriverFlighting\Partner,TargetRing equals IntelSSRK...

Windows Live HKLM

Ensures that the update only applies if Software\Microsoft\Windows Live exisits in HKLM if the WL installer was run in the past...