untitledgoosetool

Untitled Goose Tool L'oie est en liberté. Table des matières À propos Pour commencer Prérequis Exigences Installation Utilisation Config GUI Auth Csv Honk Messagetrace Workflow par défaut recommandé Workflow recommandé pour l'appel UAL avec limites de temps Considérations Problèmes connus...

larac2shell

LaraC2 Shell -- Shell interactif MDE Live Response Shell interactif multiplateforme pour Microsoft Defender for Endpoint Live Response...

Disable-TamperProtection

Désactivation de la protection contre la falsification et d'autres composants Defender / MDE Il est possible d'abuser des privilèges SYSTEM / TrustedInstaller pour altérer ou supprimer les paramètres de WdFilter clé de registre ALTITUDE et décharger le minidriver du noyau afin de désactiver la...

Christmas

Maldev Academy Maldev Academy Home Maldev Academy Syllabus Christmas Implémentation d'une méthode d'injection mentionnée par @Hexacorn. Ce PoC crée plusieurs processus, où chaque processus exécute une tâche spécifique dans le cadre de l'opération d'injection. Chaque processus enfant en génère un...

ludus-defender-lab

Ludus Defender Lab Конфигурация стенда Ludus и роли Ansible для лаборатории безопасности Windows, предварительно подготовленной для MDE и MDI, с полностью некорректной установкой ADCS для тестирования покрытия обнаружения. Конфиг| ВМ| Назначение ---|---|--- zsec-mde-mdi-lab.yml| DC01 + WKS01|...

MDE-AuditCheck

MDE-AuditCheck Vérifie que tous les paramètres d'audit dont MDE dépend sont correctement définis dans la GPO Le script repose sur les Remote Server Administration Tools RSAT...

Astra Linux – Vulnerability in edk2

Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privileges, denial of service, and/or information disclosure through physical access...

edk2 security update

20241117-4.0.1.el97.3 - Replace upstream references Orabug:36569119 20241117-4.el97.3 - edk2-OvmfPkg-MemEncryptSevLib-Evict-cache-lines-during-SN.patch RHEL-125104 - edk2-MdePkg-Add-the-COHERENCYSFWNO-CPUID-bit-field.patch RHEL-125104 -...

Security update for ovmf

This update for ovmf fixes the following issues: CVE-2024-1298: MdeModulePkg: Potential UINT32 overflow in S3 ResumeCount bsc1225889 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run th...

FalconHound - A Blue Team Multi-Tool. It Allows You To Utilize And Enhance The Power Of Blo odHound In A More Automated Fashion

FalconHound is a blue team multi-tool. It allows you to utilize and enhance the power of BloodHound in a more automated fashion. It is designed to be used in conjunction with a SIEM or other log aggregation tool. One of the challenging aspects of BloodHound is that it is a snapshot in time...

mde utilities contains Prototype Pollution

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

mde utilities 安全漏洞

mde utilities is a classic collection of JavaScript utilities. A security vulnerability exists in mde utilities that stems from the presence of a prototype contamination vulnerability...

SUSE CVE-2019-11098

Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access...

OESA-2022-1988 edk2 security update

Security Fixes: Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access.CVE-2019-11098...

OESA-2022-1987 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2019-14584 Insufficie...

August 2, 2022, update for Office 2013 (KB5002250)

August 2, 2022, update for Office 2013 KB5002250 This article describes update 5002250 for Microsoft Office 2013 that was released on August 2, 2022. This update also applies to Office Home and Student 2013 RT.Be aware that the update in the Microsoft Download Center applies to the Microsoft...

Description of the security update for Office 2013: July 12, 2022 (KB5002121)

Description of the security update for Office 2013: July 12, 2022 KB5002121 Summary This security update resolves a Microsoft Office security feature bypass vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2022-33632. Note: To apply this...

USN-5088-1 edk2 vulnerabilities

It was discovered that EDK II incorrectly handled input validation in MdeModulePkg. A local user could possibly use this issue to cause EDK II to crash, resulting in a denial of service, obtain sensitive information or execute arbitrary code. CVE-2019-11098 Paul Kehrer discovered that OpenSSL use...

UBUNTU-CVE-2019-11098

Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access...

EDKII MdeModulePkg 输入验证错误漏洞

EDKII is an open source project that provides a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications developed and maintained by the UEFI Forum. A security vulnerability exists in EDKII MdeModulePkg that stems from insufficient input validation ...