wmiexec-Pro

wmiexec-Pro wmiexec.py の次世代版。 目次 1. 情報 2. スペシャルサンクス 3. 特徴 4. はじめに インストール 5. 使い方 6. スクリーンショット 7. 動作の仕組み 8. 免責事項 9. 参照 情報 wmiexec.py の次世代版です。より多くの新機能を備え、すべての操作はポート 135 のみで動作します（SMB 接続は不要）。横移動における AV 回避（Windows Defender、HuoRong、360）を目的としています。 トップに戻る スペシャルサンクス @422926799 トップに戻る 特徴 主な機能: AV回避 主な機能:...

CVE-2024-38077-check

CVE-2024-38077check 135ポートを介してターゲットがCVE-2024-38077の脆弱性の影響を受けるかどうかを検出します。ターゲットマシンのファイアウォールが135ポートを制限していない必要があります。ターゲットがRDLサービスを有効にしている場合、この脆弱性の影響を受けます。ターゲットサーバーにパッチが適用されている場合、RPCを介してサービスに接続しようとすると ncasfaultaccessdenied が返されます。...

CVE-2021-1675-SCANNER

CVE-2021-1675-SCANNER CVE-2021-1675 の脆弱性スキャナー https://github.com/cube0x0/CVE-2021-1675 のインストール手順に従ってください。 rpcdump.py がインストールされていることを確認してください。 収集したホストのリストから、nmap の -oG タグを使用して、稼働中のホストのリストを含むファイルを出力します。 Example: nmap -iL hosts.txt -T4 --open -p 135 -oG outfile.txt python3 scan.py outfile.txt...

Siemens LOGO! Missing Authentication For Critical Function (CVE-2020-7589)

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions. The vulnerability could lead to an attacker reading and modifying the device configuration and obtain project files from affected devices. The security vulnerability could be exploited by an unauthenticated...

CVE-2020-7589

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions. The vulnerability could lead to an attacker reading and modifying the device configuration and obtain project files from affected devices. The security vulnerability could be exploited by an unauthenticated...

CVE-2020-7589

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions. The vulnerability could lead to an attacker reading and modifying the device configuration and obtain project files from affected devices. The security vulnerability could be exploited by an unauthenticated...

CVE-2020-7589

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions. The vulnerability could lead to an attacker reading and modifying the device configuration and obtain project files from affected devices. The security vulnerability could be exploited by an unauthenticated...

Siemens LOGO!8 BM Access Control Error Vulnerability (CNVD-2020-43685)

The Siemens LOGO!8 BM is a programmable logic controller from Siemens, Germany. An access control error vulnerability exists in Siemens LOGO!8 BM all versions, which stems from a lack of identity authentication in the program. An attacker with access to port 135/tcp could exploit this vulnerabili...

Siemens LOGO! TDE service "DELETEPROG" Denial of Service Vulnerability

Summary An exploitable denial of service vulnerability exists in the TDE service functionality of Siemens LOGO! 1.82.02, 12/24RCE Version 0BA and 230RCE Version 0BA. A specially crafted network request can cause erased information resulting in a denial of service. An attacker can send an...

Siemens LOGO! TDE service "NFSAccess" Delete Denial of Service Vulnerability

Summary An exploitable denial of service vulnerability exists in the TDE service functionality of Siemens LOGO! 1.82.02, 12/24RCE Version 0BA and 230RCE Version 0BA. A specially crafted network request can cause be used to delete critical system data resulting in a denial of service. An attacker...

Siemens LOGO! (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.4 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: LOGO! Vulnerability: Missing Authentication for Critical Function 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-20-161-03...

DCE/RPC and MSRPC Services Enumeration Reporting

Distributed Computing Environment / Remote Procedure Calls DCE/RPC or MSRPC based service enumeration reporting. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Windows XP/2000/NT 4 RPC Service Denial of Service Vulnerability (3)

No description provided by source. source: http://www.securityfocus.com/bid/6005/info The Microsoft Windows RPC service contains a flaw that may allow a remote attacker to cause a denial of service. By sending a specifically malformed packet to TCP port 135, the RPC service will be disabled. This...

Microsoft Windows XP/2000/NT 4 RPC Service Denial of Service Vulnerability (4)

No description provided by source. source: http://www.securityfocus.com/bid/6005/info The Microsoft Windows RPC service contains a flaw that may allow a remote attacker to cause a denial of service. By sending a specifically malformed packet to TCP port 135, the RPC service will be disabled. This...

Microsoft Windows XP/2000/NT 4 RPC Service Denial of Service Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/6005/info The Microsoft Windows RPC service contains a flaw that may allow a remote attacker to cause a denial of service. By sending a specifically malformed packet to TCP port 135, the RPC service will be disabled. This...

Microsoft Windows XP/2000/NT 4 RPC Service Denial of Service Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/6005/info The Microsoft Windows RPC service contains a flaw that may allow a remote attacker to cause a denial of service. By sending a specifically malformed packet to TCP port 135, the RPC service will be disabled. This...

Windows Management Instrumentation (WMI) Remote Command Execution

This Metasploit module executes powershell on the remote host using the current user credentials or those supplied. Instead of using PSEXEC over TCP port 445 we use the WMIC command to start a Remote Procedure Call on TCP port 135 and an ephemeral port. Set ReverseListenerComm to tunnel traffic...

DCE/RPC and MSRPC Services Enumeration

Distributed Computing Environment / Remote Procedure Calls DCE/RPC or MSRPC based service enumeration. SPDX-FileCopyrightText: 2005 Dave Aitel ported to NASL by rd and Pavel Kankovsky Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Windows (XP, 2k3, Longhorn) is vulnerable to IpV6 Land attack.

Hi! The land attack described in - http://www.securityfocus.com/archive/1/392354 - is fixed for ipv4 by last security updates, but not for ipv6 protocol. As in IpV4 version of the attack, the build-in firewall has to be turned off to experience the result 1-5 seconds of DoS condition. Tools used:...

Microsoft Windows RPCSS DCOM Interface Denial of Service Vulnerability

Description The Microsoft Windows RPC service may contain a flaw that allows a remote attacker to cause a denial of service. By sending a specifically malformed packet to TCP port 135, the RPC service will be disabled. This issue may be related to BID 6005, however, this has not been confirmed...