309 matches found
Follina-MSDT-Vulnerability-CVE-2022-30190-
Follina-MSDT-Vulnerability-CVE-2022-30190- Detection and Remediation of the Follina MSDT Vulnerability CVE-2022-30190 For detail inormatin about Follina-MSDT-Vulnerability-CVE-2022-30190- visit...
Chrome-and-Edge-Version-Dumper
Chrome-and-Edge-Version-Dumper Powershell script that dumps Chrome and Edge version to a text file in order to determine if you need to update due to CVE-2022-1096 Make sure to edit the paths before using AND make the folder for the output to be stored...
ElectronVulnerableVersion
Find Electron Apps Vulnerable to CVE-2023-4863 / CVE-2023-5129 This PowerShell script downloads Sysinternals Strings, recursively searches for strings within all .exe files across all drives, and compares the Electron version found with known patched versions below to determine vulnerability to...
stop-zenbleed-win
Stopping Zenbleed CVE-2023-20593 on Windows The newly discovered Zenbleed vulnerability CVE-2023-20593 affects all Zen2 processors from AMD. Unfortunately, AMD will not provide microcode updates for many of its processors until November or December 2023. How to stay safe in the meantime? Luckily,...
MoveEdr
MoveEDR If you're admin you can force Windows to delete or move folders and files around immediately after booting before services are started. This can be used to disable EDRs. Usage !CAUTION There is an issue with CrowdStrike which results in a bootloop with the message "INACCESSIBLEBOOTDEVICE"...
FarsightAD
FarsightAD Table of Contents FarsightAD Table of Contents Description Prerequisite Basic usage AD Hunting cmdlets Demo Fully / partially hidden objects detection Acknowledgements Thanks Author Licence Description FarsightAD is a PowerShell script that aim to help uncovering eventual persistence...
DCOMrade
DCOMrade DCOMrade is a Powershell script that is able to enumerate the possible vulnerable DCOM applications that might allow for lateral movement, code execution, data exfiltration, etc. The script is build to work with Powershell 2.0 but will work with all versions above as well. The script...
Get-ReconInfo
Get-ReconInfo NAME Get-ReconInfo SYNOPSIS Lists connections and relevant info about a system Author: Chris King @raikiasec SYNTAX Get-ReconInfo DESCRIPTION This script runs the following commands on the local system, parses the output, and prints the results to the screen: netstat -ano ipconfig...
Windows10_Cumulative_Updates_PowerShell
Just use this - https://github.com/aaronparker/LatestUpdate Updates everything if ENTERPRISE or EDU Win 10. If PRO only 1809 , 1903 & 1909 are patched. Windows10CumulativeUpdatesPowerShell This powershell script can be ran on a system and will identify if a system is patched for CVE-2020-0601...
exchange-0days-202103
exchange-0days-202103 IoC determination for exploitation of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858 and CVE-2021-27065...
quick-fix-cve-2024-38063
quick-fix-cve-2024-38063 quick powershell script to fix cve-2024-38063 Donation if you want to support my works, you can donate me at the following monero address: 4B9WQivaHfd3miDfPKEfCianocGpBx9d8FXycz2vmNW3aBDVKHgkBd9Gmapt4RBVEpTwnehujsiUBBehUiLvnEHs7VFstCC Or using PayPal:...
msxml4-remediation
MSXML 4.0 Remediation PowerShell PowerShell script to remediate security findings related to Microsoft XML Core Services MSXML 4.0 , which is unsupported and commonly flagged by vulnerability scanners. This script I made unregisters the .dll files for MSXML 4 and renames them. This remediates the...
Invoke-LinkSpray
Invoke-LinkSpray Powershell script to create malicious SMB or WebDAV links to steal NTLM authentication. Takes UNC or local folder paths from a file specified by the -ShareList parameter. Optionally, -Depth can be used to specify how many folders to recurse when creating URL files. Also supports ...
CVE-Tracker
CVE-Tracker With the help of this automated script, you will never lose track of newly released CVEs. What does this powershell script do is exactly running the Microsoft Edge at system startup, navigate to 2 URLs ,and then put the browser in to full screen mode. As ethical hackers, it's vital th...
CVE-2023-23397-Patch
CVE-2023-23397 Windows Update Patch CVE-2023-23397 powershell patch script for Windows 10 and 11 This version of the script allows you to check if your device has the most reach sent patches for the latest Microsoft exploit. if the security updates are not found using the Powershell Command...
Get-log4j-Windows-local
Get-log4j-Windows-local.ps1 Identify all log4j components on a single local windows servers. CVE-2021-44228. A single use copy - see https://github.com/KeysAU/Get-log4j-Windows.ps1 for multi computer. Apache log4j CVE-2021-44228 Script Running: Export: Columns A - I: Continued: Description: Local...
Search-log4Jvuln-AppScanSTD
Search log4J vuln using AppScan Standard and a list of websites This Powershell script run AppScan Standard scans against a list of web sites URLs.txt checking just for Log4J CVE-2021-44228 vulnerability. Structure of project: After run the script, it will read each line in URLs.txt and start...
Invoke-ATTACKAPI
Invoke-ATTACKAPI DEPRECATED WE RECOMMEND TO USE: https://github.com/Cyb3rWard0g/ATTACK-Python-Client A PowerShell script to interact with the MITRE ATT&CK Framework via its own API in order to gather information about techniques, tactics, groups, software and references provided by the MITRE ATT&...
Invoke-DumpMDEConfig
DumpMDEConfig PowerShell Script Overview Invoke-DumpMDEConfig is a PowerShell script designed to extract and display Microsoft Defender configuration and logs, including excluded paths, enabled ASR rules, allowed threats, protection history, and Exploit Guard protection history. The script provid...