9 matches found
CdpSvcLPE
CdpSvcLPE Escalada local de privilegios en Windows mediante el servicio CdpSvc Dll Hijacking en ruta de SYSTEM escribible Descripción breve: El Servicio de plataforma de dispositivos conectados o CDPSvc es un servicio que se ejecuta como NT AUTHORITY\LOCAL SERVICE e intenta cargar la DLL...
PrintSpoofer
PrintSpoofer From LOCAL/NETWORK SERVICE to SYSTEM by abusing SeImpersonatePrivilege on Windows 10 and Server 2016/2019. For more information: https://itm4n.github.io/printspoofer-abusing-impersonate-privileges/. Usage You can check the help message using the -h option. root@kitploit:...
THM-Tempest
TryHackMe — Tempest SOC Level 1 Pathway | Incident Response Investigation Overview Full incident response investigation of a compromised Windows machine. The attacker gained initial access via a malicious Word document exploiting CVE-2022-30190 Follina, established persistence, tunneled through t...
PrintSpoofer
PrintSpoofer PrintSpoofer 漏洞利用工具，可用于在 Windows Server 2016、Server 2019 和 Windows 10 上提升服务用户权限。 要提升权限，服务帐户必须具有 SeImpersonate 权限。执行方式： PrintSpoofer.exe -i -c cmd 在具备相应权限的情况下，这将授予系统用户 shell 访问权限。...
Post_Exploitation_Privilege_Escalation
⬆️ Week 05 — Post-Exploitation & Privilege Escalation Inter...
Post_Exploitation_Privilege_Escalation
⬆️ Week 05 — Post-Exploitation & Privilege Escalation Inter...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
PrintSpoofer Details !Licensehttps://img.shields.io/badge...
New CherryLoader Malware Mimics CherryTree to Deploy PrivEsc Exploits
A new Go-based malware loader called CherryLoader has been discovered by threat hunters in the wild to deliver additional payloads onto compromised hosts for follow-on exploitation. Arctic Wolf Labs, which discovered the new attack tool in two recent intrusions, said the loader's icon and name...
Metasploit Weekly Wrap-Up
I'm sure you know what's coming, more Log4Shell For those wondering when the Log4Shell remediation nightmare will end, I'm afraid I can't give you that. What I can give you, though, is a new Log4Shell module! With the new module from zeroSteiner you can expect to get unauthenticated RCE on the...