sticky_keys_hunter

Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 스캐너 PoC - @JaGoTu 및 @zerosum0x0. 이 저장소에는 호스트가 CVE-2019-0708Microsoft Windows 원격 데스크톱 서비스 원격 코드 실행 취약점에 취약한지 탐지할 수 있는 rdesktop의 스캐너 포크가 있습니다. 이는 서비스 거부denial-of-service를 유발하지 않아야 하지만, 수년간의 모든 취약한 RDP 스택 버전에 대해 100% 보장할 수는 없습니다. 또한 현재 작업 중인 Metasploit 모듈도 있습니다MSF에는 RDP...

Check-vuln-CVE-2019-0708

CVE-2019-0708 비인증 CVE-2019-0708 "BlueKeep" 스캐너 PoC 제작: @JaGoTu, @zerosum0x0. Metasploit 모듈 PR: https://github.com/rapid7/metasploit-framework/pull/11869 이 저장소의 내용 호스트가 CVE-2019-0708 Microsoft Windows 원격 데스크톱 서비스 원격 코드 실행 취약점에 취약한지 감지할 수 있는 rdesktop의 스캐너 포크입니다. 서비스 거부를 유발해서는 안 되지만, 수년간의 모든 취약한 RDP...

rdesktop

ВАЖНО: rdesktop больше не поддерживается Пожалуйста, имейте в виду, что этот проект больше не поддерживается и не получал обновлений в течение многих лет. Имеются сообщения об уязвимостях безопасности, которые не были исправлены. Используйте с осторожностью и на свой страх и риск. rdesktop - клие...

Mass-scanner-for-CVE-2019-0708-RDP-RCE-Exploit

Mass-scanner-for-CVE-2019-0708-RDP-RCE-Exploit 此脚本旨在改进此 PoC 脚本 https://github.com/zerosum0x0/CVE-2019-0708 rdesktop 二进制文件超时时间太长，因此我希望它能更快超时 以前无法进行多 IP 扫描，现在您可以扫描给定的 IP 列表。 示例运行 python3 script.py rdesktop rdpiplist -o vulnips 如需了解更多信息，请阅读该脚本。...

CVE-2019-0708-Msf--

CVE-2019-0708 Неаутентифицированный CVE-2019-0708 "BlueKeep" сканер PoC от @JaGoTu и @zerosum0x0. Технические подробности: https://zerosum0x0.blogspot.com/2019/05/avoiding-dos-how-bluekeep-scanners-work.html Модуль Metasploit Модуль Metasploit был добавлен в rapid7:master. msf5 use...

cve-2019-0708_bluekeep_rce

Запустите msfconsole meterpreter/multi/handler для прослушивания на 192.168.116.133:6000 2. cd rdesktop-1.5.0 && make 3. Измените config, настройте IP и порт для обратного подключения: 192.168.116.133 6000 4. Выполните ./heapspray 192.168.116.134 134 — адрес XP, память = 2 ГБ 5. msfconsole...

bluekeepscan

BlueKeepScan 다중 스레드 환경에서 대규모 네트워크의 CVE-2019-0708을 확인하기 위해 @zerosum0x0의 PoC를 기반으로 한 간단한 래퍼입니다. 준비 먼저 원본을 다운로드하여 설치해야 합니다: root@kitploit: git clone https://github.com/zerosum0x0/CVE-2019-0708.git cd CVE-2019-0708/rdesktop-fork-bd6aa6acddf0ba640a49834807872f4cc0d0a773/ ./bootstrap ./configure...

MiracleLinux 3 : rdesktop-1.4.1-4.2AXS3 (AXSA:2008-87:01)

The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2008-87:01 advisory. rdesktop is an open source client for Microsoft Windows NT Terminal Server and Microsoft Windows 2000 and 2003 Terminal Services, capable of natively...

MiracleLinux 4 : rdesktop-1.6.0-8.AXS4.1 (AXSA:2011-197:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2011-197:01 advisory. rdesktop is an open source client for Windows NT Terminal Server and Windows 2000 & 2003 Terminal Services, capable of natively speaking Remote Desktop Protoc...

EUVD-2011-1595

Malware in sbrugna...

EUVD-2018-12745

Malware in sbrugna...

EUVD-2018-20400

Malware in sbrugna...

EUVD-2018-20402

Malware in sbrugna...

EUVD-2018-20406

Malware in sbrugna...

EUVD-2018-12744

Malware in sbrugna...

EUVD-2018-20409

Malware in sbrugna...

EUVD-2018-20407

Malware in sbrugna...

EUVD-2018-12746

Malware in sbrugna...

EUVD-2018-20401

Malware in sbrugna...