backup_dc_registry

备份操作员注册表备份导致域沦陷 一个简单的 POC，利用备份操作员权限远程转储 SAM、SYSTEM 和 SECURITY 注册表配置单元。 研究致谢： @filipdragovic 移植自 @mpgn 的 Windows PoC 用法 该概念验证是 impacket/examples/reg.py 的修改版本，可与已安装的最新 impacket 版本配合使用。所有受支持的 impacket 认证机制均可用。 root@kitploit: root@kali: python3 reg.py jsmith:'Spring2021'@10.0.229.1 backup -p...

Exploit for CVE-2020-1472

介绍 参考很多师傅写的关于CS的脚本,内容有横向移动、密码抓取、权限提升、权限维持等,尽可能将内网渗透中常用到的东西整理一下方便使用 更新日志 2021.7.7 更新CVE-2021-1675只测试了本地提权,其他的待测 参考于 https://github.com/cube0x0/CVE-2021-1675 2021.7.26 更新CVE-2021-1675-36934,参考与 https://github.com/cube0x0/CVE-2021-36934 2021.8.14 更新ZeroLogonCVE-2020-1472,参考...

Dell IT Assistant detectIESettingsForITA.ocx ActiveX Control

No description provided by source. !-- Dell IT Assistant detectIESettingsForITA.ocx ActiveX Control readRegVal Remote Registry Dump Vulnerability download uri: ftp://ftp.us.dell.com/sysman/OM-ITAssistant-Dell-Web-WIN-6.5.0-2247A01.21.exe ActiveX settings: CLSID: 6286EF1A-B56E-48EF-90C3-743410657F...

Dell IT Assistant - detectIESettingsForITA.ocx ActiveX Control

Dell IT Assistant - detectIESettingsForITA.ocx ActiveX Control object classid='clsid:6286EF1A-B56E-48EF-90C3-743410...

Dell IT Assistant - detectIESettingsForITA.ocx ActiveX Control

x = obj.readRegVal"HKLM"...

Dell IT Assistant detectIESettingsForITA.ocx ActiveX Control

Exploit for windows platform in category remote exploits ob...

Dell IT Assistant detectIESettingsForITA.ocx ActiveX Control readRegVal() Remote Registry Dump Vulnerability

!-- Dell IT Assistant detectIESettingsForITA.ocx ActiveX Control readRegVal Remote Registry Dump Vulnerability download uri: ftp://ftp.us.dell.com/sysman/OM-ITAssistant-Dell-Web-WIN-6.5.0-2247A01.21.exe ActiveX settings: CLSID: 6286EF1A-B56E-48EF-90C3-743410657F3C ProgID:...

Dell IT Assistant detectIESettingsForITA.ocx Remote Registry Dump

x = obj.readRegVal"HKLM","HARDWARE\DE...

[Full-disclosure] [ZH2005-02SA] Insecure tmp file creation in Wine

Title: Insecure tmp file creation in Wine Author: Giovanni Delvecchio e-mail: [email protected] Version affected : Wine 20050211 and previous releases About Wine ======= from http://www.winehq.org/site/docs/wine-faq/index : Wine is a program which allows the operation of DOS and MS Windows...

wine -- information disclosure due to insecure temporary file handling

Due to insecure temporary file creation in the Wine Windows emulator, it is possible for any user to read potentially sensitive information from temporary registry files. When a Win32 application is launched by wine, wine makes a dump of the Windows registry in /tmp with name regxxxxyyyy.tmp ,...