103 matches found
go-secdump
go-secdump 描述 go-secdump 是一个用于从 SAM 注册表配置单元远程提取哈希值以及从 SECURITY 配置单元提取 LSA 机密和缓存的哈希值的工具，无需远程代理，也无需接触磁盘。 该工具基于 go-smb 库构建，并利用它与 Windows 远程注册表通信，直接从内存中检索注册表键。 该工具的构建是为了学习经验，并作为概念验证，证明应该能够远程从 SAM 配置单元检索 NT 哈希值、LSA 机密以及域缓存凭据，而无需先将注册表配置单元保存到磁盘，然后再在本地解析它们。 需要克服的主要问题是，SAM 和 SECURITY 配置单元仅可由 NT...
Invoke-SessionHunter
Invoke-SessionHunter 检索并显示远程计算机上活跃用户会话的信息。无需管理员权限。 该工具利用远程注册表服务查询远程计算机上的 HKEYUSERS 注册表配置单元。它识别并提取与活跃用户会话关联的安全标识符（SID），并将其转换为相应的用户名，从而提供当前登录用户的信息。 如果提供了 -CheckAdminAccess 开关，它将通过 Invoke-WMIRemoting 认证到您拥有本地管理员访问权限的目标来收集会话（这很可能检索到更多结果）。...
BackupOperatorToDA
从备份操作员到域管理员 如果您攻陷了“备份操作员”组成员账户，您无需在域控制器上使用RDP或WinRM即可成为域管理员。 全部功劳归功于 filipdragovic 及其初始 POC！我构建此项目是因为我想要一个更通用的、带参数的二进制文件，并且能够将 SAM 数据库导出到远程共享！ root@kitploit: PS C:\Users\mpgn\POC .\BackupOperatorToDA.exe -h Backup Operator to Domain Admin by @mpgnx64 此工具感谢 @filipdragovic /...
CVE-2026-61345
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-59138
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-61345 Microsoft Remote Registry Service Denial of Service Vulnerability
...
CVE-2026-61345 Microsoft Remote Registry Service Denial of Service Vulnerability
...
EUVD-2026-56318
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-61345
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-61345
CVE-2026-61345: A null pointer dereference in the Microsoft Remote Registry Service can allow an authenticated network attacker to cause Denial of Service. CVSSv3.1 base score 6.5 (NETWORK, LOW complexity, LOW privileges, NO user interaction, Availability Impact HIGH). Affected component: Microso...
EUVD-2026-56317
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-59138 Microsoft Remote Registry Service Denial of Service Vulnerability
...
CVE-2026-59138
CVE-2026-59138 is a null pointer dereference in Microsoft Remote Registry Service that allows an authorized attacker to cause a denial of service over a network. The vulnerability has a CVSS v3.1 base score of 6.5 (MEDIUM) with Network attack vector, Low attack complexity, Privileges Required: Lo...
CVE-2026-59138 Microsoft Remote Registry Service Denial of Service Vulnerability
...
CVE-2026-59138
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
Microsoft Remote Registry Service Denial of Service Vulnerability
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
Microsoft Remote Registry Service Denial of Service Vulnerability
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
PT-2026-70417
Name of the Vulnerable Software and Affected Versions Microsoft Remote Registry Service affected versions not specified Description A null pointer dereference in the Microsoft Remote Registry Service allows an authorized attacker to cause a denial of service over a network. A null pointer...
PT-2026-70418
Name of the Vulnerable Software and Affected Versions Microsoft Remote Registry Service affected versions not specified Description A null pointer dereference in the Microsoft Remote Registry Service allows an authorized attacker to cause a denial of service over a network. A null pointer...