151 matches found
KrbRelay
KrbRelay 三つ首の犬のリレー。 詳細は https://googleprojectzero.blogspot.com/2021/10/windows-exploitation-tricks-relaying.html および https://googleprojectzero.blogspot.com/2021/10/using-kerberos-for-authentication-relay.html を参照してください。...
MS09-050
MS09-050 — SMBv2 远程代码执行漏洞利用 CVE-2009-3103 漏洞详情 Windows Vista 和 Server 2008 引入了 SMBv2，并带来了一个新的内核驱动程序 srv2.sys。该驱动程序未能验证 SMB 协商请求中的 Process Id High 字段。通过在该字段中发送一个特制的值，攻击者可使 srv2.sys 使用受控的值索引函数指针表，从而解引用攻击者提供的地址。 其结果是内核上下文中的任意代码执行，且无需身份验证。攻击者只需能够访问 445 端口。 微软于 2009 年 10 月修复了此漏洞（KB975517）。任何未打补丁的 Vist...
ms09-050-CVE-2009-3103-exploit
MS09-050 SMBv2 利用包装器 MS09-050 CVE-2009-3103 漏洞利用的一行设置。无需折腾，无需调试，直接生效。 为什么？ 大多数流传的 MS09-050 脚本需要手动注入 shellcode，与处理程序存在时序问题，或者干脆无法运行。本包装器： 生成带正确参数的 shellcode 自动构建漏洞利用代码 创建可直接使用的 Metasploit 处理程序 精确告知需要运行的命令 专为 OSCP 备考打造，时间至关重要。 目标 漏洞 : MS09-050 / CVE-2009-3103 影响范围 : Windows Vista SP1/SP2, Windows...
zeroscan
zeroscan Zeroscanは、ドメインコントローラの脆弱性スキャナで、現在Zerologon CVE-2020-1472、MS-PAR/MS-RPRN、SMBv2署名のチェックを含んでいます。 CVE-2020-1472: 組み込みスクリプトを使用してZerologon CVE-2020-1472をチェックしますが、ターゲットの悪用は試みず、単なる脆弱性スキャナです。 コードベースの借用元: https://github.com/SecuraBV/CVE-2020-1472 MS-PAR / MS-RPRN:...
Zero-day-scanning
zeroscan Zeroscanは、Domain Controllerの脆弱性スキャナーであり、現在Zerologon CVE-2020-1472、MS-PAR/MS-RPRN、SMBv2 Signingのチェックに対応しています。 CVE-2020-1472: 組み込みスクリプトを使用してZerologon CVE-2020-1472 をチェックしますが、ターゲットへの悪用は試みず、単なる脆弱性スキャナーです。 コードベースの提供元: https://github.com/Anonymous-Family/CVE-2020-1472.git MS-PAR / MS-RPRN:...
EUVD-2018-17259
Malware in sbrugna...
KrbRelay - Framework For Kerberos Relaying
Relaying 3-headed dogs. More details at https://googleprojectzero.blogspot.com/2021/10/windows-exploitation-tricks-relaying.html and https://googleprojectzero.blogspot.com/2021/10/using-kerberos-for-authentication-relay.html This should be working on most fully patched Windows systems. There may ...
The vulnerability of the SMBv2 component of the Windows operating system, which allows a hacker to trigger a service failure
The vulnerability of the SMBv2 component of the Windows operating system is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Cisco Firepower System Software Detection Engine DoS (cisco-sa-20181003-fp-smb-snort)
According to its self-reported version, Cisco FTD Software is affected by a Denial of Service DoS vulnerability within the Server Message Block Version 2 SMBv2 and Version 3 SMBv3 protocol implementation due to incorrect header validation. An an unauthenticated, remote attacker can cause the devi...
Microsoft Windows Multiple Vulnerabilities (KB4592468)
This host is missing a critical security update according to Microsoft KB4592468 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4593226)
This host is missing a critical security update according to Microsoft KB4593226 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4592438)
This host is missing a critical security update according to Microsoft KB4592438 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4592464)
This host is missing a critical security update according to Microsoft KB4592464 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4592471)
This host is missing a critical security update according to Microsoft KB4592471 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4592446)
This host is missing a critical security update according to Microsoft KB4592446 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4592484)
This host is missing a critical security update according to Microsoft KB4592484 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4592449)
This host is missing a critical security update according to Microsoft KB4592449 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows SMB Server Information Disclosure (CVE-2020-17140)
An information disclosure vulnerability has been reported in the SMBv2 component of Microsoft Windows SMB server. The vulnerability is due to improper handling of SMB2SETINFO messages. A remote, authenticated attacker can exploit this vulnerability by sending crafted SMBv2 messages to the target...
SMBv2 Symlink to Local File Vulnerability
SMBv2 supports symlinks on remote file systems by returning a special status code STATUSSTOPPEDONSYMLINK when a symlink is encountered on the remote share. It also returns a symlink reparse data buffer to be processed to determine where to redirect the request. While this is supported functionali...