ruler

소개 Ruler는 MAPI/HTTP 또는 RPC/HTTP 프로토콜을 통해 원격으로 Exchange 서버와 상호 작용할 수 있는 도구입니다. 주요 목표는 클라이언트 측 Outlook 기능을 악용하여 원격에서 셸을 획득하는 것입니다. Ruler가 어떻게 구현되었는지, 그리고 MAPI에 대한 배경 정보에 대한 자세한 내용은 블로그 게시물에서 확인할 수 있습니다: Ruler 릴리스 Ruler로 Pass the Hash Outlook 양식 및 셸 Outlook 홈 페이지 – 또 다른 Ruler 벡터 작동 데모: YouTube의 Rule...

ie11_vbscript_exploit

IE11 VBScript 익스플로잇 CVE-2018-8174 & CVE-2019-0768용 익스플로잇 생성기 IE11에서 VBScript 실행을 통한 RCE 전제 조건 Metasploit msfvenom 사용법 python ie11vbscript.py Listener IP Listener Port 지침 1. 이 스크립트를 사용하여 "exploit.html"을 생성하세요. 2. html 파일을 서버에 호스팅하세요. 3. Metasploit에서 windows/meterpreter/reversetcp 핸들러를 설정하세요. 4...

Malicious code in date-uuid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dffbe61370f78deed5bacbc8f6bc46a8a989f03da218643a41b52ed025fa6a Package advertised as a UUIDv7 helper, but on require/import it auto-invokes extractDateISO in bootstrap.js, which reads README.md from process.cwd,...

Cobalt-Strike-Aggressor-Scripts

This repository is an offensive tool for Cobalt Strike Aggressor Scripts. It is a collection of PowerShell scripts that aggregate various UAC bypass methods, including the MS16-032, MS16-135, and WScript bypass attacks. The scripts are designed to be used with the Cobalt Strike framework to perfo...

CVE-2018-8619: Improper Privilege Management

A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, aka "Internet Explorer Remote Code Execution Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 1...

JVN#33382534: AutoCAD vulnerable to arbitrary VBScript execution

AutoCAD provided by Autodesk, Inc. is an application for comuputer-aided design CAD. AutoCAD loads specific FAS files when opening files. AutoCAD contains an issue with the FAS file search path, which may lead to arbitrary VBScript code execution. Impact Arbitrary VBScript code may be executed wi...

Дырка в AOL Instant Messenger

При некоторых условиях на компьютере клиента может быть выполнен Javascript/VBScript...

Modifed images can lead to JavaScript/VBScript execution in AIM

Software Effected: AOL Instant Messenger Versions Effected: 4.1 to current including 4.4 alpha, older versions probably effected Details: AOL Instnat Messenger has the ability to embed images into an instant message. The user sends the graphic to the person they wish to show, and the graphic show...

Microsoft Windows NT 4.0 - DCOM Server

Microsoft Windows NT 4.0 - DCOM Server source: https://www.securityfocus.com/bid/624/info It is possible for a local user to modify how DCOM servers are run, thereby escalating his/her privilege level. The Interactive User has write permissions to the DCOM registry entries. By editing the registr...

Microsoft Windows NT 4.0 - DCOM Server

source: https://www.securityfocus.com/bid/624/info It is possible for a local user to modify how DCOM servers are run, thereby escalating his/her privilege level. The Interactive User has write permissions to the DCOM registry entries. By editing the registry keys associated with DCOM server...