scrying

NCC Group Scrying 一款用于收集RDP、Web和VNC截图的全新工具，全部集中在一个地方 此工具仍在开发中，大部分功能可用但尚未完成。 如有错误或功能请求，请提交为GitHub issues 动机 由于Eyewitness最近放弃了RDP支持，目前没有可用的命令行工具来捕获RDP截图。 Nessus仍然可行，但提取图片很麻烦，且导出文件中不包含它们。 我认为这是一个编写更强大工具的好机会。请查看功能列表！ 安装 对于Web截图，scrying当前依赖于安装Chromium或Google Chrome。使用pacman -S chromium或相应操作系统的等价命令安装。...

Towards Optimal Agentic Architectures for Offensive Security Tasks

Agentic security systems increasingly audit live targets with tool-using LLMs, but prior systems fix a single coordination topology, leaving unclear when additional agents help and when they only add cost. We treat topology choice as an empirical systems question. We introduce a controlled...

PT-2026-2733

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A flaw in Windows HTTP.sys related to improper access control can allow an authorized attacker to elevate privileges over a network. This issue can be exploited remotely. The...