goLoL

goLoL goLoL 은 LOLBAS 바이너리와 LOLDrivers 를 모두 지원하는 Windows 호스트 스캐너입니다. 현재 권한 수준에서 실행 가능한 LOLBAS 기술을 MITRE ATT&CK 매핑과 함께 나열하며, 취약하거나 악성인 LOLDrivers 해시 일치 여부를 확인하기 위해 로컬 .sys 파일을 스캔할 수 있습니다. 참고: 이 도구는 OPSEC에 안전하지 않습니다. 작성자: Aaron Kidwell root@kitploit: █████ █████ ░░███ ░░███ ███████ ██████ ░███ █████...

Log4j-Windows-Scanner

Log4j-Windows-Scanner Apache Log4j 라이브러리의 CVE-2021-44228 취약점 | Windows 시스템에서 Log4j 취약점 스캐너입니다. 작동 방식 C 드라이브의 폴더를 따라가며 취약한 log4j 버전을 감지합니다. 취약한 파일을 발견하면 ".TXT" 파일을 출력으로 표시합니다. "log.txt" 파일은 스캔할 수 없습니다. 즉, 권한 문제로 접근할 수 없는 디렉토리의 내용을 읽을 수 없기 때문에 해당 디렉토리를 나열합니다. 이 폴더들을 따라 주십시오. 관리자 권한으로 실행해야 합니다. 다음...

log4j-scanner

log4j-scanner Log4j 2 CVE-2021-44228 취약점 스캐너 Windows OS. 사용 예시 사용법 root@kitploit: .\log4j-scanner.exe 출력 결과는 터미널에 표시됩니다. RMM을 통해 대상 컴퓨터에 배포하고 PowerShell 또는 CMD 프롬프트에서 시작/보고하세요. 소스에서 빌드 root@kitploit: git clone https://github.com/name/log4j-scanner.git cd log4j-scanner/ go get...

Xmlrpc-scanner

QMLRPC Vulnerability Scanner 🚀 Windows-compatible advanced QM...

Adobe InDesign < 12.0.0 (APSB16-43)

The version of Adobe InDesign installed on the remote Windows host is prior to 12.0.0. It is, therefore, affected by a vulnerability as referenced in the APSB16-43 advisory. - Adobe InDesign version 11.4.1 and earlier, Adobe InDesign Server 11.0.0 and earlier have an exploitable memory corruption...

Adobe Premiere Pro < 23.6.9 / 24.0 < 24.6 Multiple Vulnerabilities (APSB24-58)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 23.6.9, 24.6. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-58 advisory. - Premiere Pro versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability th...

Apple iTunes < 12.12.9 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.12.9. It is, therefore, affected by multiple vulnerabilities as referenced in the HT213763 advisory. - A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be...

Adobe InDesign < 18.5.3 / 19.0 < 19.4.0 Multiple Vulnerabilities (APSB24-48)

The version of Adobe InDesign installed on the remote Windows host is prior to 18.5.3, 19.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-48 advisory. - InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a Heap-based Buffer Overflow...

Adobe ColdFusion < 2018.x < 2018u19 / 2021.x < 2021u9 / 2023.x < 2023u3 Multiple Vulnerabilities (APSB23-47)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x update 19, 2021.x update 9, or 2023.x update 3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-47 advisory. - Deserialization of Untrusted Data CWE-502 potentially leading t...

Citrix Storefront Installed (Windows)

Binary data citrixstorefrontwininstalled.nbin...

Adobe Photoshop 22.x < 22.5.8 / 23.x < 23.4.1 Multiple Vulnerabilities (APSB22-35)

The version of Adobe Photoshop installed on the remote Windows host is prior to 22.5.8/23.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-35 advisory. - Adobe Photoshop versions 22.5.7 and earlier and 23.3.2 and earlier are affected by a Use After Free...

Adobe Media Encoder < 14.3 Multiple Vulnerabilities (APSB20-36)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 14.3. It is, therefore, affected by multiple vulnerabilities, as follows: - Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary...

Oracle Java SE 1.7.0_291 / 1.8.0_281 / 1.11.0_10 / 1.15.0_2 Information Disclosure (Windows Jan 2021 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 7 Update 291, 8 Update 281, 11 Update 10, or 15 Update 2. It is, therefore, affected by an information disclosure vulnerability as referenced in the January 2021 CPU advisory. Specifically, an...

QEMU Installed

Binary data qemuinstalledwindows.nbin...

New malware mimics Windows scanner to infect PCs with ransomware

By Sudais This trojan horse was discovered which pretends to be a Windows scanner by Microsoft but in reality, it is everything evil but so. This is a post from HackRead.com Read the original post: New malware mimics Windows scanner to infect PCs with ransomware...

Symantec Endpoint Protection Client 12.1.x < 12.1.6 MP6 Multiple DoS (SYM16-015)

The version of Symantec Endpoint Protection SEP Client installed on the remote Windows host is 12.1.x prior to 12.1.6 MP6 or else 12.1.6 MP5 without a hotfix. It is, therefore, affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists in the decomposer...

Microsoft Windows Current Sessions

Binary data microsoftwindowscurrentsessions.nbin...

Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 10.1.16, 11.0.13, 2015.006.30094, or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before...

MS15-084: Vulnerabilities in XML Core Services Could Allow Information Disclosure (3080129)

The remote Windows host contains a version of Microsoft XML Core Services MSXML that is affected by multiple information disclosure vulnerabilities : - An information disclosure vulnerability exists in XML Core Services MSXML due to the use of Secure Sockets Layer SSL 2.0. A man-in-the-middle...

Google Chrome < 43.0.2357.134 Multiple RCE Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 43.0.2357.134. It is, therefore, affected by multiple remote code execution vulnerabilities in the bundled version of Adobe Flash : - A use-after-free error exists in the opaqueBackground class in the ActionScript 3 AS3...