Technology share: how to use Python and PyInstaller to write a Windows malicious code-vulnerability warning-the black bar safety net

Disclaimer: This article is intended to share, not for malicious use! This article mainly shows is through the use of python and PyInstaller to build the malicious software of some poc. ! Known to all, malicious software and more will continued to target of the attack. And this is on windows ther...

MS16-032: Description of the security update for the Windows Secondary Logon Service: March 8, 2016

None None...

MS16-034: Security update for Windows kernel-mode drivers to address elevation of privilege: March 8, 2016

Resolves vulnerabilities in Windows that could allow elevation of privilege if an attacker logs on to the system and runs a specially crafted application.SummaryThis security update resolves vulnerabilities in Microsoft Windows. The vulnerabilities could allow elevation of privilege if an attacke...

Active Directory Honeytoken Tripwire: DCEPT

DCEPT D omain C ontroller E nticing P assword T ripwire is a honeytoken-based tripwire for Microsoft’s Active Directory. Honeytokens are pieces of information intentionally littered on system so they can be discovered by an intruder. In the case of DCEPT, the honeytokens are credentials that woul...

CVE-2016-2521

Untrusted search path vulnerability in the WiresharkApplication class in ui/qt/wiresharkapplication.cpp in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 on Windows allows local users to gain privileges via a Trojan horse riched20.dll.dll file in the current working directory, related to...

MS16-021: Security Update for NPS RADIUS Server to Address Denial of Service (3133043)

The remote Windows host is affected by a denial of service vulnerability in the Network Policy Server NPS due to improper handling of RADIUS authentication requests. An unauthenticated, remote attacker can exploit this, via specially crafted username strings, to cause a denial of service conditio...

CVE-2016-1505

The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrated by /c:/file/ignore...

CVE-2016-0754

cURL before 7.47.0 on Windows allows attackers to write to arbitrary files in the current working directory on a different drive via a colon in a remote file name...

MS16-005: Description of the security update for Windows kernel-mode drivers: January 12, 2016

None None...

AD Computer, Group and Recursive User Membership to Local SQLite DB

This module will gather a list of AD groups, identify the users taking into account recursion and write this to a SQLite database for offline analysis and query using normal SQL syntax. This module requires Metasploit: https://metasploit.com/download Current source:...

MS15-132: Description of the security update for Windows: December 8, 2015

None None...

MS15-128 and MS15-135: Description of the security update for Windows kernel-mode drivers: December 8, 2015

None None...

CVE-2015-5652

CVE-2015-5652 : Untrusted search path vulnerability in Python for Windows (through 3.5.0) allows local privilege escalation via a Trojan horse readline.pyd in the current working directory. Root cause: insecure DLL search path loading of readline.pyd. Impact: arbitrary code execution with the pri...

Microsoft Windows multiple security vulnerabilities

Multiple vulnerabilities in Edge and Internet Explorer, code execution in graphics and journaling, mediascenter, .Net framework, task management, Active Directory, Hyper-V...

Microsoft Windows 10 (Build 10130) - User Mode Font Driver Thread Permissions Privilege Escalation

Source: https://code.google.com/p/google-security-research/issues/detail?id=468 Windows: User Mode Font Driver Thread Permissions EoP Platform: Windows 10 Build 10130 Class: Elevation of Privilege Summary: The host process for the UMFD runs as a normal user but with a heavily restrictive process...

A null pointer vulnerability protection technology to improve the article-vulnerability warning-the black bar safety net

In the null pointer vulnerability protection technology-the primary article, we introduced a null pointer and a null pointer vulnerability concept, in this advanced article describes a null pointer use and the corresponding protection mechanisms. Author: sun Jian slope Directory 1 to improve the...

MS15-080: Description of the security update for Windows: August 11, 2015

None None...

MS15-082: Description of the security update for RDP in Windows: August 11, 2015

None None...

MS15-075: Vulnerabilities in OLE could allow elevation of privilege: July 14, 2015

None None...

SecuritySoftView - Displays the AntiVirus / AntiSpyware / Firewall registered with the security center of Windows

SecuritySoftView is a simple tool that displays the AntiVirus, AntiSpyware, and Firewall programs that are currently installed on your system and registered with the security center of Windows operating system. System Requirements This utility works on any version of Windows, starting from Window...