DanderSpritz_lab

DanderSpritz Lab 목적 DanderSpritz Lab의 목표는 연구자와 방어자가 DanderSpritz - The Equation Group의 사후 침투 도구 세트와 Windows Server 2008 도메인 및 클라이언트를 대상으로 완전히 작동하는 버전을 신속하게 구축할 수 있도록 하는 것입니다. Windows 대상에는 DanderSpritz와 그 기능을 조사하는 동안 유용하다고 생각한 몇 가지 리버스 엔지니어링 도구가 포함되어 있습니다. DanderSpritz Lab에 대한 자세한 내용은 여기서 읽어보세요:...

CVE-2020-0796

CVE-2020-0796 SMBv3 RCE vulnerability in SMBv3 windows 10 is vulnerable Windows 2008 Not vulnerable 检测脚本...

ms09-050-CVE-2009-3103-exploit

MS09-050 SMBv2 利用包装器 MS09-050 CVE-2009-3103 漏洞利用的一行设置。无需折腾，无需调试，直接生效。 为什么？ 大多数流传的 MS09-050 脚本需要手动注入 shellcode，与处理程序存在时序问题，或者干脆无法运行。本包装器： 生成带正确参数的 shellcode 自动构建漏洞利用代码 创建可直接使用的 Metasploit 处理程序 精确告知需要运行的命令 专为 OSCP 备考打造，时间至关重要。 目标 漏洞 : MS09-050 / CVE-2009-3103 影响范围 : Windows Vista SP1/SP2, Windows...

Explotacion-RCE-Pentesting-BlueKeep-CVE-2019-0708-

制御された環境における BlueKeep CVE-2019-0708 脆弱性の悪用 Windows Server 2008 R2 の RDP サービスにおける BlueKeep CVE-2019-0708 脆弱性の悪用中の分析、実行、および問題解決に焦点を当てた学術プロジェクトであり、Instituto Profesional Los Leones のサイバーセキュリティ科目のために開発されました。 目的 仮想化環境におけるペネトレーションテストの完全なフローを、Nmap による初期偵察から、Metasploit/Meterpreter...

KB5061195: Windows Server 2008 R2 OOB Security Update (May 2025) (CVE-2025-32709)

The remote Windows host is missing a security update and is therefore affected by an elevation of privilege vulnerability: - Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CVE-2025-32709 Note that Nessus has n...

KB5061197: Windows Server 2008 OOB Security Update (May 2025) (CVE-2025-32709)

The remote Windows host is missing a security update and is therefore affected by an elevation of privilege vulnerability: - Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CVE-2025-32709 Note that Nessus has n...

comp5003-sweeny-pentest

COMP5003: Sweeny Barbers Penetration Test Full ethical hackin...

January 13, 2026—KB5073697 (Monthly Rollup)

None None...

January 13, 2026—KB5073700 (Security-only update)

None None...

Microsoft Windows Local Security Authority Subsystem Service 代码问题漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...

Microsoft HTTP.sys 访问控制错误漏洞

Microsoft HTTP.sys is an HTTP application protocol from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft HTTP.sys. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version 21H2 for...

Microsoft Windows Network Driver Interface Specification 缓冲区错误漏洞

The Microsoft Windows Network Driver Interface Specification is one of the core components of a Windows network architecture from Microsoft Corporation. A buffer error vulnerability exists in the Microsoft Windows Network Driver Interface Specification. An attacker could exploit this vulnerabilit...

December 18, 2025—KB5074979 (Monthly Rollup) Out-of-band

None None...

December 9, 2025—KB5071507 (Security-only update)

None None...

December 9, 2025—KB5071504 (Monthly Rollup)

None None...

December 9, 2025—KB5071506 (Security-only update)

None None...

December 9, 2025—KB5071501 (Monthly Rollup)

None None...

November 11, 2025—KB5068909 (Security-only update)

None None...

November 11, 2025—KB5068906 (Monthly Rollup)

None None...

KB5068909: Windows Server 2008 Security Update (November 2025)

The remote Windows host is missing security update 5068909. It is, therefore, affected by multiple vulnerabilities - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-60724, CVE-2025-60715,...