1022 matches found
All Veeam services stop at the same time everyday
Challenge Veeam services stop at the same time every night. Cause Microsoft SCCM has a Health Agent Task scheduled to run over night. The task does not support WMI 3.0. WMI 3.0 is incorporated in Veeam Backup & Replication as a dependency. When the Health Agent clears the WMI repository, it kills...
FreeFloat FTP Server Arbitrary File Upload
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "FreeFloat FTP...
Regarding the recent“mysql vulnerability”of some ideas with some related clutter code-vulnerability warning-the black bar safety net
Recently it seems, and WMI fate, always came across the WMI stuff. Then see the WMI just wanted to tap some knowledge, the right time not in vain. “Vulnerability”is what needless to say, everyone is clear. Here is a personal simple idea with some messy code, welcome to the discussion. First of al...
WinRM WQL Query Runner
This module runs WQL queries against remote WinRM Services. Authentication is required. Currently only works with NTLM auth. Please note in order to use this module, the 'AllowUnencrypted' winrm option must be set. This module requires Metasploit: https://metasploit.com/download Current source:...
Oracle Business Transaction Management FlashTunnelService Remote Code Execution
Exploit for jsp platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' cla...
Oracle BTM FlashTunnelService Remote Code Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Oracle Business Transaction Managemen...
Authenticated WMI Exec via Powershell
This module uses WMI execution to launch a payload instance on a remote machine. In order to avoid AV detection, all execution is performed in memory via psh-net encoded payload. Persistence option can be set to keep the payload looping while a handler is present to receive it. By default the...
Search in LDAP the lastLogonTimestamp of Users.
This script search in LDAP the lastLogonTimestamp of Users. OpenVAS Vulnerability Test $Id: GSHBLDAPUserlastlogon.nasl 7279 2017-09-26 13:40:36Z cfischer $ Search in LDAP the lastLogonTimestamp of Users. Authors: Thomas Rotter Copyright: Copyright c 2010 Greenbone Networks GmbH,...
Quota Violation While Running WMI Queries
Challenge In the Veeam Management Pack for System Center UI, some monitored objects are grey or missing altogether. Standard troubleshooting steps do not help. The SCOM agent log on the Collector server contains the following error: WMI Error: 0x8004106C When you try to use the WBEMTEST utility,...
Create System Characteristics for NIST Windows OVAL Definitions
Create a System Characteristics elements as defined by the OVAL specification for NIST Windows.xml and store it in the Knowledge Base. Note: The created System Characteristics are shown in a separate VT SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a...
Open-FTPD 1.2 Arbitrary File Upload
This module exploits multiple vulnerabilities found in Open&Compact FTP server. The software contains an authentication bypass vulnerability and a arbitrary file upload vulnerability that allows a remote attacker to write arbitrary files to the file system as long as there is at least one user wh...
Open Source Vulnerability Scanner: OpenVAS
OpenVAS is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.The powerful and comprehensive OpenVAS solution is available as Free Software and maintained on a daily basis. Open Source Vulnerability Scanner:...
Performance metrics are not updated when a virtual machine is powered off
Challenge Sometimes SCOM can be showing irrelevant performance graphs for powered off VMs: Cause This is an expected behavior for the current version of nworks. When a virtual machine is powered off, WMI cache still contains outdated data. That is why graphs in SCOM are updated improperly. The...
Get Windows Terminal Server Settings
The script reads the Windows Terminal Server Settings. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Unable to Connect Hyper-V Host via WMI. User credentials cannot be used for local connections.
Challenge When trying to add a Hyper-V host, you receive the error "Unable to connect via WMI. User Credentials cannot be used for local connections." Cause Not all of the prerequisites have been installed when using Veeam Backup & Replication. Solution Before adding Hyper-V servers, check the...
IT-Grundschutz M4.040: Verhinderung der unautorisierten Nutzung des Rechnermikrofons
IT-Grundschutz M4.040: Verhinderung der unautorisierten Nutzung des Rechnermikrofons. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94203 Diese Prüfung bezieht sich a...
BroadWin Webaccess SCADAHMI Client - Remote Code Execution
BroadWin Webaccess SCADAHMI Client - Remote Code Execution BroadWin WebAccess SCADA/HMI Remote Code Execution Vulnerability 0day WebAccess is the first fully web browser-based software package for human-machine interfaces HMI, and supervisory control and data acquisition SCADA. bwocxrun.ocx Activ...
BroadWin WebAccess SCADA/HMI Client Remote Code Execution
Exploit for windows platform in category remote exploits BroadWin WebAccess SCADA/HMI Remote Code Execution Vulnerability 0day WebAccess is the first fully web browser-based software package for human-machine interfaces HMI, and supervisory control and data acquisition SCADA. bwocxrun.ocx ActiveX...
BroadWin WebAccess SCADA / HMI Code Execution
BroadWin WebAccess SCADA/HMI Client Remote Code Execution Vulnerability 0day WebAccess is the first fully web browser-based software package for human-machine interfaces HMI, and supervisory control and data acquisition SCADA. bwocxrun.ocx ActiveX component is prone to a remote code execution...
