NEW BOT Телеграм, страница

whitelist_bypass_server

This module is designed to be a platform to test an endpoints application whitelisting effectiveness by providing bypasses to solutions such as software restriction policies and applocker.

https://github.com/rapid7/metasploit-framework/pull/8783

@WindowsHackingLibrary

GitHub

Add whitelist_bypass_server module by NickTyrer · Pull Request #8783 · rapid7/metasploit-framework

Intro
This module is designed to be a platform to test an endpoints application whitelisting effectiveness by providing bypasses to solutions such as software restriction policies and applocker.
T...

312 viewsJonhnathan Jonhnathan Jonhnathan, edited 22:53

w0rk3r's Windows Hacking Library

Clientside Exploitation - Tricks of the Trade 0x01 - Sharpshooter + SquibblyTwo

https://0x00sec.org/t/clientside-exploitation-tricks-of-the-trade-0x01-sharpshooter-squibblytwo/8178

@WindowsHackingLibrary

0x00sec - The Home of the Hacker

Clientside Exploitation - Tricks of the Trade 0x01 - Sharpshooter + SquibblyTwo

Clientside Exploitation - Tricks of the Trade 0x01 - Sharpshooter + SquibblyTwo Hi! I hope you’re well, today I am going to show you something that is common knowledge in the red teaming community, people use this kind of thing every day without thinking…

359 viewsJonhnathan Jonhnathan Jonhnathan, 02:03

w0rk3r's Windows Hacking Library

Task Scheduler ALPC exploit (unpatched) && PoC by SandboxEscaper

https://github.com/SandboxEscaper/randomrepo/blob/master/PoC-LPE.rar

@WindowsHackingLibrary

294 viewsJonhnathan Jonhnathan Jonhnathan, 15:17

w0rk3r's Windows Hacking Library

Remote NTLM relaying through meterpreter on Windows port 445

https://diablohorn.com/2018/08/25/remote-ntlm-relaying-through-meterpreter-on-windows-port-445

@WindowsHackingLibrary

DiabloHorn

Remote NTLM relaying through meterpreter on Windows port 445

The hijacking of port 445 to perform relay attacks or hash capturing attacks has been a recurring topic for a while now. When you infect a target with meterpreter, how do you listen on port 445? A …

357 viewsJonhnathan Jonhnathan Jonhnathan, 15:22

w0rk3r's Windows Hacking Library

Microsoft.Workflow.Compiler.exe, Veil, and Cobalt Strike

https://www.fortynorthsecurity.com/microsoft-workflow-compiler-exe-veil-and-cobalt-strike

@WindowsHackingLibrary

363 viewsJonhnathan Jonhnathan Jonhnathan, 15:48

w0rk3r's Windows Hacking Library

Bypassing Workflows Protection Mechanisms - Remote Code Execution on SharePoint

https://www.nccgroup.trust/uk/our-research/technical-advisory-bypassing-workflows-protection-mechanisms-remote-code-execution-on-sharepoint

@WindowsHackingLibrary

412 viewsJonhnathan Jonhnathan Jonhnathan, 12:17

w0rk3r's Windows Hacking Library

Having Fun with ActiveX Controls in Microsoft Word

https://www.blackhillsinfosec.com/having-fun-with-activex-controls-in-microsoft-word

@WindowsHackingLibrary

Black Hills Information Security

Having Fun with ActiveX Controls in Microsoft Word - Black Hills Information Security

Marcello Salvati// During Red Team and penetration tests, it’s always important and valuable to test assumptions. One major assumption I hear from Pentesters, Red teamers and clients alike is that […]

320 viewsJonhnathan Jonhnathan Jonhnathan, 13:23

w0rk3r's Windows Hacking Library

Invoke-AtomicTest - Automating MITRE ATT&CK with Atomic Red Team

http://subt0x11.blogspot.com/2018/08/invoke-atomictest-automating-mitre-att.html

@WindowsHackingLibrary

557 viewsJonhnathan Jonhnathan Jonhnathan, 19:34

w0rk3r's Windows Hacking Library

AppLocker Bypass - CMSTP

https://pentestlab.blog/2018/05/10/applocker-bypass-cmstp

@WindowsHackingLibrary

Penetration Testing Lab

AppLocker Bypass – CMSTP

CMSTP is a binary which is associated with the Microsoft Connection Manager Profile Installer. It accepts INF files which can be weaponised with malicious commands in order to execute arbitrary cod…

302 viewsJonhnathan Jonhnathan Jonhnathan, 23:28

w0rk3r's Windows Hacking Library

Persistence using AdminSDHolder and SDProp

https://blog.stealthbits.com/persistence-using-adminsdholder-and-sdprop

@WindowsHackingLibrary

Netwrix

How Adversaries Achieve Persistence using AdminSDHolder and SDProp

Learn how to protect against AdminSDHolder abuse.

362 viewsJonhnathan Jonhnathan Jonhnathan, 23:57

w0rk3r's Windows Hacking Library

Red Teaming Microsoft: Part 1 – Active Directory Leaks via Azure

https://www.blackhillsinfosec.com/red-teaming-microsoft-part-1-active-directory-leaks-via-azure

@WindowsHackingLibrary

Black Hills Information Security, Inc.

Red Teaming Microsoft: Part 1 - Active Directory Leaks via Azure - Black Hills Information Security, Inc.

Mike Felch // With so many Microsoft technologies, services, integrations, applications, and configurations it can create a great deal of difficulty just to manage everything. Now imagine trying to secure […]

359 viewsJonhnathan Jonhnathan Jonhnathan, 12:25

w0rk3r's Windows Hacking Library

Walk-through Mimikatz sekurlsa module

https://jetsecurity.github.io/post/mimikatz/walk-through_sekurlsa

@WindowsHackingLibrary

309 viewsJonhnathan Jonhnathan Jonhnathan, 14:02

w0rk3r's Windows Hacking Library

windows-privesc-check - Standalone Executable to Check for Simple Privilege Escalation Vectors on Windows Systems

https://github.com/pentestmonkey/windows-privesc-check

@FromZer0toHero

GitHub

GitHub - pentestmonkey/windows-privesc-check: Standalone Executable to Check for Simple Privilege Escalation Vectors on Windows…

Standalone Executable to Check for Simple Privilege Escalation Vectors on Windows Systems - pentestmonkey/windows-privesc-check

340 viewsJonhnathan Jonhnathan Jonhnathan, 14:21

w0rk3r's Windows Hacking Library

Understanding how DLL Hijacking works

https://astr0baby.wordpress.com/2018/09/08/understanding-how-dll-hijacking-works

@WindowsHackingLibrary

Astr0baby's not so random thoughts _____ rand() % 100;

Understanding how DLL Hijacking works

It is vital to understand how these vulnerabilities in fact work (DLL Hijacking from valid Windows PE32 executables) So we will prepare a real world scenario and will use an outdated piece of softw…

348 viewsJonhnathan Jonhnathan Jonhnathan, 20:25

w0rk3r's Windows Hacking Library

Playing with Relayed Credentials

https://www.coresecurity.com/blog/playing-relayed-credentials

@WindowsHackingLibrary