#漏洞 日产聆风电动汽车(Leaf EV) 2018款本地拒绝服务漏洞
https://wwws.nightwatchcybersecurity.com/2021/03/14/local-denial-of-service-in-nissan-leaf-ev-2018-head-unit-display/
https://wwws.nightwatchcybersecurity.com/2021/03/14/local-denial-of-service-in-nissan-leaf-ev-2018-head-unit-display/
Nightwatch Cybersecurity
Local Denial of Service in Nissan Leaf EV (2018) Head Unit Display (CVE-2021-1000008)
Summary The head unit display in the Nissan Leaf electric vehicle (EV) has a local denial of service vulnerability that can be used to lock up the screen. Once locked, the car remains drivable but …
#漏洞 exchange_proxylogon_rce.rb
https://github.com/rapid7/metasploit-framework/blob/e5c76bfe13acddc4220d7735fdc3434d9c64736e/modules/exploits/windows/http/exchange_proxylogon_rce.rb
https://github.com/rapid7/metasploit-framework/blob/e5c76bfe13acddc4220d7735fdc3434d9c64736e/modules/exploits/windows/http/exchange_proxylogon_rce.rb
GitHub
metasploit-framework/modules/exploits/windows/http/exchange_proxylogon_rce.rb at e5c76bfe13acddc4220d7735fdc3434d9c64736e · rapid7/metasploit…
Metasploit Framework. Contribute to rapid7/metasploit-framework development by creating an account on GitHub.
#bountytip Windows & Active Directory Exploitation Cheat Sheet and Command Reference
https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/
https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/
Cas van Cooten
Windows & Active Directory Exploitation Cheat Sheet and Command Reference
Last update: November 3rd, 2021
Updated November 3rd, 2021: Included several fixes and actualized some techniques. Changes made to the Defender evasion, RBCD, Domain Enumeration, Rubeus, and Mimikatz sections. Fixed some whoopsies as well 🙃.
Updated June…
Updated November 3rd, 2021: Included several fixes and actualized some techniques. Changes made to the Defender evasion, RBCD, Domain Enumeration, Rubeus, and Mimikatz sections. Fixed some whoopsies as well 🙃.
Updated June…
#漏洞 VoIPmonitor advisories: buffer overflow leading to RCE + XSS vulnerabilities
https://www.rtcsec.com/post/2021/03/voipmonitor-advisories-buffer-overflow-leading-to-rce-xss-vulnerabilities/
https://www.rtcsec.com/post/2021/03/voipmonitor-advisories-buffer-overflow-leading-to-rce-xss-vulnerabilities/
#工具 Lending a hand to the community – Covenant v0.7 Updates
https://research.nccgroup.com/2021/03/16/lending-a-hand-to-the-community-covenant-v0-7-updates/
https://research.nccgroup.com/2021/03/16/lending-a-hand-to-the-community-covenant-v0-7-updates/
NCC Group Research Blog
Lending a hand to the community – Covenant v0.7 Updates
Introduction Covenant [1] is an open source .NET command and control framework to support Red Team operations, similar in many ways to the well-known Cobalt Strike threat emulation software. Covena…