Machines to practice for OSCP, OSEP and OSWE
https://docs.google.com/spreadsheets/d/1dwSMIAPIam0PuRBkCiDI88pU3yzrqqHkDtBngUHNCw8
https://docs.google.com/spreadsheets/d/1dwSMIAPIam0PuRBkCiDI88pU3yzrqqHkDtBngUHNCw8
Google Docs
NetSecFocus Trophy Room
❤3
This media is not supported in your browser
VIEW IN TELEGRAM
HE SAID IT!!
(Prison Break S04E03 00:09:46)
(Prison Break S04E03 00:09:46)
Enable RDP via PowerShell:
Set-ItemProperty 'HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\' -Name "fDenyTSConnections" -Value 0
Set-ItemProperty 'HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp\' -Name "UserAuthentication" -Value 1
Enable-NetFirewallRule -DisplayGroup "Remote Desktop"
🔥1
Mimikatz: If you see (null) in the passwords fields that probably means that the user haven't logged in yet and is using the Default Password that you can grab with lsadump::secrets
This media is not supported in your browser
VIEW IN TELEGRAM
>Me reviewing the source code to find an Account Takeover vulnerability on RegisterUserController.java
😁2
New Whatsapp exploit.
You can send reply messages to other users even though the original message does not exist. You can control the text of both messages.
Have fun while you can:
https://github.com/lichti/whats-spoofing
You can send reply messages to other users even though the original message does not exist. You can control the text of both messages.
Have fun while you can:
https://github.com/lichti/whats-spoofing
👀1
Quirkiest technique I have seen in quite a while. Local Privilege Escalation to SYSTEM using .msi installers.
https://badoption.eu/blog/2023/10/03/MSIFortune.html
https://badoption.eu/blog/2023/10/03/MSIFortune.html
BadOption.eu
MSIFortune - LPE with MSI Installers
MSIFortune - LPE with MSI Installers or MSI - Might (be) stupid idea MSI installers are still pretty alive today. It is a lesser known feature, that a low privileged user can start the repair function of an installation which will run with SYSTEM privileges.…
Media is too big
VIEW IN TELEGRAM
waddya think?
im thinking of showing the piano progress monthly or bimonthly
im thinking of showing the piano progress monthly or bimonthly