Enable RDP via PowerShell:
Set-ItemProperty 'HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\' -Name "fDenyTSConnections" -Value 0
Set-ItemProperty 'HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp\' -Name "UserAuthentication" -Value 1
Enable-NetFirewallRule -DisplayGroup "Remote Desktop"
🔥1
Mimikatz: If you see (null) in the passwords fields that probably means that the user haven't logged in yet and is using the Default Password that you can grab with lsadump::secrets
This media is not supported in your browser
VIEW IN TELEGRAM
>Me reviewing the source code to find an Account Takeover vulnerability on RegisterUserController.java
😁2
New Whatsapp exploit.
You can send reply messages to other users even though the original message does not exist. You can control the text of both messages.
Have fun while you can:
https://github.com/lichti/whats-spoofing
You can send reply messages to other users even though the original message does not exist. You can control the text of both messages.
Have fun while you can:
https://github.com/lichti/whats-spoofing
👀1
Quirkiest technique I have seen in quite a while. Local Privilege Escalation to SYSTEM using .msi installers.
https://badoption.eu/blog/2023/10/03/MSIFortune.html
https://badoption.eu/blog/2023/10/03/MSIFortune.html
BadOption.eu
MSIFortune - LPE with MSI Installers
MSIFortune - LPE with MSI Installers or MSI - Might (be) stupid idea MSI installers are still pretty alive today. It is a lesser known feature, that a low privileged user can start the repair function of an installation which will run with SYSTEM privileges.…
Media is too big
VIEW IN TELEGRAM
waddya think?
im thinking of showing the piano progress monthly or bimonthly
im thinking of showing the piano progress monthly or bimonthly
This media is not supported in your browser
VIEW IN TELEGRAM
"B-but they are adding privacy to bitcoin"
This media is not supported in your browser
VIEW IN TELEGRAM
Whoever wants music instead of noise, joy instead of pleasure, soul instead of gold, creative work instead of business, passion instead of foolery, finds no home in this trivial world of ours.
❤3