Watson - Enumerate Missing KBs And Suggest Exploits For Useful Privilege Escalation Vulnerabilities
http://www.kitploit.com/2021/04/watson-enumerate-missing-kbs-and.html

Watson is a .NET tool designed to enumerate missing KBs and suggest exploits (https://www.kitploit.com/search/label/Exploits) for Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) vulnerabilities.
Supported Versions
Windows 10 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004 Server 2016 & 2019
Usage
C:\> Watson.exe
__ __ _
/ / /\ \ \__ _| |_ ___ ___ _ __
\ \/ \/ / _` | __/ __|/ _ \| '_ \
\ /\ / (_| | |_\__ \ (_) | | | |
\/ \/ \__,_|\__|___/\___/|_| |_|

v2.0

@_RastaMouse

[*] OS Build Number: 14393
[*] Enumerating installed KBs...

[!] CVE-2019-0836 : VULNERABLE
[>] https://exploit-db.com/exploits/46718
[>] https://decoder.cloud/2019/04/29/combinig-luafv-postluafvpostreadwrite-race-condition-pe-with-diaghub-collector-exploit-from-standard-user-to-system/

[!] CVE-2019-0841 : VULNERABLE
[>] https://github.com/rogue-kdc/CVE-2019-0841
[>] https://rastamouse.me/tags/cve-2019-0841/

[!] CVE-2019-1064 : VULNERABLE
[>] https://www.rythmstick.net/posts/cve-2019-1064/

[!] CVE-2019-1130 : VULNERABLE
[>] https://github.com/S3cur3Th1sSh1t/SharpByeBear

[!] CVE- 2019-1253 : VULNERABLE
[>] https://github.com/padovah4ck/CVE-2019-1253

[!] CVE-2019-1315 : VULNERABLE
[>] https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html

[*] Finished. Found 6 potential vulnerabilities.

Issues
I try to update Watson after every Patch Tuesday, but for potential false positives check the latest supersedence information in the Windows Update Catalog (https://www.catalog.update.microsoft.com/Home.aspx). If you still think there's an error, raise an Issue with the Bug label. If there's a particular vulnerability (https://www.kitploit.com/search/label/Vulnerability) that you want to see in Watson that's not already included, raise an Issue with the Vulnerability Request label and include the CVE number. If you know of a good exploit for any of the vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) in Watson, raise an Issue with the Exploit Suggestion label and provide a URL to the exploit.

Download Watson (https://github.com/rasta-mouse/Watson)

Hacking on Medium
SoSimple Write-up

https://cdn-images-1.medium.com/max/1919/1*afqOplpqTkMT1SdNZlY7RA.png
hello and welcome back to another write up on vulnerable machine

Continue reading on Medium »

Hacking on Medium
Discovering Basic Reflected XSS

https://cdn-images-1.medium.com/max/624/1*9yZwHI3I-Sx_Mfw0ctQGEg.png
OWASP

Continue reading on Medium »

Hacking on Medium
Preventing Hacking by gpt-3…..

https://cdn-images-1.medium.com/max/1024/0*0YuEUsPB-_Zs_5xg.jpg
Hacking and how to prevent it Hacking is a process or method used to enter a computer system without permission. In simple words, it is a…

Continue reading on Medium »

Hacking on Medium
حيل الرومانسية في أعلى مستوياتها على الإطلاق: إليك ما تحتاج إلى معرفته

حذرت لجنة التجارة الفيدرالية الأمريكية (FTC) ، وهي هيئة مراقبة حماية المستهلك الأمريكية الرسمية ، مؤخرًا من أن المحتالين الرومانسيين يجنون…

Continue reading on Medium »

Hacking on Medium
Use “Cane & Able” to capture the user credentials

https://cdn-images-1.medium.com/max/800/1*8ZgYPd3uL-Vzboe4vVBc8Q.jpeg
This Windows-only password recovery program can perform a wide range of tasks.

Continue reading on Medium »

Watson - Enumerate Missing KBs And Suggest Exploits For Useful Privilege Escalation Vulnerabilities

Watson is a .NET tool designed to enumerate missing KBs and suggest exploits for Privilege Escalation vulnerabilities.Supported Versions Windows 10 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004 Server 2016 & 2019 Usage C:\> Watson.exe _ _ _ / / /\ \ \_ _| |_ _ _ _ _ \ \/ \/ / _` | _/ _|/ _ \| '_ \ \ /\ / (_| | |_\_ \ () | | | | \/ \/ \\,_|\_|_/\_/|_| |_| v2.0 @_RastaMouse \* OS Build Number: 14393 \* Enumerating installed KBs... ! CVE-2019-0836 : VULNERABLE > https://exploit-db.com/exploits/46718 > https://decoder.cloud/2019/04/29/combinig-luafv-postluafvpostreadwrite-race-condition-pe-with-diaghub-collector-exploit-from-standard-user-to-system/ ! CVE-2019-0841 : VULNERABLE > https://github.com/rogue-kdc/CVE-2019-0841 > https://rastamouse.me/tags/cve-2019-0841/ ! CVE-2019-1064 : VULNERABLE > https://www.rythmstick.net/posts/cve-2019-1064/ ! CVE-2019-1130 : VULNERABLE > https://github.com/S3cur3Th1sSh1t/SharpByeBear ! CVE- 2019-1253 : VULNERABLE > https://github.com/padovah4ck/CVE-2019-1253 ! CVE-2019-1315 : VULNERABLE > https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html \* Finished. Found 6 potential vulnerabilities. Issues I try to update Watson after every Patch Tuesday, but for potential false positives check the latest supersedence information in the Windows Update Catalog. If you still think there's an error, raise an Issue with the Bug label. If there's a particular vulnerability that you want to see in Watson that's not already included, raise an Issue with the Vulnerability Request label and include the CVE number. If you know of a good exploit for any of the vulnerabilities in Watson, raise an Issue with the Exploit Suggestion label and provide a URL to the exploit. Download Watson
Read more...

KitPloit - PenTest Tools!
Watson - Enumerate Missing KBs And Suggest Exploits For Useful Privilege Escalation Vulnerabilities

https://1.bp.blogspot.com/-of7mBTen-mk/YGKeTq2QQiI/AAAAAAAAVwA/-paRxYr-yvES1HxqVwS_uS4YoNPRqUAfwCNcBGAsYHQ/w640-h316/Privilege%2BEscalation.png
Watson is a .NET tool designed to enumerate missing KBs and suggest exploits for Privilege Escalation vulnerabilities.
Supported Versions

* Windows 10 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004
* Server 2016 & 2019

Usage
C:\> Watson.exe
__ __ _
/ / /\ \ \__ _| |_ ___ ___ _ __
\ \/ \/ / _` | __/ __|/ _ \| '_ \
\ /\ / (_| | |_\__ \ (_) | | | |
\/ \/ \__,_|\__|___/\___/|_| |_|

v2.0

@_RastaMouse

[*] OS Build Number: 14393
[*] Enumerating installed KBs...

[!] CVE-2019-0836 : VULNERABLE
[>] https://exploit-db.com/exploits/46718
[>] https://decoder.cloud/2019/04/29/combinig-luafv-postluafvpostreadwrite-race-condition-pe-with-diaghub-collector-exploit-from-standard-user-to-system/

[!] CVE-2019-0841 : VULNERABLE
[>] https://github.com/rogue-kdc/CVE-2019-0841
[>] https://rastamouse.me/tags/cve-2019-0841/

[!] CVE-2019-1064 : VULNERABLE
[>] https://www.rythmstick.net/posts/cve-2019-1064/

[!] CVE-2019-1130 : VULNERABLE
[>] https://github.com/S3cur3Th1sSh1t/SharpByeBear

[!] CVE- 2019-1253 : VULNERABLE
[>] https://github.com/padovah4ck/CVE-2019-1253

[!] CVE-2019-1315 : VULNERABLE
[>] https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html

[*] Finished. Found 6 potential vulnerabilities.

Issues

*
I try to update Watson after every Patch Tuesday, but for potential false positives check the latest supersedence information in the Windows Update Catalog. If you still think there's an error, raise an Issue with the Buglabel.

*
If there's a particular vulnerability that you want to see in Watson that's not already included, raise an Issue with the Vulnerability Requestlabel and include the CVE number.

*
If you know of a good exploit for any of the vulnerabilities in Watson, raise an Issue with the Exploit Suggestionlabel and provide a URL to the exploit.
Download Watson

Deep Web
Jeremie Dubois-Lacoste is the reason why you should invest in M.o.n.e.r.o

Jeremie Dubois-Lacoste who is known as binaryfate believes M.o.n.e.r.o crypto coin is the best project of current. binaryfate is a high-IQ businessman with a PhD in AI and believes it has great potential of growing in price and is a good investment option of right now. invest in M.o.n.e.r.o coin today for certain profit and join the community.

submitted by /u/savingguernsey42
[link] [comments]

Hacking on Medium
Create backdoors with Veil-Evasion

https://cdn-images-1.medium.com/max/2154/1*swr1bFBREY--z4Exmpfs6Q.jpeg
Veil-Evasion is an instrument to produce payload executables that sidestep regular antivirus solutions. Veil-Evasion’s code can be found…

Continue reading on InfoSec Write-ups »