Forwarded from CyberSecurityTechnologies
#reversing
#Offensive_security
#Red_Team_Tactics
Yet Another DCOM Object for Command Execution
Part 1 - ShellWindows, ShellBrowserWindow and MMK20
Part 2 - Control Panel Items as Attack Surfaces
#Offensive_security
#Red_Team_Tactics
Yet Another DCOM Object for Command Execution
Part 1 - ShellWindows, ShellBrowserWindow and MMK20
Part 2 - Control Panel Items as Attack Surfaces
Forwarded from vflame6
С хайпом вокруг php2shell отчеты нессуса с неподдерживаемой/уязвимой версией PHP на каждом вебчике начинают действительно что-то значить 😁️️️️️️
GitHub
GitHub - eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC: Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE…
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes ...
Forwarded from W1R3L355
The Gentlemen: A closer look at a not-so-gentle ransomware-as-a- service operation
https://www.acronis.com/en/tru/posts/the-gentlemen-a-closer-look-at-a-not-so-gentle-ransomware-as-a-service-operation/
https://www.acronis.com/en/tru/posts/the-gentlemen-a-closer-look-at-a-not-so-gentle-ransomware-as-a-service-operation/
Acronis
The Gentlemen: A closer look at a not-so-gentle ransomware-as-a- service operation
The Gentlemen uses a double-extortion model. In addition to encrypting files, the ransomware can exfiltrate data from compromised systems. This puts additional pressure on victims to pay the ransom to restore access to their files and prevent the stolen data…
Forwarded from 1N73LL1G3NC3
CredGuardRuntimeShutdown
Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2)
Blog: https://medium.com/@s12deff/runtime-credential-guard-deactivation-d01cb9eb0062
Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2)
Blog: https://medium.com/@s12deff/runtime-credential-guard-deactivation-d01cb9eb0062