binary_raider's profile picture.

RootAccess

@binary_raider

RootAccess reposted

Have creds to a network? Need help finding sensitive files and passwords? 1) git clone github.com/SpiderLabs/sca… 2) python3 ./scavenger.py smb -t 10.0.0.10 -u administrator -p Password123 -d test.local trustwave.com/en-us/resource…


RootAccess reposted

Short blog and POC code for CVE-2019-1040 (patched last Tuesday). Combining this vulnerability with the SpoolService bug and Kerberos delegation means: any AD user to Domain Admin; RCE on unpatched hosts; possible over Forest trusts. dirkjanm.io/exploiting-CVE… TL;DR: GO PATCH!


RootAccess reposted

Do you want to #exploit misconfigured #Splunk Universal Forwarders (HTTPS/8089)? 💣 I offer you two tools for Remote Code Execution #RCE and Local Privilege Escalation #LPE. Python and C# 😎 📄 clement.notin.org/blog/2019/02/2… 👨‍💻 github.com/cnotin/SplunkW…

cnotin's tweet image. Do you want to #exploit misconfigured #Splunk Universal Forwarders (HTTPS/8089)? 💣

I offer you two tools for Remote Code Execution #RCE and Local Privilege Escalation #LPE. Python and C# 😎

📄 clement.notin.org/blog/2019/02/2…
👨‍💻  github.com/cnotin/SplunkW…

RootAccess reposted

Get a list of IPs connected via #RDP so far PS C:\> Get-WinEvent -Log 'Microsoft-Windows-TerminalServices-LocalSessionManager/Operational' | select -exp Properties | where {$_.Value -like '*.*.*.*' } | sort Value -u #sysadmin #PowerShell #audit #blueteam


RootAccess reposted

Have you checked your PSReadline history lately? Do you know it stores the commands in clear-text and is persistent across reboots? This is on a Domain Controller. #PowerShell #RedTeam

nikhil_mitt's tweet image. Have you checked your PSReadline history lately? Do you know it stores the commands in clear-text and is persistent across reboots? This is on a Domain Controller. #PowerShell #RedTeam

RootAccess reposted

Slides from my #DerbyCon talk "From Workstation to Domain Admin..." are now on ADSecurity.org. Slides: adsecurity.org/?page_id=1352 Talk Video: youtube.com/watch?v=Wdbm2_…

PyroTek3's tweet image. Slides from my #DerbyCon talk "From Workstation to Domain Admin..." are now on ADSecurity.org.

Slides:
adsecurity.org/?page_id=1352

Talk Video: youtube.com/watch?v=Wdbm2_…

Well said :D

If you are a vendor that has a public bug bounty program on BugCrowd or HackerOne, and you require researchers to purchase your products in order to find bugs for you, you suck.



RootAccess reposted

CVE-2018-17182 - PoC New Linux Kernel ( 3.16 - 4.18.8.) - Privilege Escalation #infosec #pentest #vulnerability #exploitDev bugs.chromium.org/p/project-zero…


RootAccess reposted

Blogpost about a new #persistence technique I discovered abusing the Appx/UWP debugger. Technique is not shown by #Autoruns and runs commands at logon of the user. A simple registry key is all that is needed. Enjoy! #RedTeam #DFIR #Pentest #Blogpost oddvar.moe/2018/09/06/per…


RootAccess reposted

Here is my write up on how I discovered and exploited a privilege escalation bug affecting Windows 10, Server 2016, and Visual Studio (CVE-2018-0952): atredis.com/blog/cve-2018-…


RootAccess reposted

This is going to be some great insight into getting a handle on your AD security posture.

This Thursday: @CptJesus and I present, "How To Build Adversary Resilience Into Your Active Directory Environment". Register here: brighttalk.com/webcast/15713/…



RootAccess reposted

Stack Based Buffer Overflows on x64 (Windows) #exploitdev #infosec #pentest nytrosecurity.com/2018/01/24/sta…


RootAccess reposted

Good current overview of Sysmon and the SysmonView 3rd-party log analysis/visualization tool

This article did a better job describing #Sysmon View than I did fwhibbit.es/sysmon-the-big…



RootAccess reposted

This post on Event forwarding was really useful - blogs.technet.microsoft.com/jepayne/2015/1… - Thanks @jepayneMSFT for sharing - Was not aware of NetworkSvc


RootAccess reposted

The updated 1-page Malware Analysis Cheat Sheet is now available, including the latest tools and techniques: zeltser.com/malware-analys…


RootAccess reposted

Jumping Network Segregation with RDP rastamouse.me/2017/08/jumpin… Shout-out to @gentilkiwi for DPAPI magic


United States Trends

Loading...

Something went wrong.


Something went wrong.