English
English Indonesia Türkçe Deutsch Español Português Pусский Français Italiano Nederlands Polski العربية ไทย Tiếng Việt 繁體中文 简体中文 日本語 한국어

#aspnet_regsqlexe search results

al3x_n3ff's profile picture. Pentester | Maintainer of NetExec
Alex Neff
 @al3x_n3ff
Nov 21

Dumping juicy secrets from SAM/LSA is always nice right? I've added an implementation for the --sam and --lsa flags to the MSSQL protocol of NetExec🚀 No need for manual registry hive extraction anymore!

al3x_n3ff's tweet image. Dumping juicy secrets from SAM/LSA is always nice right? I've added an implementation for the --sam and --lsa flags to the MSSQL protocol of NetExec🚀 No need for manual registry hive extraction anymore!
9
65
313
91
12K
mugh33ra's profile picture. Junior Bug 🐛Hunter | https://t.co/M21YDyxjK3 | LinkedIn:https://t.co/zR5347b1zi
A.Mugh33ra🇵🇰❤️🇵🇸
 @mugh33ra
Oct 24

Never judge a book by its cover - or a website by its default IIS page! 😄 Default IIS page → Sql Injection 🔥 Want the full writeup? Follow me & stay tuned! 👇 mugh33ra.medium.com #BugBounty #SQLinjection #WebSecurity #hackerone #idor #sqlinjection #bugbountytip #xss

mugh33ra's tweet image. Never judge a book by its cover - or a website by its default IIS page! 😄 Default IIS page → Sql Injection 🔥 Want the full writeup? Follow me & stay tuned! 👇 mugh33ra.medium.com #BugBounty #SQLinjection #WebSecurity #hackerone #idor #sqlinjection #bugbountytip #xss
mugh33ra's tweet image. Never judge a book by its cover - or a website by its default IIS page! 😄 Default IIS page → Sql Injection 🔥 Want the full writeup? Follow me & stay tuned! 👇 mugh33ra.medium.com #BugBounty #SQLinjection #WebSecurity #hackerone #idor #sqlinjection #bugbountytip #xss
6
32
258
160
11K
mjovanovictech's profile picture. Practical .NET and Software Architecture Tips | Microsoft MVP 📰 The .NET Weekly: https://t.co/AOaa2Lvno7 ▶️ YouTube: https://t.co/3anEBSnzZs
Milan Jovanović
@mjovanovictech
Dec 7

Don't implement your own health checks. But why? You can probably find the health check you need in AspNetCore.Diagnostics.HealthChecks repository. There are checks for many popular services - SQL Server, Postgres, MongoDB, Redis, S3, RabbitMQ... It's just a matter of not…

mjovanovictech's tweet image. Don't implement your own health checks. But why? You can probably find the health check you need in AspNetCore.Diagnostics.HealthChecks repository. There are checks for many popular services - SQL Server, Postgres, MongoDB, Redis, S3, RabbitMQ... It's just a matter of not…
4
33
203
150
11K
codewhitesec's profile picture. Red Teaming. Security Research. Continuous Penetration Testing. Threat Intelligence.
CODE WHITE GmbH
 @codewhitesec
Sep 26, 2023

Exploiting ASP .NET TemplateParser to get RCE in Sitecore (CVE-2023-35813) and SharePoint (CVE-2023-33160) by @mwulftange in two parts: part 1 at code-white.com/blog/exploitin… is live now and part 2 will follow in a few days...stay tuned!

0
105
255
60
60K
mertistaken's profile picture. mert tasci, bug bounty hunter, all-time #1 on critical/high submissions https://t.co/djEccIleby
𝚖𝚎𝚛𝚝 🦧
@mertistaken
Apr 12, 2023

March 🔥🔥 congrats to all hunters 👏 P1s: SQLi x3 IDOR x2 RCE x2 Info (session) Leak x1 one of the RCEs: a website was blocking ASPX file uploads. bypassed it by uploading an ASHX file and triggering it to create an ASPX shell on same dir. ASHX shell: gist.github.com/merttasci/8210…

mertistaken's tweet image. March 🔥🔥 congrats to all hunters 👏 P1s: SQLi x3 IDOR x2 RCE x2 Info (session) Leak x1 one of the RCEs: a website was blocking ASPX file uploads. bypassed it by uploading an ASHX file and triggering it to create an ASPX shell on same dir. ASHX shell: gist.github.com/merttasci/8210…
25
46
371
117
49K
vcslab's profile picture. This is the Twitter channel of VCSLab - the research team of Viettel Cyber Security
VCSLab
 @vcslab
Jul 25, 2022

Our teammate @rskvp93 shares a little research on ASPX file handling in IIS server and four related attack vectors. 🔥💪Hope you like this blog.viettelcybersecurity.com/deep-understan…

1
94
231
67
0
richardhicks's profile picture. Richard M. Hicks Consulting. #Microsoft MVP. Remote access and PKI. Entra Private Access, Always On #VPN, #msintune, #CloudPKI. https://t.co/D7tVGpoA6i
Richard Hicks
@richardhicks
Dec 21, 2021

Hey #Windows administrators! If you're still using regedit.exe I'd suggest you have a look at Registry Explorer. Much nicer! Portable executable as well, so nothing to install. Check it out! github.com/zodiacon/RegExp #Microsoft #sysadmin

richardhicks's tweet image. Hey #Windows administrators! If you're still using regedit.exe I'd suggest you have a look at Registry Explorer. Much nicer! Portable executable as well, so nothing to install. Check it out! github.com/zodiacon/RegExp #Microsoft #sysadmin
5
68
243
40
0
ShitSecure's profile picture. Pentesting, scripting, pwning!
S3cur3Th1sSh1t
 @ShitSecure
Jul 5, 2021

Thanks to @cube0x0 for the PrintNightmare C# RCE support via MS-PAR. This also makes RCE via Powershell easy: github.com/S3cur3Th1sSh1t…

ShitSecure's tweet image. Thanks to @cube0x0 for the PrintNightmare C# RCE support via MS-PAR. This also makes RCE via Powershell easy: github.com/S3cur3Th1sSh1t…
ShitSecure's tweet image. Thanks to @cube0x0 for the PrintNightmare C# RCE support via MS-PAR. This also makes RCE via Powershell easy: github.com/S3cur3Th1sSh1t…
2
88
194
19
0
SBousseaden's profile picture. TRADE Tech Lead - Elastic Security Mastodon: @sbousseaden@infosec.exchange
Samir
 @SBousseaden
Jul 12, 2020

regsvr32 with /i arg option (DllInstall) normally should always go with /n option if not then it's suspicious (e.g. regsvr32 /s /i c:\path\a.dll)

SBousseaden's tweet image. regsvr32 with /i arg option (DllInstall) normally should always go with /n option if not then it's suspicious (e.g. regsvr32 /s /i c:\path\a.dll)
SBousseaden's tweet image. regsvr32 with /i arg option (DllInstall) normally should always go with /n option if not then it's suspicious (e.g. regsvr32 /s /i c:\path\a.dll)
SBousseaden's tweet image. regsvr32 with /i arg option (DllInstall) normally should always go with /n option if not then it's suspicious (e.g. regsvr32 /s /i c:\path\a.dll)
2
66
193
31
0
migueldeicaza's profile picture. Fun Stack Vibing. Started Xamarin, Mono, Gnome; was MSFT/.NET/Xamarin/Mono/VSMac/AI https://t.co/QkbDDWMXRf @migueldeicaza.bsky.social
Miguel de Icaza ᯅ🍉
@migueldeicaza
Jun 14, 2020

.NET executables and libraries are encoded as custom and tiny, compressed relational SQL database. This article makes the case that SQL could be used for this sort of things in the future: sqlite.org/appfileformat.…

15
62
274
56
0
CyberRaiju's profile picture. An Aussie who does cyber things | Sr. Threat Hunting Manager @HuntressLabs | Former Principal @CrowdStrike and HuntressLabs
Jai Minton
 @CyberRaiju
Apr 18, 2020

Knowing what is normal will help you to find abnormal. Example; All of the below processes require assembly or a specified DLL (take note of extensions) when invoking: regsvcs regasm rundll32 regsvr32 Yet this doesn't happen if they're just being used to inject or hollow into

CyberRaiju's tweet image. Knowing what is normal will help you to find abnormal. Example; All of the below processes require assembly or a specified DLL (take note of extensions) when invoking: regsvcs regasm rundll32 regsvr32 Yet this doesn't happen if they're just being used to inject or hollow into
CyberRaiju's tweet image. Knowing what is normal will help you to find abnormal. Example; All of the below processes require assembly or a specified DLL (take note of extensions) when invoking: regsvcs regasm rundll32 regsvr32 Yet this doesn't happen if they're just being used to inject or hollow into
CyberRaiju's tweet image. Knowing what is normal will help you to find abnormal. Example; All of the below processes require assembly or a specified DLL (take note of extensions) when invoking: regsvcs regasm rundll32 regsvr32 Yet this doesn't happen if they're just being used to inject or hollow into
CyberRaiju's tweet image. Knowing what is normal will help you to find abnormal. Example; All of the below processes require assembly or a specified DLL (take note of extensions) when invoking: regsvcs regasm rundll32 regsvr32 Yet this doesn't happen if they're just being used to inject or hollow into
3
72
191
36
0
HusseiN98D's profile picture. Entrepreneur, Hacker 🇱🇧🇨🇮 @WebImmunify 21th/270000 BugCrowd Hacking Platform
Hussein Daher
@HusseiN98D
Nov 12, 2019

Time for another #BugBountyTip : While testing file upload forms on IIS7 servers, you can get RCE by uploading ".cer" files if ".asp" extension is blacklisted. This already let me to multiple RCEs in #bugbounty and #pentest projects. #bugbountytips RT if you love! More coming 👁️

3
198
547
144
0
SBousseaden's profile picture. TRADE Tech Lead - Elastic Security Mastodon: @sbousseaden@infosec.exchange
Samir
 @SBousseaden
Oct 14, 2019

don't forget those 2 reg persistence/exec within lsass. would be cool to hunt for the same on VT or similar. Couldn't found a match on prod env good for #threathunting refs: redplait.blogspot.com/2015/02/lsasrv… blog.xpnsec.com/exploring-mimi…

SBousseaden's tweet image. don't forget those 2 reg persistence/exec within lsass. would be cool to hunt for the same on VT or similar. Couldn't found a match on prod env good for #threathunting refs: redplait.blogspot.com/2015/02/lsasrv… blog.xpnsec.com/exploring-mimi…
2
63
183
27
0
No results for "#aspnet_regsqlexe"
No results for "#aspnet_regsqlexe"

Something went wrong.


Something went wrong.


United States Trends