lisenMiller

2024年1月17日

PHP LFI/RFI Vulnerability attack bypassing remote URL inclusion restriction

摘要： File Inclusion vulnerability In the PHP Configuration,"allow_url_include" wrapper by-default set to "Off" which instruct PHP not ot load remote HTTP o 阅读全文

posted @ 2024-01-17 22:42 lisenMiller 阅读(2) 评论(0) 推荐(0) 编辑

Hackthebox aero windows medium

摘要： ThemeBleed exploit Windows run the Theme.exe which occupy the 445 port.We need to open the services interface and stop the service. 1.Generate the The 阅读全文

posted @ 2024-01-17 11:22 lisenMiller 阅读(17) 评论(0) 推荐(0) 编辑

2024年1月15日

hackthebox outdated windows medium

摘要： CONNECT between windows and linux Bloodhound Collection Grab the latest copy of SharpHound.exe from the Bloodhound repo,upload it to Outdated,working 阅读全文

posted @ 2024-01-15 11:37 lisenMiller 阅读(10) 评论(0) 推荐(0) 编辑

2024年1月10日

Pentest

摘要：碰瓷类型 X-Frame-Options 风险名称点击劫持：X-Frame-Options响应头丢失风险级别中风险风险描述返回的响应头信息中没有包含x-frame-options头信息设置，点击劫持(ClickJacking)允许攻击者使用一个透明的iframe，覆盖在一个网页上，然后诱使阅读全文

posted @ 2024-01-10 11:43 lisenMiller 阅读(17) 评论(0) 推荐(0) 编辑

2024年1月9日

Windows Remote Shadow Credentials

摘要： PyWhisker If we use pyWhisker,we need to have credential. With creds,I can try to remotely run PyWhisker.It fails: python3 /opt/pywhisker/pywisker.py 阅读全文

posted @ 2024-01-09 14:49 lisenMiller 阅读(19) 评论(0) 推荐(0) 编辑

Windows Escalate Privilege HiveNightmare/SeriousSAM

摘要： Briefly Microsoft ensure that a new local escalate loophole. This loophole allow low permission user access the system file of Windows. The user which 阅读全文

posted @ 2024-01-09 11:51 lisenMiller 阅读(13) 评论(0) 推荐(0) 编辑

WSUS EXPLOIT

摘要： WSUS Introduction WSUS is a Microsoft solution for administrators to deploy Microsoft product updates and patches across an environment in a scalable 阅读全文

posted @ 2024-01-09 11:12 lisenMiller 阅读(5) 评论(0) 推荐(0) 编辑

2024年1月2日

hackthebox escape medium windows

摘要： RECON TLS certificate openssl s_client -showcerts -connect 10.10.11.202:3269 | openssl x509 -noout -text- "openssl s_client" initiates an SSL/TLS conn 阅读全文

posted @ 2024-01-02 09:05 lisenMiller 阅读(4) 评论(0) 推荐(0) 编辑

2023年12月29日

WINDOWS ESC1 escalate privilege

摘要： ESC1 utilization conditions: ESC1 needs to meet following requirements to use successfully 1.Have permission to accquire certificate 2.the value of pk 阅读全文

posted @ 2023-12-29 11:45 lisenMiller 阅读(18) 评论(0) 推荐(0) 编辑

Windows ESC2 escalate privilege

摘要： BRIEF ADCS（Active Directory certificate service).There are a lot enterpirse CA set up to issue certificates using certificate template definitions,whi 阅读全文

posted @ 2023-12-29 10:41 lisenMiller 阅读(6) 评论(0) 推荐(0) 编辑

公告