antonioCoco

The agent webshell has a bug that converts the returned decrypted blob data into a string and then converts it back to an array of bytes. While it seems there...

On windows server prior to 2019 version the JuicyPotato trigger (the one not requiring an external oxid resolution) does not work anymore. It seems that at certain point in time...

The RPC capture server in charge to grab the ntlmv2 response is using the hardcoded value 268 to hold the data. While there are no particular bugs found on the...

The current implementation of EnableAllPrivileges() enable a list of hardcoded privileges by their names. The code should be refactored to dynamically retrieves the privileges from the token leveraging the function...

There is a bug in the function GetTokenIntegrityLevel function which will never returns a SYSTEM IL for a token. While this should be never problematic due to the fact logon...

The IsLimitedUserLogon function is a useful feature that suggests if other more powerful logon are available to the user. The current logic first check some token properties like TokenElevation and...

There are some issues when running the --bypass-uac flag while running from a WinRM shell. It's not clear if the issue is related to winrm itself or 3rd party tools...