mpgn

Add a **C&C server** on the proxy side to send command to the client. The command allow an attacker to know what byte is send and inform the client when...

TLS Padding Oracles - CVE-2019-1559

3

Maybe something to look: - https://github.com/RUB-NDS/TLS-Padding-Oracles - https://www.openssl.org/news/secadv/20190226.txt

Fix exploit on chrome

2

On chrome, the exploit doesn't work because of multiple exceptions that break completely the socket connection. Those errors were not raised on firefox. Edit: fix ```python try: (content_type, version, length)...

Decryption can be parallelize

1

As we can read in the document of the CBC cipher mode : https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Cipher_Block_Chaining_(CBC) > decryption can be parallelized So we can had a level of parallelization to decrypt more...

False negative result when SMB signing enabled

1

When SMB signing is enabled, the test doesn't work properly. I have a Windows server vulnerable to CVE-2019-1040 but the scanner says it's not. But if I disabled smb signing...

Add a check for GMSA accounts and exclude them of specific rules

5

When checking for rules in "Privileged Accounts", two rules are triggered if a gmsa account is found to be in an "admin group" (like DnsAdmin for example). - Check if...

I get this error on Windows 10 > Failed to create outbound Pipe instance. ``` [*] Creating an instance of a Named Pipe. [*] Server Thread with ID: 13796 created....

Bloodhound blank page

1

Hi, When downloading the x64 binary for linux and launching Bloodhound, I have a blank page : neo4j version 4.4.8, the bloodhound from the official repo is working fine 

#252