01 2024 档案

Hackthebox pilgrimage writeup
摘要：Initial Gobuster to discover the webcontents. When we brute-force a directory path, if one dictionary doesn't give us any useful information, we can c 阅读全文
posted @ 2024-01-23 16:18 lisenMiller 阅读(38) 评论(0) 推荐(0) 编辑
CVE-2022-44268 imageMagick LFI
摘要：ImageMagick The ImageMagick is the tool modify the picture. The function of ImageMagick is ELF file named magick. The vulnerability version of ImageMa 阅读全文
posted @ 2024-01-19 15:13 lisenMiller 阅读(16) 评论(0) 推荐(0) 编辑
PHP LFI/RFI Vulnerability attack bypassing remote URL inclusion restriction
摘要：File Inclusion vulnerability In the PHP Configuration,"allow_url_include" wrapper by-default set to "Off" which instruct PHP not ot load remote HTTP o 阅读全文
posted @ 2024-01-17 22:42 lisenMiller 阅读(8) 评论(0) 推荐(0) 编辑
Hackthebox aero windows medium
摘要：ThemeBleed exploit Windows run the Theme.exe which occupy the 445 port.We need to open the services interface and stop the service. 1.Generate the The 阅读全文
posted @ 2024-01-17 11:22 lisenMiller 阅读(29) 评论(0) 推荐(0) 编辑
hackthebox outdated windows medium
摘要：CONNECT between windows and linux Bloodhound Collection Grab the latest copy of SharpHound.exe from the Bloodhound repo,upload it to Outdated,working 阅读全文
posted @ 2024-01-15 11:37 lisenMiller 阅读(16) 评论(0) 推荐(0) 编辑
Pentest
摘要：碰瓷类型 X-Frame-Options 风险名称 点击劫持：X-Frame-Options响应头丢失 风险级别 中风险 风险描述 返回的响应头信息中没有包含x-frame-options头信息设置，点击劫持(ClickJacking)允许攻击者使用一个透明的iframe，覆盖在一个网页上，然后诱使 阅读全文
posted @ 2024-01-10 11:43 lisenMiller 阅读(33) 评论(0) 推荐(0) 编辑
Windows Remote Shadow Credentials
摘要：PyWhisker If we use pyWhisker,we need to have credential. With creds,I can try to remotely run PyWhisker.It fails: python3 /opt/pywhisker/pywisker.py 阅读全文
posted @ 2024-01-09 14:49 lisenMiller 阅读(47) 评论(0) 推荐(0) 编辑
Windows Escalate Privilege HiveNightmare/SeriousSAM
摘要：Briefly Microsoft ensure that a new local escalate loophole. This loophole allow low permission user access the system file of Windows. The user which 阅读全文
posted @ 2024-01-09 11:51 lisenMiller 阅读(21) 评论(0) 推荐(0) 编辑
WSUS EXPLOIT
摘要：WSUS Introduction WSUS is a Microsoft solution for administrators to deploy Microsoft product updates and patches across an environment in a scalable 阅读全文
posted @ 2024-01-09 11:12 lisenMiller 阅读(15) 评论(0) 推荐(0) 编辑
hackthebox escape medium windows
摘要：RECON TLS certificate openssl s_client -showcerts -connect 10.10.11.202:3269 | openssl x509 -noout -text- "openssl s_client" initiates an SSL/TLS conn 阅读全文
posted @ 2024-01-02 09:05 lisenMiller 阅读(8) 评论(0) 推荐(0) 编辑

点击右上角即可分享
微信分享提示